Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier: /ipK4pXmdkq9Z+i+jYo8OxSz22jldWb27eqbqS8HN8A=
Subject key identifier: A3:C0:13:72:5A:4D:DF:25:BB:AA:B1:C4:92:8D:6F:45:8E:D0:E2:28
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 0196C75F05C24D661697A9BF55366B14C33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number: 1537
Signing time: Tue 13 May 2025 02:00:15 +0000
Manifest this update: Tue 13 May 2025 02:00:15 +0000
Manifest next update: Wed 14 May 2025 02:00:15 +0000
Files and hashes: 1: 46jADdHLKU7NIyeYvDkR9sakzHU.roa (hash: byWqvbSSzcE1Xc0qEaXyUWnOp7q2hSYPDvEBq1c3RLI=)
2: ZzBmvMdXYMiQ9bwVHMIzO7s9SmM.roa (hash: sLT+c6scYZ8+Q07xIyxSqYkUzEuyYwiK9vh89QW6tS8=)
3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: ChRNffd+wBYZewG8BAYqFdmThes9tbOSamxDHZQUhG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:5f:05:c2:4d:66:16:97:a9:bf:55:36:6b:14:c3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: May 13 02:00:15 2025 GMT
Not After : May 14 02:00:15 2025 GMT
Subject: CN=a3c013725a4ddf25bbaab1c4928d6f458ed0e228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:4f:29:fe:d6:71:b4:28:be:e5:59:82:15:
62:2b:2f:59:7e:3b:29:49:72:79:61:a2:07:39:86:
da:96:a2:cf:9a:ae:b0:27:13:3a:68:a7:29:2c:ec:
98:74:65:b6:5f:d8:d2:f3:d6:dd:99:0f:3c:6e:c1:
0e:ae:22:6f:42:ba:24:7f:89:60:98:8d:29:01:50:
c3:c3:c5:2a:36:9d:15:aa:aa:43:91:a1:b5:f9:90:
84:ea:35:42:d1:4b:54:8e:e7:13:4a:16:30:d5:d5:
5c:b3:9a:05:9e:3c:73:36:c9:ba:bd:51:30:22:f4:
b6:a1:1e:1d:27:1c:c0:79:f7:11:ec:bb:c7:d5:5c:
b6:1c:96:22:4c:a8:d0:11:0a:7e:71:8d:53:e1:86:
38:3e:0a:73:88:dd:73:00:55:de:16:20:ea:a5:92:
a0:78:9d:75:44:a2:33:dc:19:b5:a4:65:c6:c7:9d:
e2:a8:c6:80:32:40:c2:c0:1c:70:26:5a:f5:ee:2d:
f4:e6:b5:0d:f3:41:be:73:ab:85:61:e7:2e:de:e5:
72:55:c9:12:e9:60:3d:bd:b6:67:7b:57:29:50:f8:
5a:5f:81:72:7b:ea:d4:db:48:ff:89:eb:19:a0:68:
ec:29:01:ae:4f:ff:cf:14:c4:14:8b:46:d5:c3:d2:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C0:13:72:5A:4D:DF:25:BB:AA:B1:C4:92:8D:6F:45:8E:D0:E2:28
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:82:96:e3:6e:a4:b5:1e:7a:65:95:56:58:24:c4:19:50:19:
bb:68:1d:42:7d:a1:c9:c1:7f:20:c7:be:1b:13:8b:2b:5c:04:
9d:0a:8e:48:b7:80:f2:7b:93:41:6a:7b:c3:e7:d1:3b:7c:cd:
e5:78:c6:21:57:8c:be:88:f1:de:c8:11:b0:e9:e3:3b:8b:6d:
29:91:16:64:52:54:2d:f8:1c:82:b4:78:8d:c5:8c:60:49:28:
73:3a:00:50:a5:98:97:e9:e8:a2:48:9b:d1:14:7b:1f:32:e1:
43:ca:f5:d3:66:73:02:08:65:59:08:08:85:71:6e:a1:75:69:
eb:cd:3b:76:57:fc:b1:d8:dc:a6:8a:c5:fe:9c:90:38:08:65:
52:f5:6f:fc:f6:b7:7a:5c:12:27:5a:93:d1:6a:d9:d3:d7:20:
44:98:31:90:de:a9:bd:96:50:99:ae:08:ec:18:f8:19:77:b5:
a2:e5:f6:eb:7b:95:d8:14:19:24:4d:aa:58:1b:06:94:35:65:
bb:e3:32:d0:b8:b9:c6:cc:0b:a3:1d:f7:26:28:0f:a2:dd:4c:
27:b3:31:3f:c8:83:af:65:63:02:61:3d:ab:1c:7d:ac:94:03:
75:d9:a2:46:84:75:43:74:73:bb:42:3c:aa:d5:85:15:6d:c1:
76:28:af:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:13:20 2025 by rpki-client