Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File: dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier: 4Bx0X0SBfzawHe4ufPeamHEAb8CV2AxYPAUTJxTLhCg=
Subject key identifier: 63:E6:9C:E6:01:46:43:68:E4:B6:7E:DC:4C:60:2A:8C:25:D1:A5:27
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial: 0196CD61F0FC301D7F496E21E82D4B2483C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number: 1544
Signing time: Wed 14 May 2025 06:01:10 +0000
Manifest this update: Wed 14 May 2025 06:01:10 +0000
Manifest next update: Thu 15 May 2025 06:01:10 +0000
Files and hashes: 1: PVmSZDGrn03CmC3ystxrDr3TZfo.roa (hash: Pjr4/1MqbKXy/FJJPo44XPup/Kfr50sF5z3bYT1o0SU=)
2: XU_IzR1XNktTavIx_nI3l6sD7WI.roa (hash: QAWYFwQ7d4DDdntznflGhPwEdw+c4lyHMRKRE5reGnk=)
3: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: DmUUnIdz9Ml819l+jBvdYZE2Bc1CzLzNSi1L5le1zqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:61:f0:fc:30:1d:7f:49:6e:21:e8:2d:4b:24:83:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Validity
Not Before: May 14 06:01:10 2025 GMT
Not After : May 15 06:01:10 2025 GMT
Subject: CN=63e69ce601464368e4b67edc4c602a8c25d1a527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:31:c0:a8:3b:61:2e:e5:8b:e5:5b:ef:f2:
c6:0e:d7:06:f0:cc:01:94:b3:03:05:25:51:dc:a3:
60:bc:0b:82:d5:f0:86:09:ec:48:fa:f7:10:ff:39:
d1:af:2a:bc:7c:f2:16:91:69:48:e9:2d:70:f4:77:
5c:a2:45:e7:f2:55:d1:9a:eb:9b:d2:c7:0b:54:f5:
81:72:de:1b:34:53:07:9d:b0:ae:18:ae:ae:b7:96:
f9:c6:cb:84:57:d6:8a:b3:48:f2:5d:03:49:95:e3:
09:35:8c:82:3b:35:47:45:b1:58:0f:27:10:e9:11:
f5:4a:51:b6:2c:26:a0:9a:0a:d3:42:31:af:f3:1c:
e4:62:dc:96:79:c8:2f:fd:0c:6c:88:66:0f:9d:39:
33:78:6b:c6:f4:4e:f2:47:87:34:34:92:eb:bd:84:
a9:f9:db:6a:65:58:5d:b6:86:5b:4c:2f:73:00:bf:
34:30:bf:76:d0:c4:41:a2:be:fc:4a:28:46:61:5a:
37:53:33:18:c1:19:4e:4e:91:4a:74:9b:0d:4b:1c:
c1:0f:bb:f0:4b:94:bf:4a:9e:dd:4b:c5:0e:12:7b:
97:ff:dc:2c:3a:4b:97:a0:d8:e3:57:e8:a1:78:5d:
5e:f2:91:3f:51:97:b8:27:3a:19:9c:f2:5d:a2:73:
ff:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E6:9C:E6:01:46:43:68:E4:B6:7E:DC:4C:60:2A:8C:25:D1:A5:27
X509v3 Authority Key Identifier:
keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:99:b5:4c:03:b7:cb:5e:ec:66:f9:8c:74:2a:bc:1e:5c:cd:
bb:49:8f:80:18:35:c5:77:71:05:db:28:6f:31:fc:e7:72:57:
f0:bd:3a:06:4a:e4:bd:1b:1d:20:9c:7b:1c:90:4f:0c:f7:63:
41:a5:e1:86:7c:ef:01:8b:84:b1:60:14:60:ed:0c:18:b9:aa:
22:08:fc:31:d6:fe:aa:37:88:99:f4:79:d2:04:d4:6c:54:ee:
08:27:a8:51:99:b3:3a:2e:1a:96:a8:8a:5d:c7:c2:a0:59:f0:
01:1c:f7:41:03:26:10:41:96:dd:a9:e3:b1:72:71:06:1a:06:
4f:dc:19:85:59:f3:59:32:25:a5:d5:89:4b:66:5d:b7:07:32:
73:5e:85:92:77:9e:55:d0:bd:68:cf:b6:f2:5d:ad:e5:79:53:
e3:ee:e1:b5:b0:65:a3:aa:fe:0d:8f:91:06:91:4e:ab:e3:63:
df:e3:b6:e0:44:1c:f3:9d:7a:9f:b4:b2:93:78:a8:ab:03:b8:
45:95:2d:6b:19:a9:6b:fe:7c:1a:96:28:0d:6e:1c:47:6e:0a:
ac:6d:78:a5:f4:42:01:38:65:53:2d:0a:e1:e1:78:8c:3e:8d:
ad:46:ad:0c:15:38:22:82:5b:67:4e:f0:c8:1c:f2:9f:d2:c5:
62:2e:08:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:23:27 2025 by rpki-client