Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
File: djNetjP3aUK76Z8Smh64ik1z_Hw.mft (raw, json)
Hash identifier: ClTW3NCdhYE7YswhWXqslfRD3EYmCTSGuAhCUeBRjBk=
Subject key identifier: D9:98:61:88:F3:0D:01:14:C9:31:44:A1:65:E4:B5:6F:0C:10:2D:7D
Authority key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
Certificate issuer: /CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Certificate serial: 01969E9B351B9B908872D401E8EDFAD8BFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 04:01:33 +0000
Manifest this update: Mon 05 May 2025 04:01:33 +0000
Manifest next update: Tue 06 May 2025 04:01:33 +0000
Files and hashes: 1: djNetjP3aUK76Z8Smh64ik1z_Hw.crl (hash: KLaIt6IhnjR2CFa3xlGOz8LX7FYGCxENIBtGLgQxoUQ=)
2: qv1Sau3fL4G3RgHjzDZHci6uI6I.roa (hash: ET2wfrNdhyfoM3NLg7fIoXPxXSHceauvtrVyaQ0oOdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9b:35:1b:9b:90:88:72:d4:01:e8:ed:fa:d8:bf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Validity
Not Before: May 5 04:01:33 2025 GMT
Not After : May 6 04:01:33 2025 GMT
Subject: CN=d9986188f30d0114c93144a165e4b56f0c102d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:af:86:63:c6:31:db:3c:ba:d6:ca:1d:e6:
da:d2:28:83:69:28:84:66:d6:a4:e9:3a:eb:d4:88:
57:8b:b9:1e:a3:df:bd:4e:3e:8f:8c:bb:cc:9b:01:
30:a4:cf:99:ab:70:2b:96:2e:3e:47:f8:08:d9:da:
51:0e:9d:a2:52:f3:a6:db:f2:44:58:68:a0:ed:5d:
85:5f:90:57:9f:39:00:42:14:0b:4e:9c:7e:06:87:
26:8e:f9:86:bc:e7:69:d7:ce:c6:67:ca:7e:c9:94:
0f:f1:86:fb:06:6d:12:15:7f:b8:d3:36:a6:6c:f9:
23:eb:d1:32:cd:fb:aa:af:6a:e5:07:55:87:b7:aa:
fb:18:85:93:80:38:d4:c2:5d:52:57:c2:82:82:ca:
d7:0a:a1:f8:cd:b4:16:db:7d:b2:cc:2d:11:b5:68:
04:92:00:03:59:46:fa:0f:d6:f9:1a:ff:b4:57:13:
b1:29:7b:ee:b3:dd:ab:ac:07:d6:71:d2:17:1e:ee:
49:d0:09:19:75:86:9a:ca:73:34:ad:d8:d9:e5:90:
80:60:a5:5d:88:41:d7:a3:6e:b4:bc:d5:83:19:f3:
1c:a5:a5:72:7a:18:01:ee:d7:bb:47:2e:49:39:e0:
00:17:b8:4a:5d:1f:50:82:e0:cb:92:57:2e:8c:7c:
8e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:98:61:88:F3:0D:01:14:C9:31:44:A1:65:E4:B5:6F:0C:10:2D:7D
X509v3 Authority Key Identifier:
keyid:76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:87:24:46:d6:37:2e:55:aa:c9:c0:f6:9a:fb:38:21:1d:5a:
4a:d7:62:b4:7d:07:1e:b3:ba:0c:ec:41:07:a1:57:f5:df:25:
34:86:b2:5d:98:58:35:13:2c:8a:4e:a9:72:ef:5a:bd:89:d8:
66:91:3d:08:62:9e:61:1f:42:0b:af:4d:f3:74:53:f1:bc:f0:
71:ee:ea:22:4f:ab:68:ae:ce:af:6e:af:01:96:2f:5b:95:ac:
09:64:41:ba:95:67:6d:e4:af:62:fa:4a:76:f1:7c:5a:17:45:
62:d1:8f:e6:19:88:cd:7b:fc:a6:0e:fb:86:b9:c8:b4:80:9c:
96:22:35:37:85:ce:df:58:11:30:17:34:31:74:f8:42:f6:69:
6d:52:4d:6e:3e:ab:fc:49:17:31:61:7f:3c:72:50:4b:29:56:
45:ec:7e:2a:e8:53:58:8f:e4:25:2b:90:eb:5b:14:48:1e:e1:
91:be:d6:97:5d:3f:ee:ff:a9:fb:1e:13:c9:fa:86:8f:c3:84:
4f:83:58:c9:7d:47:2b:ee:95:65:17:6d:22:51:73:57:e3:f3:
34:e7:bf:1c:c6:ee:c1:bf:a6:25:88:3d:25:65:f6:37:a2:e0:
a0:02:6a:be:73:9d:50:33:cf:46:7a:d6:d6:41:e7:e7:d9:30:
d5:98:27:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:00:19 2025 by rpki-client