Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9b3453-ae79-4f3c-bc72-5d8fe9acef83/1/d00hXK7bBQ1vb-hCbVBYr-KaqJY.mft
File: d00hXK7bBQ1vb-hCbVBYr-KaqJY.mft (raw, json)
Hash identifier: 9OrybG6LU8bE/tc4XVn320HFUBDvIB5hQlTzyipPhWU=
Subject key identifier: C7:18:E7:1B:5A:C3:89:E8:D7:E6:BD:3C:72:72:D5:51:A9:8F:71:1E
Authority key identifier: 77:4D:21:5C:AE:DB:05:0D:6F:6F:E8:42:6D:50:58:AF:E2:9A:A8:96
Certificate issuer: /CN=774d215caedb050d6f6fe8426d5058afe29aa896
Certificate serial: 0196A088FEEC36E0C2D2167E938AEEC5B6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d00hXK7bBQ1vb-hCbVBYr-KaqJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9b3453-ae79-4f3c-bc72-5d8fe9acef83/1/d00hXK7bBQ1vb-hCbVBYr-KaqJY.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 13:00:54 +0000
Manifest this update: Mon 05 May 2025 13:00:54 +0000
Manifest next update: Tue 06 May 2025 13:00:54 +0000
Files and hashes: 1: PkCW-_NsM-T7UPkn9ndPg_lm2Cc.roa (hash: 6zURgMS5q85VCfD90tOCn/JEDDZzrGjQCgloW9Hyt6U=)
2: d00hXK7bBQ1vb-hCbVBYr-KaqJY.crl (hash: SYMwFmdvUjg/wAK3kfuzj6P6itHS38VqYYG+BpYyPuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9b3453-ae79-4f3c-bc72-5d8fe9acef83/1/d00hXK7bBQ1vb-hCbVBYr-KaqJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9b3453-ae79-4f3c-bc72-5d8fe9acef83/1/d00hXK7bBQ1vb-hCbVBYr-KaqJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d00hXK7bBQ1vb-hCbVBYr-KaqJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:fe:ec:36:e0:c2:d2:16:7e:93:8a:ee:c5:b6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=774d215caedb050d6f6fe8426d5058afe29aa896
Validity
Not Before: May 5 13:00:54 2025 GMT
Not After : May 6 13:00:54 2025 GMT
Subject: CN=c718e71b5ac389e8d7e6bd3c7272d551a98f711e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:b4:3a:d1:5c:a5:8f:8e:16:a9:ab:24:36:
53:82:0c:80:f4:2b:a5:59:95:4f:0c:89:8e:db:b3:
86:f2:f2:14:0e:af:9d:62:0b:b8:87:9e:c4:91:35:
2f:24:a7:55:ce:08:bd:00:33:22:b7:bd:d0:5b:45:
54:a2:b4:98:05:31:e1:b3:85:b8:55:83:2e:75:f3:
97:fc:c7:71:ac:14:67:98:9f:43:c1:ee:a0:5e:14:
4e:15:96:d2:99:ed:24:09:e2:09:6f:a3:71:5a:f3:
dd:72:55:7b:08:ce:84:8c:dd:e4:5a:7f:50:e6:e3:
97:46:35:8d:c0:a6:a7:d6:26:f5:8f:4a:70:cf:a4:
11:67:19:0a:a1:53:e4:7f:86:ea:f4:a8:9f:51:5c:
4c:19:17:14:59:ae:56:ed:12:80:de:1a:49:3c:ad:
67:db:f4:19:96:1d:84:76:18:fc:df:69:0b:79:27:
7e:97:78:3a:c8:4e:ff:77:13:b6:a9:81:61:dd:38:
c2:74:2c:df:ad:3f:45:13:fd:62:76:84:95:1e:20:
dc:f1:f1:45:d1:1f:67:bf:4a:a5:2d:cd:47:bb:c8:
09:98:73:35:73:5c:32:f5:b8:d9:f1:7b:33:69:a5:
ab:15:ba:24:39:c3:f0:fc:73:54:80:20:36:d0:9f:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:18:E7:1B:5A:C3:89:E8:D7:E6:BD:3C:72:72:D5:51:A9:8F:71:1E
X509v3 Authority Key Identifier:
keyid:77:4D:21:5C:AE:DB:05:0D:6F:6F:E8:42:6D:50:58:AF:E2:9A:A8:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d00hXK7bBQ1vb-hCbVBYr-KaqJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9b3453-ae79-4f3c-bc72-5d8fe9acef83/1/d00hXK7bBQ1vb-hCbVBYr-KaqJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9b3453-ae79-4f3c-bc72-5d8fe9acef83/1/d00hXK7bBQ1vb-hCbVBYr-KaqJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d9:7c:67:97:dc:c7:66:77:2b:93:e7:b8:80:d7:e9:61:12:
3a:77:a7:fa:77:b3:8b:21:59:e4:d7:72:70:50:05:a6:8f:9e:
54:a2:5b:dc:48:d7:1d:16:7e:b0:0e:0f:ae:19:42:c0:10:28:
11:22:93:ef:0c:cf:6b:b5:75:05:28:f7:09:3c:55:20:dc:b7:
17:02:3c:4d:71:2a:2c:d7:66:26:89:92:2d:26:59:df:7f:07:
04:3f:9a:d3:c9:53:9d:c1:d7:18:e8:bf:dc:76:a3:bd:82:c6:
27:46:ab:89:db:07:79:81:c5:d1:1a:b2:8a:62:55:f6:83:19:
b6:49:fb:d7:39:da:35:7a:ed:d5:5c:69:26:ce:97:80:fd:f0:
72:02:b6:ce:f3:72:46:ce:18:6a:b6:12:46:2c:39:61:9d:60:
0d:8e:88:f2:91:57:b9:62:c4:50:3b:4b:10:26:c5:1b:43:e9:
35:f0:27:49:a7:29:d7:1e:58:f3:6c:5a:db:b5:4b:83:ed:1d:
13:11:d6:79:55:ad:d4:34:2d:23:a6:53:5c:df:0b:82:79:54:
73:7c:fc:67:1f:62:a9:8a:a0:67:f2:7d:26:ad:e7:89:eb:26:
cb:96:fb:67:3f:fb:e7:43:de:34:fc:34:42:51:54:4e:05:da:
b1:aa:e2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:53:23 2025 by rpki-client