Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
File: dHIvFqh8_9eP15BQVoobTJWbEiQ.mft (raw, json)
Hash identifier: HkVHekXHMaonYLKgdnCVL4i0ZutCmNMfrN+rBSnip5o=
Subject key identifier: 19:D5:73:1D:CA:5A:0B:E7:27:76:17:2B:E8:6E:60:54:F9:6A:6F:6D
Authority key identifier: 74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
Certificate issuer: /CN=74722f16a87cffd78fd79050568a1b4c959b1224
Certificate serial: 0196B36AA898D06D84F5D43CE9D1037288C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
Manifest number: 04D4
Signing time: Fri 09 May 2025 05:00:33 +0000
Manifest this update: Fri 09 May 2025 05:00:33 +0000
Manifest next update: Sat 10 May 2025 05:00:33 +0000
Files and hashes: 1: 7ZY1Q8mS5q8z2UfLPJc5K6uKZQo.roa (hash: jj4WM2xy5po+h+orIYLAd72AyCd84wAZcTm4AiOOtow=)
2: dHIvFqh8_9eP15BQVoobTJWbEiQ.crl (hash: MPk7TWE7JweFIm2OCKNCZ9d6x2IVMgSzADHJ8s1ukOA=)
3: umqBfoDDAK3jbRiLn4CC-iVGvHg.roa (hash: XnoyZYelLC2MdNI+4AYsdN08BX8Cvr0ms42chjRPStA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:6a:a8:98:d0:6d:84:f5:d4:3c:e9:d1:03:72:88:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74722f16a87cffd78fd79050568a1b4c959b1224
Validity
Not Before: May 9 05:00:33 2025 GMT
Not After : May 10 05:00:33 2025 GMT
Subject: CN=19d5731dca5a0be72776172be86e6054f96a6f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ef:86:17:39:2d:8d:78:1c:10:dd:f3:9e:f0:
ec:a3:72:05:40:a4:ef:58:0e:55:4d:55:5e:f1:f7:
2f:71:78:02:57:e3:8b:4c:07:da:49:64:35:18:02:
08:4d:f4:69:b6:fb:a4:57:90:9e:3d:00:31:4d:5f:
ba:9c:c6:69:66:7a:3b:31:9d:40:59:da:4b:66:c5:
eb:86:0c:bb:b4:bd:59:25:7d:57:8e:c1:b7:d7:6c:
f1:0d:31:8d:47:c4:3d:ce:8c:1b:55:a6:c2:64:24:
05:40:47:23:29:90:a4:eb:5f:a7:2e:a6:22:4d:42:
ec:2f:be:65:a7:9f:04:c3:e6:72:af:d9:57:e6:8c:
c9:da:75:50:ed:73:9d:b4:f8:82:af:2a:45:5a:b7:
cb:ca:5e:22:98:4e:00:a2:75:fe:69:be:5a:7c:5a:
60:d0:64:b1:ac:48:e0:57:63:29:82:dd:54:14:44:
17:13:c1:c6:30:8d:47:db:81:b3:3d:ad:4a:e4:b6:
ef:8c:1d:54:24:38:41:83:d6:bc:51:b9:32:eb:c0:
6c:bb:cc:98:df:e3:0f:6b:a4:b3:07:5d:79:d0:f4:
31:09:72:f3:b5:39:b6:cc:63:73:f2:89:50:02:07:
dc:9b:59:76:7a:86:fd:d1:c4:f8:c4:77:91:3c:c9:
aa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D5:73:1D:CA:5A:0B:E7:27:76:17:2B:E8:6E:60:54:F9:6A:6F:6D
X509v3 Authority Key Identifier:
keyid:74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:55:7d:64:db:6d:31:96:30:d2:45:a1:1b:f0:c5:94:fe:0b:
ab:38:f7:5b:78:be:f8:e4:ea:74:dc:1a:d3:cc:71:81:77:b0:
5b:78:b2:06:eb:18:59:b0:ae:e5:46:e4:94:21:83:eb:e1:ce:
fe:c1:90:b4:e8:27:00:a5:1f:69:60:46:db:d9:09:0a:71:22:
2b:98:bd:0b:07:c7:b4:ec:52:16:81:10:1d:ee:3b:4c:cd:4c:
68:43:7c:f6:65:7c:43:98:05:89:14:fe:8d:92:5e:cd:42:e6:
b9:fd:44:8f:e9:65:aa:04:90:2a:95:ee:b1:13:8d:d1:d4:70:
cb:42:bb:fe:bb:30:49:f6:de:d3:d4:57:e2:ae:fa:ab:01:68:
ee:59:cf:aa:23:f4:cf:f7:91:ce:a4:82:6f:8b:61:e4:99:6c:
f4:52:34:26:f8:21:9d:8f:9f:66:90:a7:02:62:49:84:c5:b8:
1b:88:91:ae:bb:4e:7e:cf:ec:4b:9d:02:1f:b6:45:b0:46:e7:
78:ef:9e:c1:0b:a7:de:31:11:76:1f:3f:7b:17:72:23:5e:95:
12:f1:ad:a7:ee:ee:0c:84:17:1d:54:7b:2a:ac:54:36:8b:dc:
a2:59:38:bb:c7:d5:0a:ce:3e:f4:eb:f1:14:08:3e:91:29:04:
1b:20:9d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:52:05 2025 by rpki-client