Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
File: duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json)
Hash identifier: tiENb1N3msBeGojUtmMmXcPrFQGhWIFlHOaLaC0lVBc=
Subject key identifier: D9:CA:F3:E2:7F:FF:5F:4F:C9:ED:F6:5F:81:49:2A:44:7D:54:9A:D3
Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
Certificate issuer: /CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Certificate serial: 0196C4276EDECE863F101D4DE07B21A1362D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
Manifest number: 14C6
Signing time: Mon 12 May 2025 11:00:40 +0000
Manifest this update: Mon 12 May 2025 11:00:40 +0000
Manifest next update: Tue 13 May 2025 11:00:40 +0000
Files and hashes: 1: 1-eNfPNgGjJz34a_6zifXZRNCWXw.roa (hash: BrqTM2h6iG7WyfhfDjhQFT8qhh74OvrPhMC05Ggy8tQ=)
2: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: /jYjV7BdgQyzYWPUWeMwyU+PsSSwIE2Sb1gFs4ZqPVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:6e:de:ce:86:3f:10:1d:4d:e0:7b:21:a1:36:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Validity
Not Before: May 12 11:00:40 2025 GMT
Not After : May 13 11:00:40 2025 GMT
Subject: CN=d9caf3e27fff5f4fc9edf65f81492a447d549ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:d9:0c:aa:7e:47:68:a6:b7:81:3f:2c:37:
60:20:8c:bb:3b:11:9e:a6:12:51:30:50:b5:6d:79:
42:78:96:21:7e:58:60:75:80:75:4c:ae:c0:72:f6:
02:aa:07:05:d9:5a:ce:5e:6d:30:93:7c:fe:1d:fc:
55:5f:cb:36:0a:aa:7e:fb:52:56:9a:81:85:9b:ff:
56:c7:d3:c3:ef:a2:77:8a:3a:28:3a:83:28:ea:4b:
a2:1c:c8:c5:34:5b:f1:c1:a1:f0:39:ac:95:f2:42:
cf:d1:ab:19:f9:9d:a7:ad:a2:41:dd:fc:eb:04:7f:
60:d4:ef:d1:87:fa:54:97:80:95:01:d1:c5:36:bf:
74:e7:14:73:d0:04:2c:1c:2c:1a:aa:b6:1e:8b:6a:
e8:46:b6:c3:09:98:fe:d9:e9:09:9e:23:4b:b2:f5:
73:c8:42:47:4c:ca:1b:71:34:a1:81:24:e9:19:ba:
06:ca:d4:e3:d5:e6:0c:c7:62:11:af:8d:a9:24:19:
a1:e5:9f:95:e3:eb:ca:fd:86:df:1f:ed:64:f7:db:
79:e5:f2:5c:be:3b:38:62:ff:64:da:bf:50:09:aa:
f8:54:ed:54:67:d1:17:57:cb:c0:07:58:3c:7e:27:
87:9c:fd:33:18:9d:18:d7:87:a7:05:59:8a:6e:63:
10:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CA:F3:E2:7F:FF:5F:4F:C9:ED:F6:5F:81:49:2A:44:7D:54:9A:D3
X509v3 Authority Key Identifier:
keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d3:eb:87:43:ff:44:9e:06:8c:2f:4b:ca:b8:67:30:c6:fd:
af:e1:2f:a1:41:c2:4b:63:63:7a:d7:82:63:f3:dd:de:92:e9:
8c:d6:81:5e:bd:67:f0:39:a6:d8:e5:0d:84:01:b5:fb:9c:95:
2f:56:d7:68:a5:be:7b:26:45:9c:34:e6:cc:7b:8d:3b:14:2e:
09:c2:18:84:c2:18:ae:15:64:d8:98:d9:79:22:d4:1e:8b:77:
c3:55:f4:c4:96:ec:97:10:8b:2b:f2:b9:b7:55:63:5f:7e:15:
e7:a5:9d:5b:86:da:75:ae:e5:d5:7b:12:82:79:46:41:d8:62:
dd:52:0d:57:ba:62:ba:a9:77:64:e5:4d:88:85:ee:e8:07:13:
f6:cc:9d:74:ea:d1:43:de:93:62:18:d5:bd:ce:7d:91:ff:f2:
52:fb:37:c3:5c:82:f6:ef:52:b5:8d:11:28:f8:82:72:b8:90:
b7:e1:54:53:94:70:1d:ea:bd:6b:73:ad:56:6c:1e:0f:e1:22:
2a:bf:c5:b7:97:45:a2:39:07:17:0c:7a:0b:d7:33:bc:2d:03:
d0:57:2b:02:fe:b3:d5:1a:95:7c:92:d8:83:6e:90:c5:4b:17:
66:92:3c:a2:ed:a7:ea:d8:e3:62:e3:15:36:d5:20:b3:c3:95:
55:89:bc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:43:18 2025 by rpki-client