Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
File: rdbXV2zSgkXGefmvNXXANbiiLJ4.mft (raw, json)
Hash identifier: D0tVYVp91xVkXLDH5CFJuaIBfmg39yKSKP7iSFMoHIk=
Subject key identifier: 12:42:F4:DD:A4:76:3F:74:B5:E1:1E:90:DC:39:86:66:7B:E7:7B:08
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 0196B77E03675BCAF9168BA147683CA453CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 00:00:10 +0000
Manifest this update: Sat 10 May 2025 00:00:10 +0000
Manifest next update: Sun 11 May 2025 00:00:10 +0000
Files and hashes: 1: l7t2iScMgw_Vqqdey3zojLvCFAo.roa (hash: GElb5qawLmwlWjlnnhanimj+W7edI5MOyhH1UzXbSog=)
2: rdbXV2zSgkXGefmvNXXANbiiLJ4.crl (hash: e0lTz+kjG/pQhj+4mgPPl8PLa/rDGb0/uEeCjHr7244=)
3: svKZo3SYe3cv8Mz7OTgmT4eXdPY.roa (hash: hDRuttNUPmkUswD/PN5v7bjO2pBa9L/1t8q5gG/jwI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:03:67:5b:ca:f9:16:8b:a1:47:68:3c:a4:53:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: May 10 00:00:10 2025 GMT
Not After : May 11 00:00:10 2025 GMT
Subject: CN=1242f4dda4763f74b5e11e90dc3986667be77b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:48:b3:37:b0:77:12:6c:4a:3c:76:81:d4:
a4:a7:8d:b3:de:7e:77:9a:aa:2a:6f:83:5d:ea:86:
6b:6b:56:39:c3:fe:30:35:50:2a:19:97:93:13:dd:
82:48:92:7d:a2:6a:1a:68:eb:85:e3:4d:b7:b1:65:
e7:13:b1:db:8e:01:ab:cc:2d:91:93:c5:74:c4:a5:
75:4f:07:62:b2:8b:a1:ae:ee:63:3d:33:04:77:0d:
b3:0c:eb:16:b2:56:61:59:97:f6:5d:57:07:61:14:
dd:02:71:b9:36:26:99:f9:95:1a:57:05:43:db:c0:
9b:66:09:62:cb:93:9f:02:db:6a:64:82:6e:c9:b8:
0f:57:42:c1:c4:5d:17:52:ed:e8:b9:b6:65:fe:6f:
f1:f5:f4:66:93:5c:c9:94:bf:2c:06:d1:8c:58:1a:
ab:28:59:42:31:67:7c:4e:f1:73:fe:a3:78:17:cb:
4c:2b:08:7c:62:9a:8e:04:c8:aa:9b:e1:86:7c:44:
d0:01:31:f3:04:2d:8e:06:6f:9a:5d:39:07:42:d0:
c1:f9:a1:6c:b7:2d:c0:91:41:dc:21:42:3e:c0:55:
6e:06:99:3d:54:4f:8b:d9:ca:dd:9f:cd:f6:4b:fc:
5a:ba:ae:e1:c9:0d:ca:5f:4e:9a:b4:3d:a5:6f:c7:
b0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:42:F4:DD:A4:76:3F:74:B5:E1:1E:90:DC:39:86:66:7B:E7:7B:08
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1e:7c:eb:8c:a0:05:4e:86:6f:85:bb:5a:1f:f6:4e:7d:bd:
75:0e:2a:30:dc:f8:5a:8a:17:5a:ce:82:d7:34:22:2d:d4:74:
2d:8e:13:f8:39:fb:32:94:be:d9:e6:12:59:35:b4:01:e3:b7:
eb:31:ca:51:f8:06:45:09:2b:eb:a4:ec:61:86:22:0c:1e:c9:
bc:e0:25:1d:db:99:db:94:8f:a0:5e:1b:84:20:0c:9e:99:e0:
24:0a:b7:f9:fb:42:54:9c:fb:84:eb:30:69:2c:4f:4d:35:85:
fc:ff:3d:2c:f1:ea:72:83:90:44:4b:d5:17:73:e3:8c:8b:8f:
71:b4:6b:f8:f3:30:a7:94:6d:bf:8c:d6:74:c0:04:ce:d9:ab:
a4:2e:d5:19:0b:80:c8:47:0a:ad:d5:89:05:17:23:14:19:43:
0e:23:4a:03:1e:58:66:39:25:85:98:d6:90:13:25:47:98:9b:
c3:07:0d:bb:9c:16:82:cd:5c:d8:f4:cf:50:f1:39:24:34:20:
06:64:1a:5c:26:2e:6b:6a:8f:92:38:b6:c0:9e:2d:da:58:b1:
4d:86:71:35:d2:67:a3:9f:16:82:5f:07:b8:83:31:34:a3:ef:
73:12:71:d7:ea:04:3c:d3:e4:81:5e:cb:35:7d:d1:d8:bc:47:
f5:78:74:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:16:12 2025 by rpki-client