Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
File: DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft (raw, json)
Hash identifier: EZFZJo6kBkfjumgg1FfACZ/brY1cxi7olVwun4Tcf9Q=
Subject key identifier: CB:7D:99:F1:0A:16:C4:32:66:8C:3D:3D:54:C1:D1:B0:53:90:7B:49
Authority key identifier: 0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
Certificate issuer: /CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Certificate serial: 0196BDB72FBEDDED6A70CB5628FD2611672F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 05:00:21 +0000
Manifest this update: Sun 11 May 2025 05:00:21 +0000
Manifest next update: Mon 12 May 2025 05:00:21 +0000
Files and hashes: 1: 27P-M6RaZradAhI02XRCxNJRajc.roa (hash: tTsvmnH5D7n+aX14SSx07+7ZXmYT0c1J8AfGLOoiThg=)
2: DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl (hash: ZAKqRpK+8MNaJLBv9Gsa32O7MLxwTKLpX4YV1FFjwQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:2f:be:dd:ed:6a:70:cb:56:28:fd:26:11:67:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Validity
Not Before: May 11 05:00:21 2025 GMT
Not After : May 12 05:00:21 2025 GMT
Subject: CN=cb7d99f10a16c432668c3d3d54c1d1b053907b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:4a:b7:52:c7:12:6b:ef:36:68:18:90:5a:
3c:40:56:43:b5:ee:b5:df:5f:ff:22:7a:89:83:96:
59:0d:7a:30:96:85:c8:37:24:ad:d6:2f:64:c0:1c:
04:b6:72:fa:4a:50:1e:f6:e7:ce:8e:e3:d0:6f:0b:
dd:fb:b4:70:4e:78:61:0a:cb:45:04:98:a1:ab:0a:
30:f2:12:33:89:6a:d4:e4:f7:82:46:d4:a2:dd:49:
11:be:0e:8a:a0:4f:d9:1f:2e:10:ad:04:b0:e0:22:
04:64:a6:76:77:bf:6a:7e:c4:1f:e3:88:2a:09:c0:
a4:04:14:7c:d9:9f:fa:1a:c8:86:48:9f:2d:33:d1:
ce:19:23:05:26:87:4c:f4:15:8b:9a:d9:7e:08:bf:
99:eb:be:a1:20:a9:ac:f9:91:ce:f0:ac:b6:4d:1f:
0b:ff:1f:cf:6c:e0:87:0e:d1:19:94:cf:df:08:6b:
a0:2d:59:cd:da:c4:65:b6:7a:bf:4c:60:69:40:c5:
58:1d:7a:25:0e:52:19:cd:fe:4c:de:0f:68:09:b5:
0e:73:24:d4:8c:1d:86:4e:b5:16:ef:e5:29:66:c6:
c4:af:5b:e0:43:5d:fa:39:ec:aa:3f:aa:63:27:e0:
55:43:ea:65:6c:72:f5:fc:20:9e:06:90:c2:85:9c:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7D:99:F1:0A:16:C4:32:66:8C:3D:3D:54:C1:D1:B0:53:90:7B:49
X509v3 Authority Key Identifier:
keyid:0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:09:7c:ec:be:ae:33:35:53:de:40:2d:50:f0:6d:62:2c:5f:
40:6e:47:82:07:d3:e4:e2:74:5a:70:68:ef:a0:e4:1d:e1:9f:
d8:57:37:df:84:50:f1:0c:5c:d3:c9:f4:bb:55:8d:51:bd:e2:
e7:6c:64:05:eb:23:35:c1:5e:94:87:5a:78:1e:4b:c1:f1:23:
22:38:e8:0e:ee:9d:d0:db:b1:49:50:e7:27:d6:02:4c:93:05:
40:73:b5:47:66:82:45:6b:67:10:3e:f0:cf:92:f8:a6:2e:bc:
fb:50:ad:e9:0b:16:24:51:8d:b7:fd:1e:d9:c2:f3:06:50:e4:
26:e9:34:7d:cd:0e:d9:59:a7:6c:f6:db:61:f8:bb:a1:58:0c:
0b:8f:8d:a9:e7:54:6c:cc:4a:c3:5e:6c:f2:bb:db:4f:e3:86:
48:f9:7f:4a:c4:32:ba:5a:cf:4d:1d:71:cf:a5:66:ba:5e:c2:
2a:a6:23:76:9e:84:0e:1f:3b:5c:6b:f3:bd:96:bf:3e:fd:bc:
c0:45:94:25:a5:e8:56:a4:ac:85:4e:7e:e9:3a:36:0e:e9:96:
1f:d1:fa:0c:98:eb:81:b9:fd:42:67:72:d6:40:34:76:e1:38:
4c:7b:20:9b:8b:3f:66:d6:cb:d6:47:cb:51:c9:02:f2:ea:37:
12:39:7f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:47:40 2025 by rpki-client