Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: Ya0xq4v6u0K9KgnMGU/x43Gx4DelhozSOhF12gn9cVk=
Subject key identifier: DD:64:9E:FD:55:EE:82:96:32:04:79:1C:75:F4:2C:BC:A0:D5:0A:B4
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 0196C6F12AD798B98ECD4CBDD1A1CF9AF3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 1537
Signing time: Tue 13 May 2025 00:00:16 +0000
Manifest this update: Tue 13 May 2025 00:00:16 +0000
Manifest next update: Wed 14 May 2025 00:00:16 +0000
Files and hashes: 1: 1-73UFjQEbEaiw-VEpYxtRIeSwTw.roa (hash: Xec6kbupZB2RH/ACciM0eanhiUxUAjw16Uj0UlJXaPY=)
2: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: qWgLGBPFwdstOELOJxKy8acW//HZkHKT2F3PVV3zK7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:2a:d7:98:b9:8e:cd:4c:bd:d1:a1:cf:9a:f3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: May 13 00:00:16 2025 GMT
Not After : May 14 00:00:16 2025 GMT
Subject: CN=dd649efd55ee82963204791c75f42cbca0d50ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3f:8b:fe:a1:da:21:19:50:a9:53:3e:fb:a6:
3c:09:08:e9:d9:ce:0a:20:6a:f9:36:30:19:13:f4:
ac:69:a4:e0:f7:d0:61:82:b1:cd:bb:8a:8a:5b:c1:
b4:bc:0a:2b:11:8f:bd:ca:e5:fc:26:7b:fa:be:08:
79:2e:d3:71:a6:8a:4f:46:f6:b3:43:56:2f:7e:eb:
45:82:f0:6c:be:c9:c7:2a:e2:e5:e6:d8:2f:89:cc:
13:f3:ad:af:37:78:8b:3e:cd:f5:d1:4a:44:d6:c4:
6f:c8:fc:07:d7:09:ba:c7:68:f2:d4:51:f0:3f:61:
4f:5a:4a:6b:8f:fe:07:c6:5c:af:9e:c1:49:26:c7:
6a:61:2e:a3:12:ff:19:ed:62:ff:a4:e4:0b:1d:31:
45:0d:4e:62:ab:21:f5:8d:63:08:72:72:09:ab:c7:
64:a7:57:a3:b3:88:26:1b:cb:f2:93:ca:ba:f4:b3:
7f:e5:e7:d7:f1:aa:cd:f4:d5:1d:b0:32:0c:b6:6c:
0e:6c:a7:81:6f:fd:5c:0d:d6:c3:aa:d7:ac:c2:da:
19:18:1c:5a:22:9a:5d:7a:ae:90:c4:bf:45:ec:e4:
a4:06:ca:94:51:dd:75:ad:35:e4:ed:d8:d3:20:fa:
ec:41:6e:e9:34:fc:f7:77:3d:ae:01:e2:6f:31:fb:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:64:9E:FD:55:EE:82:96:32:04:79:1C:75:F4:2C:BC:A0:D5:0A:B4
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:52:51:0e:6f:da:60:01:05:f3:5a:1c:f8:05:4d:58:c2:44:
87:f9:15:e8:b6:96:23:fe:c1:bb:b1:08:1c:d6:6f:a0:72:4e:
83:f3:db:38:63:c5:80:1f:18:1e:ae:81:3f:3c:20:d4:eb:35:
f4:91:9f:f5:b8:15:6c:ee:5b:26:7d:30:1f:25:e2:51:56:6f:
ba:77:0c:54:1c:f2:ca:41:62:d8:45:90:e9:45:7e:23:85:3d:
a1:0f:b9:cd:0b:95:bd:67:df:d8:86:fc:07:08:61:87:a1:24:
80:d7:7c:9c:48:28:cb:14:44:76:33:4a:3e:0a:a9:6d:98:c2:
2f:ba:96:74:1f:1c:d0:74:5d:ee:43:61:f9:b8:8f:97:ff:69:
4f:de:92:12:6e:4e:1d:29:ec:31:cf:9c:01:cd:20:44:03:5b:
21:30:78:e7:c8:3d:03:31:95:c7:59:4b:83:e6:cb:02:99:77:
c2:72:b4:5a:29:b4:0d:6b:43:a3:16:b7:75:ad:bc:a1:72:15:
ac:da:ce:6c:cc:74:ed:5b:06:1d:8e:58:25:ae:3f:4c:d2:36:
32:7d:a6:cc:19:7e:74:58:6c:47:31:35:e1:1d:ec:32:f0:21:
d3:1d:ec:90:70:cc:e5:a8:83:74:fb:59:d6:99:bc:8c:72:40:
f9:39:a0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:42:41 2025 by rpki-client