Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
File: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft (raw, json)
Hash identifier: kx3qlYgNrpzgCsSuLqJNwh72GoiKebQOy1OkF7P9WYA=
Subject key identifier: 7F:BA:D5:63:04:F3:C5:5D:70:B0:E7:38:2E:CD:CD:A0:7D:FC:55:E1
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial: 0196A3C0E68C2195D8A9A86B63AC924E251E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 04:00:50 +0000
Manifest this update: Tue 06 May 2025 04:00:50 +0000
Manifest next update: Wed 07 May 2025 04:00:50 +0000
Files and hashes: 1: 1-y1Ne5UH69xAclnQXN8UNFZ6fbA.roa (hash: DMlPQL5W5NIfofMivrzJcYQP+Q8OdiiG+2ZjJ0SbGWs=)
2: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl (hash: KCb52Jjos2oF+hOk8gsFmU6G7LWx7mCZMpLAOBrNmfs=)
3: gP1adqpN3jFkt9OdAVoyA-6IhBE.roa (hash: LIhJSQT5pr5zAf/JFHVd3amDAMZCN7LCkj2NZQ4RFrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c0:e6:8c:21:95:d8:a9:a8:6b:63:ac:92:4e:25:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Validity
Not Before: May 6 04:00:50 2025 GMT
Not After : May 7 04:00:50 2025 GMT
Subject: CN=7fbad56304f3c55d70b0e7382ecdcda07dfc55e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:95:af:8a:a1:6a:30:f1:7d:15:82:7e:a9:
12:ff:44:17:cd:b9:16:09:44:af:78:e3:db:5e:d8:
26:7d:6d:ef:e6:68:07:90:e5:06:0b:ac:03:a9:57:
ab:ae:2f:4a:a1:b0:42:a5:8a:74:ad:fc:05:9f:43:
e6:3a:a6:6f:aa:63:fe:41:81:89:75:e9:ec:d3:13:
0d:ab:a5:e7:73:e0:ca:48:12:f7:92:79:00:bb:2e:
07:fb:31:6f:8a:41:17:80:08:71:aa:b8:23:d1:50:
ef:1d:7a:cf:2e:41:e4:3b:28:88:18:bd:5d:ab:f2:
38:db:7a:14:3b:9f:50:b6:fb:15:d9:f2:8d:c2:62:
d6:b9:2d:b0:fa:8b:0f:0e:c1:22:18:c8:6d:7a:94:
71:39:dd:05:51:e2:d2:9a:1c:61:ca:cc:4f:fe:8c:
59:e8:46:bf:51:5b:20:8a:30:76:3f:9e:8f:47:91:
b0:b5:d5:05:1c:b1:5d:a0:8a:f6:19:1b:f9:27:3e:
f3:73:eb:65:7b:00:b2:f5:76:01:fa:96:3f:84:de:
ec:67:5c:ca:d0:5f:99:d6:6f:04:8d:e1:02:4e:6c:
78:1d:34:e1:48:2a:d6:51:b9:77:33:95:fe:de:e9:
0a:20:7c:58:0a:a6:76:89:f4:04:f9:e3:ed:0e:ae:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BA:D5:63:04:F3:C5:5D:70:B0:E7:38:2E:CD:CD:A0:7D:FC:55:E1
X509v3 Authority Key Identifier:
keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:01:4a:9a:9c:ed:a0:02:f3:d8:0b:b1:16:7c:60:fd:82:ed:
27:19:a4:92:7d:4a:1a:78:ee:c2:ed:39:84:d5:34:e7:55:50:
d5:37:78:38:c2:00:52:76:62:08:c2:84:e5:ba:7c:d5:6e:9c:
8f:ea:b5:f8:56:c0:5c:d5:8a:43:89:30:ed:d0:b1:5d:d4:72:
87:19:e6:cb:ce:54:a8:cc:85:7b:c7:8f:b0:20:67:c0:6e:d3:
ca:df:d3:30:31:4f:4c:8a:22:a0:4e:f9:55:ff:db:30:00:92:
6d:f4:95:e5:9f:1f:75:38:9e:9b:fb:8f:66:86:48:db:6b:b6:
99:04:cc:df:df:5d:c3:52:65:8f:e1:bd:5f:a9:83:11:6d:d8:
88:50:4a:3a:b4:6f:12:1d:7a:36:46:40:ab:1a:f9:13:ac:19:
42:8f:5d:30:ba:36:38:38:2a:2e:f0:ff:10:aa:d0:da:5f:17:
b8:60:17:4a:eb:14:8f:db:21:19:c3:aa:d6:5b:b1:25:c1:c0:
18:91:d6:b0:35:b9:7d:01:8e:ca:ef:08:78:aa:46:7d:dd:9d:
0b:ad:39:7c:b3:5f:d4:47:b4:c9:68:c0:3f:5f:f9:2c:74:03:
71:36:87:1d:71:c6:aa:c4:26:5e:ee:91:d6:eb:13:9f:67:1f:
2a:b2:59:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:59:54 2025 by rpki-client