Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
File: d73XXy78JE-GoyGxUOYpNqFAKds.mft (raw, json)
Hash identifier: cGlHvDBC9QKv+6uN2Z8a11QfYMCKqI9HIQuK8TZK9cY=
Subject key identifier: 54:F6:53:55:24:92:0F:C1:34:8A:57:5D:F2:D3:9E:AB:FD:58:C4:7C
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Certificate issuer: /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial: 0196B6A2BF039EFD587E2D7271633AA27299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 20:00:41 +0000
Manifest this update: Fri 09 May 2025 20:00:41 +0000
Manifest next update: Sat 10 May 2025 20:00:41 +0000
Files and hashes: 1: GAo7ZduAV60PzhY9o_GDH21ot64.roa (hash: L65aKQ/diSXQMwJ1Sh2UT0BCtlwKc371uG33rtI8OVw=)
2: YnJ26bGDXX1huMvr8EfEnzAcB78.roa (hash: k0PljRyemCupKRxSVAifU5D7QGL/CooV0WFr/NbUXsk=)
3: d73XXy78JE-GoyGxUOYpNqFAKds.crl (hash: YO7UBF5BZf7zL0FZTYOAz5qt44kKJBCI89Mgi6jEG8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:bf:03:9e:fd:58:7e:2d:72:71:63:3a:a2:72:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
Validity
Not Before: May 9 20:00:41 2025 GMT
Not After : May 10 20:00:41 2025 GMT
Subject: CN=54f6535524920fc1348a575df2d39eabfd58c47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:43:2a:bd:ab:cf:c7:c5:62:8f:2f:32:8e:58:
06:e4:2b:91:49:d0:27:e4:63:4c:cd:8a:1c:4a:e1:
61:54:d8:58:46:b3:3c:3b:01:0f:28:68:d9:1d:9f:
49:de:ff:72:0b:b0:34:6f:1c:1f:9d:d9:68:93:c1:
30:e1:77:ad:43:54:e5:30:7f:5d:a3:7d:97:9c:64:
59:b4:45:66:54:83:e0:1e:a1:ad:4a:90:2f:42:e7:
62:75:67:e3:48:b6:db:ce:43:8a:b8:db:ed:8f:e1:
06:d7:a0:30:72:cd:73:bc:06:94:aa:ad:77:f3:4f:
b2:12:99:00:3e:8e:55:2a:7f:b2:ae:52:eb:9c:d8:
1a:85:27:d8:32:8f:87:d5:13:90:15:1e:b4:0f:1b:
ec:f5:5e:92:3d:d3:e2:70:f9:c9:32:3b:40:6d:fa:
62:63:11:85:9f:e4:4b:a6:19:d7:21:53:43:a2:fb:
bf:92:e5:a4:e8:82:e1:a3:a8:a1:92:7e:a3:e2:1d:
a5:57:f5:f1:12:4a:85:82:33:69:98:07:de:7b:83:
79:ff:cd:31:e6:d4:ba:99:03:c4:66:17:b3:65:dd:
5c:77:29:f0:7c:18:71:5b:61:25:82:d1:c5:ed:37:
02:03:61:e8:e8:15:6f:75:77:8f:39:e2:2a:78:63:
22:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F6:53:55:24:92:0F:C1:34:8A:57:5D:F2:D3:9E:AB:FD:58:C4:7C
X509v3 Authority Key Identifier:
keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0e:33:06:9e:bf:0b:ec:76:78:25:8b:e3:08:51:d5:68:3e:
a9:07:35:df:5d:13:57:23:79:68:27:30:7c:0a:f9:fd:2d:c7:
d3:46:1d:17:c3:5b:e9:16:11:db:a0:5c:dd:a5:36:23:82:ee:
be:dd:68:55:71:4d:42:d6:27:8c:48:36:65:ec:0d:91:7c:91:
9e:8a:42:09:61:18:95:39:e5:76:bf:c7:b3:1c:62:0d:37:f8:
bf:fc:4b:d1:ad:f3:e2:9a:07:e8:23:6f:21:a5:b9:8d:ba:15:
ec:ff:e7:e9:53:d6:97:fa:2a:2b:1c:20:a3:aa:5c:ef:72:fb:
a5:5b:6a:af:fe:39:5d:7e:71:8a:7a:28:d3:9b:d9:a1:83:69:
98:2f:30:a8:0e:84:04:ac:cc:4c:2c:bf:a3:01:93:0a:45:52:
77:8e:b4:6f:95:20:c3:d1:ab:b3:5a:eb:10:a5:42:6c:6a:19:
67:9b:06:09:35:ff:32:e9:ce:b7:be:8b:43:44:d9:24:3d:0c:
0d:6c:a0:89:44:a3:74:c2:c3:fb:1b:83:14:d0:a6:58:88:d0:
cf:56:82:f1:ca:4c:f2:83:41:45:41:c7:ac:b2:21:4f:1d:cb:
fb:5b:6d:e4:30:f8:e6:6b:b3:05:9d:d8:60:e2:83:0c:61:c6:
4b:85:d7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:19:24 2025 by rpki-client