Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json)
Hash identifier: kB1GUe6kFJsZPfWmeg/KdjE+T49loKaHhsaTiZVjuYM=
Subject key identifier: 26:38:59:7B:B4:40:51:16:8D:2A:79:A5:07:5B:FA:8B:D4:42:3B:85
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 0196C04A88EFDDC5F91E2D2A2B42DD663A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
Manifest number: CD
Signing time: Sun 11 May 2025 17:00:32 +0000
Manifest this update: Sun 11 May 2025 17:00:32 +0000
Manifest next update: Mon 12 May 2025 17:00:32 +0000
Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: V9l4L17kRgBDzlsXBulU1FW4mGP1U9uA1SFtAngq/e4=)
2: _Lwar98mX_HPuZ6I_iBOIoPweAU.roa (hash: Q4wLDgz1BPTM2gYviJRrmaBtuFqzTEu5NxXR8pya5BA=)
3: uLyoln8iUo21XJeVRG0IGUytncA.roa (hash: rExu+xv1UDsqwxWWN3KFhMpN7PoTmi5ksePI6jLVE7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:88:ef:dd:c5:f9:1e:2d:2a:2b:42:dd:66:3a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: May 11 17:00:32 2025 GMT
Not After : May 12 17:00:32 2025 GMT
Subject: CN=2638597bb44051168d2a79a5075bfa8bd4423b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e8:04:72:49:77:d4:1d:3c:ab:b2:0b:bf:54:
a4:3d:41:a1:18:55:7e:a5:18:77:e6:1a:1f:0e:b1:
19:75:48:4e:a5:63:9d:e8:c1:43:46:99:95:78:47:
ea:b0:59:7b:42:02:4c:9e:55:68:2e:20:67:03:fb:
f5:ac:2c:91:6a:2a:61:21:6c:bb:8b:9f:f9:a6:0b:
d2:07:16:87:5c:5a:6f:ae:47:12:56:99:26:1d:26:
05:cd:4f:32:ad:05:89:b3:77:21:86:91:05:1b:c6:
1e:7f:ca:c9:ed:86:e5:fb:a5:06:ba:21:19:56:99:
ce:7d:88:09:d6:da:2a:3f:b7:d0:7c:e8:a9:53:c0:
b1:88:07:58:c8:4e:42:ce:ca:22:f1:b8:a2:91:5c:
c3:03:0d:c6:a9:1a:d2:e8:64:d1:e2:c7:2b:8f:b5:
16:41:9a:4e:40:b7:6e:93:3b:76:e3:96:74:77:74:
b9:88:6a:ea:99:ea:7d:4c:bc:d5:11:49:72:18:8d:
29:ac:cd:dc:97:f5:73:95:44:be:8f:ab:57:6c:24:
4d:ef:65:ed:74:f5:2c:aa:09:c6:d9:3e:6b:c6:9a:
c4:e3:42:11:98:f8:d4:75:aa:64:16:59:de:72:de:
3e:aa:7c:36:b7:ae:a1:87:6e:85:ad:c8:7a:01:79:
1d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:38:59:7B:B4:40:51:16:8D:2A:79:A5:07:5B:FA:8B:D4:42:3B:85
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4b:07:a7:23:2a:1e:4d:24:61:ab:a3:3d:08:f0:9f:c1:3a:
0a:72:31:19:97:ac:49:c1:c7:23:c1:02:de:69:11:b9:fa:43:
f4:b4:6c:ad:a6:80:a1:ad:28:6f:46:19:9b:17:c0:1a:ea:03:
43:34:18:07:b2:d2:14:2d:01:90:a7:66:89:32:cf:73:c1:52:
a7:c6:72:92:73:4d:3a:77:d8:77:95:f7:b5:13:fd:34:30:dd:
34:2d:93:15:68:e5:0f:22:d9:c1:c9:56:8a:84:53:31:af:14:
9d:f5:7e:17:8f:df:a2:49:e7:04:70:b3:10:53:5d:e0:98:81:
47:7d:32:a5:05:37:56:0b:17:8d:69:8b:a3:79:58:81:91:55:
ce:c6:80:e7:d3:28:67:d4:75:7f:45:f4:ad:88:e4:59:be:ce:
05:4b:f9:f9:b6:eb:4d:78:ef:43:26:fc:33:34:59:75:02:ac:
9e:95:42:4c:44:c2:7f:bb:49:fd:22:e3:20:98:c2:7a:96:6d:
18:61:d0:76:e0:9c:66:b9:fd:00:68:14:3b:04:ad:f5:eb:03:
eb:c2:80:3a:c9:88:f5:7b:17:0d:55:cf:3b:49:68:df:2b:8b:
db:e6:e8:44:13:c2:0a:de:5d:1a:3d:a0:32:b3:16:0f:c7:70:
6c:f2:b1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:34:29 2025 by rpki-client