Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File: dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier: xrMONOy0XskYU0VafxYuqDcAM4cR2vnpR/q4+7OZqOM=
Subject key identifier: E2:53:91:42:F5:44:88:E1:92:25:02:F7:7C:9D:F8:38:45:2E:34:89
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 0196BB243636AFDCD56A866499C814352A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number: 126A
Signing time: Sat 10 May 2025 17:00:34 +0000
Manifest this update: Sat 10 May 2025 17:00:34 +0000
Manifest next update: Sun 11 May 2025 17:00:34 +0000
Files and hashes: 1: 40QNfW5uxL4jypZTwjAvEPXJ-ss.roa (hash: scLT9GShE++kyEVNQ4Xr6VT4pmzB0wfzNMHjViw3ltA=)
2: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: TIMxlKWdG9e+eEHwmyJXJIA0YoIW15qFUd2CsxyEoEQ=)
3: to-C9o8M7rUM05HxGikjjRHVAbw.roa (hash: JaaGI9qnzexOYc7maJGwDizpvZfHfNfRXKpM/h4aHAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:36:36:af:dc:d5:6a:86:64:99:c8:14:35:2a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: May 10 17:00:34 2025 GMT
Not After : May 11 17:00:34 2025 GMT
Subject: CN=e2539142f54488e1922502f77c9df838452e3489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:44:91:2b:10:eb:74:86:05:cc:89:7d:06:
13:29:cf:9a:c0:8b:a3:43:e0:a2:54:46:b5:41:c0:
62:8f:0f:c6:26:b9:32:f0:a4:af:aa:d0:e3:c7:e8:
72:30:17:4f:06:c5:12:0e:fc:e1:9a:67:a9:1b:aa:
2a:d8:2c:f2:41:c8:9e:9d:74:fc:ed:df:2e:23:07:
a1:ea:f2:d9:dd:6f:2f:0b:5d:8b:37:1a:dc:c2:ec:
2d:fe:32:13:02:7c:0e:6c:9e:76:3c:46:31:e2:2e:
35:09:4a:64:81:86:71:7f:66:71:ab:63:ac:63:a5:
0d:d5:d1:49:21:bc:4f:11:1c:14:03:a4:e3:d8:09:
ee:fc:15:fb:c7:42:2c:08:25:a5:8e:b8:8c:ad:52:
22:17:43:e0:a5:b6:c0:bf:b7:6a:87:03:80:7c:1e:
fc:62:40:dc:b7:de:42:91:4f:a1:3a:86:99:46:09:
75:c2:18:c9:1d:c3:49:2b:13:c5:8e:22:cb:3f:9b:
10:78:fa:06:16:3b:0f:20:05:3c:a1:2c:4c:9f:bd:
c2:38:16:25:af:95:a1:71:9c:08:4f:10:27:51:bf:
cb:5f:2c:11:bd:81:13:a9:6d:8a:f7:e0:ba:ca:10:
85:cf:04:a4:3b:08:8b:7f:05:7f:e9:18:cf:24:91:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:53:91:42:F5:44:88:E1:92:25:02:F7:7C:9D:F8:38:45:2E:34:89
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2b:de:cf:45:f7:f0:a3:a9:d2:14:13:f3:da:6a:a8:b8:2d:
52:2c:ba:96:52:86:da:d2:31:5e:a1:6e:97:74:33:5c:98:f2:
54:91:1c:db:92:e2:7c:ca:31:30:97:5b:d4:61:58:6f:eb:4b:
a5:12:ca:11:cb:de:2e:81:f4:14:d7:0e:bc:ad:59:fa:34:e7:
07:b2:f9:9c:e4:71:5b:e9:9d:a3:4b:bb:c1:97:38:43:7a:e9:
87:74:74:b8:6d:6b:71:98:c3:9a:e2:5f:e1:a5:44:c4:4a:8f:
f6:bd:9e:d6:6a:b5:f0:2d:cc:1b:c7:77:fa:e1:7a:08:01:86:
53:31:ab:06:cf:12:89:35:79:8a:2c:6d:4e:4f:b9:17:09:b3:
e3:45:14:ac:cc:2c:7a:2f:cc:af:51:27:ac:41:cd:d1:99:d2:
61:a6:37:41:83:4e:2f:8a:58:87:70:13:d6:87:98:aa:f5:b9:
1e:2f:1d:df:3e:92:0b:7a:f8:85:3f:53:61:52:83:22:ec:0a:
1a:cd:c9:c6:eb:5c:b5:19:aa:c0:b6:cd:87:cb:93:6f:6a:c1:
dd:0e:fe:79:30:93:65:55:17:09:3f:38:9d:27:4a:90:82:4d:
42:ce:fe:fe:e4:dc:aa:42:ae:48:af:9d:66:2f:a8:e1:e5:a1:
8f:81:e5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:32:18 2025 by rpki-client