Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
File: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft (raw, json)
Hash identifier: BSKc+MukrvOzvVlXmk/bkZGzJQFL+oOr4OctCgPVADg=
Subject key identifier: 91:47:6F:76:47:CD:A0:0B:28:54:E3:BE:E4:3C:14:ED:0E:DC:19:E8
Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Certificate serial: 0196B3D8B4C2875B9DE9597AC83227CAE81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
Manifest number: 1535
Signing time: Fri 09 May 2025 07:00:45 +0000
Manifest this update: Fri 09 May 2025 07:00:45 +0000
Manifest next update: Sat 10 May 2025 07:00:45 +0000
Files and hashes: 1: AGpWRsY_xlGvwtNQWAnABWymQ8A.roa (hash: pZbxN4jH7CXcAGUCPIracQWWJ5Fx7UpJPwtV6JB2GN4=)
2: BCBgNqu47uxxNNiHpeHJ8N3bbPk.roa (hash: YwTUOz8aV/A2kQXL80C7PIKK4Uk0yf33ChXiFW3offA=)
3: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl (hash: ckc/LJvqNOiqAJMJPYpr/AZdDqjhx4Y7rvjTZE7rIJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:b4:c2:87:5b:9d:e9:59:7a:c8:32:27:ca:e8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Validity
Not Before: May 9 07:00:45 2025 GMT
Not After : May 10 07:00:45 2025 GMT
Subject: CN=91476f7647cda00b2854e3bee43c14ed0edc19e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:67:5b:c4:9e:ba:9a:16:f9:4a:7a:6a:43:
b5:85:f7:31:9d:5e:a5:87:c0:d7:b8:84:22:15:60:
6a:a0:a5:ad:05:b0:1d:bf:55:28:14:58:65:17:07:
e0:b2:6a:a1:6c:8a:65:35:6d:62:7d:ec:41:75:94:
1a:ca:d1:eb:01:b0:f8:b9:6a:28:ae:d8:73:0f:99:
76:c9:f3:d1:ac:f5:53:c3:0e:d0:4c:e4:c0:a7:d7:
85:9e:2d:b4:5f:39:f4:86:67:23:b0:e4:b0:43:8b:
8f:e9:57:9e:ce:71:29:1e:ad:ce:9b:79:76:ce:dc:
8a:e5:3e:42:0e:26:18:7d:ba:1a:ce:6e:55:50:a8:
ff:ca:c1:cf:63:4b:6b:7d:ab:b7:b2:ec:bc:f7:09:
06:05:80:15:45:58:6c:fe:0d:40:b9:bb:a3:c1:65:
63:0f:fa:f9:5b:96:a8:57:a6:a9:67:e7:67:19:f9:
83:1c:d4:fc:3a:48:6e:c6:ef:ba:db:7a:e9:21:24:
3f:2c:e2:d4:c0:51:53:08:ad:fb:e7:6b:f3:0e:27:
35:46:2d:19:5a:85:e4:ad:56:a7:34:bd:98:71:a4:
3e:fb:f3:da:5e:43:75:31:b6:ff:55:5e:5c:a4:46:
d7:85:c6:44:e7:06:fb:d5:21:16:ab:bc:49:7e:7b:
1c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:47:6F:76:47:CD:A0:0B:28:54:E3:BE:E4:3C:14:ED:0E:DC:19:E8
X509v3 Authority Key Identifier:
keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6e:97:22:a2:07:67:a4:66:f5:2a:12:a7:92:56:98:7a:eb:
d6:29:ec:c2:35:c3:15:f4:7d:50:2c:9d:e5:62:39:4b:d9:f5:
5f:46:98:c0:24:d7:2a:c4:3f:59:67:be:11:10:81:d2:dd:c8:
cd:66:38:31:13:a7:7b:ea:20:7e:24:19:b8:a4:05:2c:f4:19:
ff:e2:e9:d1:ec:3e:ef:f7:eb:66:69:27:c6:24:1a:a5:52:99:
5f:8c:9d:43:e2:91:f0:90:7b:46:85:1c:23:57:fd:92:54:c8:
e1:bd:f7:e8:05:15:43:27:67:be:5e:ac:ab:60:06:ad:ef:11:
a2:81:64:62:18:51:2a:fa:f8:f8:4a:ea:f2:57:59:93:1f:07:
80:5b:c2:5e:cb:93:17:a7:eb:df:7a:31:cb:77:61:a1:d2:ed:
49:95:9c:2a:6b:38:9f:5d:dc:2f:06:a5:1e:a3:f9:98:a8:61:
09:7f:94:73:8b:3c:d1:4c:21:8e:09:39:11:ba:b4:42:69:75:
c5:a6:f3:4e:86:82:18:82:9a:09:7f:01:39:55:2d:30:4d:ce:
ad:af:db:81:dc:b2:2d:e0:97:1f:f7:8e:d2:4f:73:5b:71:dc:
ec:4a:c3:3b:da:ca:97:3d:a2:09:0d:05:15:c9:d3:5d:90:de:
42:88:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:53:23 2025 by rpki-client