Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier: N7DLfCoODJr2fVeFMUUYND1tL+ihKGaBy0N2YpKLX2E=
Subject key identifier: 73:88:14:AD:3D:17:E9:A4:E1:77:12:93:17:01:19:AB:F4:83:38:4C
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 0196B77E299541487EB4527E8FF99513E97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number: 1356
Signing time: Sat 10 May 2025 00:00:20 +0000
Manifest this update: Sat 10 May 2025 00:00:20 +0000
Manifest next update: Sun 11 May 2025 00:00:20 +0000
Files and hashes: 1: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: L2YCPh11XpvF4Bozm57UVtVx4mXJIS1Cv/sri9DAX2E=)
2: ecFLrFSYazGNpMwtdUC2GTyB7Ls.roa (hash: 9V1D5AZ/eHVRt4YDKcmTOE8v9iNuXaOV/i0Ye/mdU9E=)
3: zeZfDF6FQVXfyXUfk9yRfeoJZIA.roa (hash: DtxqGawsrFVZx4HNzS+S5CsdD6flwYPGqAxKv36rkJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:29:95:41:48:7e:b4:52:7e:8f:f9:95:13:e9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: May 10 00:00:20 2025 GMT
Not After : May 11 00:00:20 2025 GMT
Subject: CN=738814ad3d17e9a4e1771293170119abf483384c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:a4:17:77:d8:d2:30:5a:84:e1:b5:24:38:
fc:ea:98:5d:bb:89:af:50:5c:ac:d3:a3:99:31:d0:
b5:86:db:55:0c:99:97:ec:d9:ae:b0:aa:d1:7f:c0:
10:d9:5d:b3:04:db:a4:57:72:ba:52:00:78:46:c8:
52:6d:6d:cc:3c:a5:43:1e:ac:69:ae:e2:f4:7c:cc:
69:08:39:23:8a:25:5b:85:27:2c:a4:74:96:39:54:
a7:e5:ec:08:fc:9b:6c:40:4c:a8:a0:8b:3a:3a:81:
cc:cc:5c:fb:0a:c5:3e:a3:e6:35:af:8d:24:cd:6f:
8f:94:b7:c7:7b:c2:6c:18:8e:5c:ac:f5:1f:65:bc:
79:ab:76:af:59:c1:a9:0d:92:e4:1e:a0:fd:28:32:
74:b9:8f:29:97:28:5c:ef:ea:d3:2b:7a:80:09:05:
34:7e:7b:af:d2:0b:1c:c5:31:66:54:9f:4d:e3:87:
da:49:2a:4d:cc:f2:1a:01:16:74:97:07:dd:1f:6e:
c7:9f:0a:f2:2e:7b:b7:ac:7c:90:20:9c:f2:20:9e:
a6:e7:78:94:a5:ff:e8:c4:35:ff:0e:bb:e1:59:73:
f2:20:fd:7b:65:00:83:7c:07:66:3a:b6:18:fb:5f:
53:08:da:56:8e:6b:78:4d:5b:fa:35:b0:11:6a:91:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:88:14:AD:3D:17:E9:A4:E1:77:12:93:17:01:19:AB:F4:83:38:4C
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:35:94:18:21:cf:3f:9e:43:7f:f3:81:df:68:e6:91:4d:5c:
96:7c:26:3f:9f:76:56:db:31:ce:3e:c6:80:aa:f6:03:5d:cd:
c3:0e:90:21:67:77:7a:ed:c0:57:61:d9:33:15:93:29:a6:a5:
73:77:03:ae:5e:ca:18:0d:64:8f:87:73:30:af:4a:ad:ad:44:
41:b7:86:c9:96:c3:73:64:8d:8d:b2:d9:85:f9:ce:01:55:a6:
42:01:23:03:59:a8:10:13:78:f3:bd:6e:58:1b:97:f6:b5:09:
f5:43:f7:b9:df:46:3c:ff:0b:e3:a0:17:1c:fd:d0:52:4c:79:
92:82:0f:ac:42:2c:f8:91:95:1c:2d:96:03:09:c1:55:b2:c4:
1e:04:0e:ff:76:bb:ab:d8:a8:c1:32:44:b3:e0:98:0a:75:c0:
5f:64:50:23:01:1e:cc:6c:f8:bd:26:46:f8:e8:6e:0c:84:8a:
8d:cf:cb:de:89:b6:1d:82:1f:74:8a:c7:8c:6f:0d:ee:74:ec:
2e:ba:31:1b:68:40:0f:4c:6a:d1:e9:7e:a8:a8:33:93:37:72:
50:b0:db:91:e0:6f:c8:4f:b2:47:a1:0c:a8:b1:33:80:66:41:
a1:64:58:00:99:d7:ec:19:41:31:03:4d:4b:c7:6c:12:72:82:
8d:10:54:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:21:28 2025 by rpki-client