Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
File: djizYCRf5EsXV6ael3oV4H-q9ps.mft (raw, json)
Hash identifier: s7y0Od0xemAyZTGxGRHnsCANJS3Z3UODno9dPqSUzfA=
Subject key identifier: 3C:E4:FA:97:C7:DC:BE:F6:A0:F7:DD:FD:22:11:EC:01:B6:C5:8B:A5
Authority key identifier: 76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B
Certificate issuer: /CN=7638b360245fe44b1757a69e977a15e07faaf69b
Certificate serial: 0196C239343A3ABE535EB2D825C393BCFE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
Manifest number: 91
Signing time: Mon 12 May 2025 02:00:50 +0000
Manifest this update: Mon 12 May 2025 02:00:50 +0000
Manifest next update: Tue 13 May 2025 02:00:50 +0000
Files and hashes: 1: djizYCRf5EsXV6ael3oV4H-q9ps.crl (hash: Ff95uZbCgbEZSCTaQmZhMwr1iT52Yvs9ztTY/PRhwz0=)
2: gSGKFe1pn3_5E4Q7YRW3hV9F-dg.roa (hash: Gfi8XtFBl7a2jBdHmK+GtPDHztaG0pAxvqWau8U6T/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:34:3a:3a:be:53:5e:b2:d8:25:c3:93:bc:fe:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7638b360245fe44b1757a69e977a15e07faaf69b
Validity
Not Before: May 12 02:00:50 2025 GMT
Not After : May 13 02:00:50 2025 GMT
Subject: CN=3ce4fa97c7dcbef6a0f7ddfd2211ec01b6c58ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:3b:9d:cc:9f:19:59:e8:88:5e:b8:3e:92:
ef:94:fb:8a:08:92:19:0f:03:7a:d8:70:1f:78:fb:
fa:cf:dc:6d:57:7a:88:47:39:af:48:54:47:26:83:
c9:58:0f:ec:a7:a7:56:1b:f6:5f:43:63:68:fc:62:
ac:29:a6:86:6b:f5:d4:33:5c:bf:8b:24:23:9e:21:
08:ea:f6:12:7a:dc:f4:cb:d2:03:e1:49:98:b4:f2:
b4:34:81:b6:25:7a:6c:68:d1:4a:86:d8:26:9d:2e:
e1:32:2e:13:5a:14:02:d7:0f:2f:a2:e5:dd:34:4a:
c3:c7:56:eb:3b:07:28:1e:fa:9f:83:ab:af:88:75:
9c:82:47:30:2a:26:3a:e3:f0:9f:a2:24:88:d5:a1:
8c:29:6b:d8:a5:72:77:80:4c:71:93:6f:33:4b:48:
0f:9a:a9:fe:b8:0c:af:d7:80:16:76:6a:b2:18:a5:
4c:1e:9e:ed:38:22:30:7a:ee:f6:f4:37:aa:16:6d:
4e:77:a6:6e:b8:d0:e0:a2:15:ac:23:90:dc:80:f3:
aa:45:08:07:2c:1c:f0:dd:33:21:e7:99:cf:9f:62:
8a:4d:eb:6e:b1:e1:15:ab:b8:fa:8c:b2:56:30:6c:
e2:54:5a:9c:7f:db:12:8d:df:dd:03:c0:e3:fe:97:
80:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E4:FA:97:C7:DC:BE:F6:A0:F7:DD:FD:22:11:EC:01:B6:C5:8B:A5
X509v3 Authority Key Identifier:
keyid:76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f0:be:ff:73:b5:bc:8f:34:d6:c2:76:70:21:78:b6:be:c7:
46:77:31:4b:e2:ca:97:5c:ed:ec:56:d0:78:70:62:cb:6b:27:
e2:ce:24:4e:f4:3b:de:70:d8:dc:b6:36:f9:04:6e:8d:90:4c:
75:0c:d0:4f:35:57:cf:93:d9:31:d2:d1:0b:56:69:a0:48:35:
36:43:c2:8e:42:f8:50:11:c4:b5:3e:8f:ba:0c:0f:16:82:fb:
58:93:97:07:28:c5:57:9d:0d:c3:10:b7:33:40:7c:2f:71:3e:
ed:7f:b2:b2:0e:8d:e7:81:69:d6:7c:0e:a9:ac:e4:6c:e5:12:
c6:ba:f3:fb:69:b1:69:20:12:74:a0:15:55:bf:9e:c8:10:01:
26:2b:a9:30:a0:ad:6b:1a:4d:a0:45:07:7d:17:92:3c:ac:7e:
22:a2:4f:d0:02:65:77:eb:a4:cd:09:9a:ec:90:e3:c9:ed:46:
a8:b6:0e:f3:18:2b:34:af:33:62:e4:09:a5:89:7e:b8:9e:fb:
1a:ee:11:d3:ff:52:46:20:27:be:e5:45:09:2c:22:bb:8f:07:
d3:f3:f8:b0:a2:d0:00:fe:0a:3d:83:e2:53:20:0e:70:84:2e:
e8:e1:ea:bc:a3:6d:38:88:80:af:74:e6:57:18:3c:11:61:bc:
50:71:b4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:20:13 2025 by rpki-client