Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
File: DmmmfUshWj8x_EYvDqU074P471c.mft (raw, json)
Hash identifier: L/P+SfMkWV6CLSwqWveIVQ3AUNsT6GbnpVk83EqIzMg=
Subject key identifier: FF:59:EB:BE:4D:E8:E2:3C:89:7A:1A:3D:28:F6:3C:06:CF:82:79:38
Authority key identifier: 0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57
Certificate issuer: /CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57
Certificate serial: 0196C013867BF983433AD6DE2A5184C5AB7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
Manifest number: 0756
Signing time: Sun 11 May 2025 16:00:27 +0000
Manifest this update: Sun 11 May 2025 16:00:27 +0000
Manifest next update: Mon 12 May 2025 16:00:27 +0000
Files and hashes: 1: 5n6-nw8FoTNYcZ9aENZQUU_ruI0.roa (hash: g9NrBLOfxYZz72cswyRQrtWjdRUQegpck7SaMHmrvjs=)
2: DmmmfUshWj8x_EYvDqU074P471c.crl (hash: Invw30UtZneee4VitxiYvQW+W0eQx5gqUJKFL5XsOD0=)
3: O4fx24MkcOun7eOMuF45FXz1Rp4.roa (hash: Oql3zSLN2xRRYzfupmVInGA+80An5sqYygQF4rxwNdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:86:7b:f9:83:43:3a:d6:de:2a:51:84:c5:ab:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57
Validity
Not Before: May 11 16:00:27 2025 GMT
Not After : May 12 16:00:27 2025 GMT
Subject: CN=ff59ebbe4de8e23c897a1a3d28f63c06cf827938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:c9:1e:39:fc:7a:83:a4:93:fd:95:52:4a:
d8:1d:70:9a:11:55:7c:96:07:46:31:4a:e0:77:f6:
d8:33:2d:9a:5b:9d:86:87:3c:9e:55:38:5e:12:e9:
8c:a7:de:18:a3:46:60:8b:6d:dd:e8:dc:83:9f:f8:
8e:ca:b9:3b:b8:71:4a:4e:05:e3:64:d5:19:ef:c3:
8c:f2:13:13:3c:c9:ac:02:03:c0:1c:5a:09:a4:fa:
b0:ca:47:bf:8c:21:21:6b:8f:ff:ac:b1:5f:c4:ad:
70:94:81:92:73:33:0b:58:64:45:1d:ba:12:a9:a1:
5d:99:b7:55:13:15:2f:34:5e:7e:d5:3b:3b:3e:ba:
c2:be:01:85:fe:c9:97:b7:48:6c:e0:4d:fb:13:0a:
ec:77:05:d4:7e:bb:ec:0b:17:f7:8c:b2:72:dd:9d:
de:f4:f7:82:af:47:76:75:bb:2c:60:4a:d4:db:1d:
d9:c4:b7:5d:11:5f:56:85:93:c1:fb:3e:d0:60:2b:
50:ea:b0:0b:f6:ba:8b:0c:52:8f:07:a4:d1:7a:b0:
91:50:a0:76:a7:71:37:eb:0a:6f:10:9a:e1:63:63:
1e:fb:68:6b:d0:d9:b4:d8:25:34:0b:4a:70:a6:9a:
81:8f:3f:be:1b:9c:bd:39:4f:cd:41:a1:15:ca:de:
82:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:59:EB:BE:4D:E8:E2:3C:89:7A:1A:3D:28:F6:3C:06:CF:82:79:38
X509v3 Authority Key Identifier:
keyid:0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:20:d7:69:d7:ec:be:95:47:63:eb:e7:b8:da:3c:91:fb:2b:
02:c3:41:81:16:97:73:37:7d:0a:b1:7c:75:73:c3:3d:44:6d:
3b:48:8a:25:01:92:5f:3a:c6:e2:ec:1b:fe:1f:62:be:79:32:
95:aa:6e:1b:8d:e2:80:bb:e4:39:6c:b1:5e:81:20:14:bc:28:
77:1f:64:94:1f:88:f6:15:53:fb:25:35:0f:7f:c0:ae:27:6e:
c1:7d:81:cf:5d:f4:44:f5:99:9e:4a:02:45:b5:41:3a:3c:1d:
f0:49:9d:d6:59:5b:1f:68:f6:0e:aa:83:1b:84:08:b0:7d:6f:
ae:89:eb:b9:2a:9f:98:43:3a:93:d5:e6:7b:53:19:0c:bb:21:
fd:7e:d7:41:b4:ff:08:61:d4:21:15:21:80:87:24:ef:58:04:
88:ad:ee:f1:98:0d:ae:60:2c:9d:dc:04:5b:5b:90:a7:09:94:
e4:97:69:b2:49:24:17:24:bf:8e:af:b5:72:81:d2:98:af:0a:
71:38:87:96:f7:1f:ce:c2:78:ad:9e:d2:73:52:27:58:53:64:
16:14:28:2e:07:d1:ab:e3:17:a8:ff:6e:91:90:7e:3a:79:3b:
01:77:23:d8:59:c9:fb:67:64:db:ef:d9:2b:ab:15:05:8a:26:
52:cd:6c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:06:52 2025 by rpki-client