Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
File: dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft (raw, json)
Hash identifier: gB568r+M2P/3qLineH0TEMAu0hLeiQVHtJ3VvETeMe8=
Subject key identifier: AA:73:86:27:C8:F8:8E:55:DD:33:23:76:46:A4:E7:2E:58:4E:20:53
Authority key identifier: 75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
Certificate issuer: /CN=75535bade37a3d6fc380442a285e157b984ca91d
Certificate serial: 0196BE5CA8C0D1EEB1233C3F4233B550721F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 08:01:05 +0000
Manifest this update: Sun 11 May 2025 08:01:05 +0000
Manifest next update: Mon 12 May 2025 08:01:05 +0000
Files and hashes: 1: 3DXXEnpw8Kq8exXKbL27_UtPX4M.roa (hash: PH+r8FXGuNWkdvccxwTfvbjUFdbtdPYMtKDMmyDHBUw=)
2: dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl (hash: 8xqjFSx2wLOLoGzxYQ/xBvkydcnh4g9XACVw6E7aOFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:a8:c0:d1:ee:b1:23:3c:3f:42:33:b5:50:72:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75535bade37a3d6fc380442a285e157b984ca91d
Validity
Not Before: May 11 08:01:05 2025 GMT
Not After : May 12 08:01:05 2025 GMT
Subject: CN=aa738627c8f88e55dd33237646a4e72e584e2053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:2e:f7:54:5a:78:e5:21:7f:18:58:15:4e:
d2:de:60:4e:26:ee:2e:03:a3:95:5e:b6:3d:ef:e2:
eb:6c:01:3e:4b:8e:15:8a:99:15:b3:41:fe:6f:49:
5f:2e:2c:0b:cf:3e:99:da:c6:52:17:74:a4:2d:2a:
55:38:5d:da:63:90:f2:da:08:94:f2:d8:60:2c:45:
82:bb:ee:1e:38:4f:86:b0:de:77:93:54:30:6b:f1:
0f:36:18:cf:d1:ed:7e:57:e8:ed:11:07:53:ac:4f:
f1:ce:f6:30:77:70:31:18:ef:2c:98:b1:71:72:04:
7c:64:1a:52:dd:28:47:f1:af:7c:7b:4d:96:64:f5:
0b:e7:95:03:b1:ed:5b:96:07:86:eb:71:7e:ca:f8:
f0:36:b7:8f:0f:eb:b5:16:8b:12:16:2b:6b:d6:fb:
87:d1:bc:2b:33:00:47:f5:0c:79:6f:ae:b0:60:c0:
b2:3c:13:a2:d2:2a:d8:eb:93:cc:5b:e8:ec:7e:c1:
02:c7:f0:01:45:98:47:af:64:d3:7f:1b:2e:11:af:
04:30:06:13:f2:2d:72:9d:f9:e0:d9:9b:b9:b1:8f:
ca:79:1a:ca:22:a0:d8:a4:59:e0:d9:bf:53:25:aa:
78:f5:7b:99:5d:41:2c:18:f2:6f:2b:16:bf:a2:8b:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:73:86:27:C8:F8:8E:55:DD:33:23:76:46:A4:E7:2E:58:4E:20:53
X509v3 Authority Key Identifier:
keyid:75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7e:2e:e3:b9:3a:12:bc:51:6f:bf:b6:22:f1:9c:98:ed:2e:
24:0c:1a:f7:f5:7f:8c:6c:cd:ab:1c:03:13:39:ea:bf:83:eb:
e8:70:a7:44:2c:ad:d7:6e:a4:c3:67:13:9c:82:4f:ca:08:c3:
af:ac:77:a6:21:0f:16:7c:76:d2:4c:c6:bf:e1:78:79:53:4b:
be:0b:b9:e8:e3:25:dd:e9:4c:b2:3d:ae:89:4f:07:b6:c4:18:
a2:0f:79:07:5e:9a:ed:0a:b4:08:72:e3:92:fb:35:fb:93:1f:
f8:01:2e:e0:f0:bc:12:71:e6:9e:51:8a:c3:fc:ca:b2:77:4b:
39:2d:da:fd:5c:e9:a6:cf:60:c7:ce:a5:00:96:35:be:77:b6:
03:1e:94:b7:25:58:56:26:4f:f1:7b:61:ee:c7:f9:ca:1d:ac:
3f:09:cf:5c:6d:5e:04:d9:84:f3:c2:85:4c:6d:8e:ab:6c:e5:
56:34:a9:98:cb:ad:1c:28:a5:88:4f:d2:94:2c:83:65:20:04:
f2:03:ad:8b:ef:3d:d9:d3:d4:4b:17:af:31:8c:92:8e:93:a9:
cd:86:fd:49:9a:65:ac:9d:87:02:27:d5:fd:51:ca:82:67:9a:
54:a1:5e:ea:e6:68:7a:04:42:a4:ee:61:6b:ad:08:49:91:e8:
53:08:62:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:39:43 2025 by rpki-client