Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
File: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft (raw, json)
Hash identifier: 6J5/pdp3W5DsoDuLkjGUyZeRS3rhJ+vo4z+M6z3Pcuk=
Subject key identifier: B6:FB:A7:DE:E8:5C:AF:1C:93:6F:A1:E1:F9:35:E3:57:1F:D2:DF:BB
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 0196BF6F1807B5135587471F0D085CBEEE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 13:00:50 +0000
Manifest this update: Sun 11 May 2025 13:00:50 +0000
Manifest next update: Mon 12 May 2025 13:00:50 +0000
Files and hashes: 1: 1-TOVnm2gd04tI-uLivEABR6Pazo.roa (hash: QVp2c0LkMSwloi3MOMCG1fyuxaPczwJ3tn0nHSxmhjE=)
2: HgA_tKLG5N3ASR5gcHl20EupVRE.roa (hash: DRYtmqvkH/s26hespCVF8HpGzgqR1cL88tvUFROmz9s=)
3: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl (hash: YsECG8+cH75FuHjy+BSpgzaQMGZA3Rqsh+Am+pdncm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:18:07:b5:13:55:87:47:1f:0d:08:5c:be:ee:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: May 11 13:00:50 2025 GMT
Not After : May 12 13:00:50 2025 GMT
Subject: CN=b6fba7dee85caf1c936fa1e1f935e3571fd2dfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:64:3c:eb:23:bc:cc:25:cc:5a:9b:6b:09:
ad:15:01:42:62:b1:d3:78:a6:7c:ef:5a:bd:f1:24:
e1:61:fc:0c:9c:77:f5:e4:92:e6:74:78:6a:ef:9e:
2c:04:56:7f:48:c7:c6:37:ea:6e:a3:42:e5:49:df:
77:3c:ce:95:3a:28:60:a6:ec:9c:23:08:bf:ea:fd:
80:7f:e1:1e:84:f4:4b:41:84:40:55:4e:10:a6:f8:
94:57:6f:b9:8f:6b:bf:93:2b:76:38:a9:41:15:94:
fd:14:da:76:d3:d0:9f:75:13:59:6f:8c:ad:f6:60:
75:55:2f:a8:f9:7c:8e:cc:74:3a:60:35:05:72:e8:
c6:6b:e5:ef:68:29:c0:37:c5:40:26:6f:b1:e9:44:
2a:7c:6b:f8:d2:fb:77:3b:27:94:82:a5:48:c9:43:
72:73:7a:6d:a7:0e:c5:0f:78:b3:52:df:95:69:0f:
ba:cf:0b:84:1c:b4:67:75:e7:2f:e7:99:5e:56:91:
b0:40:d3:1a:e9:92:c0:e1:a8:52:93:cb:72:70:2f:
35:59:e9:18:e7:9f:08:5d:d9:98:c3:ae:95:29:63:
36:f0:6b:c5:e5:6d:83:88:9c:52:9e:0b:2f:dd:80:
31:f0:d9:79:8e:d1:3e:2e:92:5c:7d:0c:25:d8:d3:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FB:A7:DE:E8:5C:AF:1C:93:6F:A1:E1:F9:35:E3:57:1F:D2:DF:BB
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:89:9f:46:7f:a6:7c:7a:b6:be:71:74:ae:7f:f3:9d:c5:01:
5c:a3:9b:e3:4b:91:ab:84:db:a5:e9:a8:3a:0c:da:b2:d7:d3:
87:41:8d:7e:15:72:e2:a6:0e:cf:5c:26:43:95:5f:8e:64:5e:
08:d0:6d:71:64:fb:c9:5a:0c:42:9d:1c:32:49:06:35:1c:1f:
62:1b:de:0e:28:01:81:02:98:d8:a5:f0:69:86:7f:6a:ef:b2:
55:f9:3a:03:e1:9d:35:2f:88:c1:22:b2:d6:4e:87:54:03:29:
22:0a:f1:1b:2b:33:e4:15:18:8c:5d:c8:29:cb:9e:9d:1b:fc:
05:e8:60:16:5c:04:08:c9:62:97:bb:ef:57:1f:05:e0:cb:71:
15:20:fc:89:7b:4d:fd:df:61:c4:c7:00:90:0a:ba:49:e7:5b:
cf:42:a5:ac:3a:ec:66:7d:fd:62:7b:34:9f:ea:9c:64:4f:78:
f7:68:73:78:ed:d7:eb:f6:77:ea:4c:2d:f6:b0:0a:62:85:28:
a2:84:ac:84:ef:3a:62:7c:d0:d6:f8:f1:ad:f3:29:c3:09:c8:
3a:7e:83:b7:1e:d5:60:28:eb:3f:ad:08:f4:ed:50:90:57:c8:
bc:b3:81:87:26:f2:25:ac:1b:11:bd:58:b3:38:8d:79:1d:83:
7c:60:52:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:54:08 2025 by rpki-client