Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: TLFymeOQKJm1OVXWxnFnVfzQVcKsrd9OHhOZfCqhq8c=
Subject key identifier: 95:93:6A:DE:C0:C6:9D:B9:20:32:82:97:77:67:7A:74:FE:3A:5C:87
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 01969F3F105B788BAACF6B6346E8136FAE19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 07:00:32 +0000
Manifest this update: Mon 05 May 2025 07:00:32 +0000
Manifest next update: Tue 06 May 2025 07:00:32 +0000
Files and hashes: 1: WntKpaBL0rwf0OHtGIxbqp43a48.roa (hash: RD+6zKliyi529qWw5SlqL86NJOiZz+f7ljpnnMAUmvo=)
2: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: WVXKKkFHvP1PEN9JVUcU06p3G7jkXnS9QmW8rzUYLUI=)
3: wGTkAR_0sF92lgaxXY9nSUR4GIc.roa (hash: eDBRIXJLntwza/xwaubebQOnZv9qj50gWoqkIryMxT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:10:5b:78:8b:aa:cf:6b:63:46:e8:13:6f:ae:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: May 5 07:00:32 2025 GMT
Not After : May 6 07:00:32 2025 GMT
Subject: CN=95936adec0c69db92032829777677a74fe3a5c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:74:26:c5:b9:bd:60:f1:42:ba:49:7c:c1:
7f:4a:f7:bb:3b:7e:12:3a:de:8b:f6:f5:c8:7f:95:
52:87:50:cd:a3:c3:1c:3a:ab:af:9d:06:61:93:a1:
46:e7:64:e7:06:f3:00:80:05:a9:67:f6:20:69:0c:
53:5a:f9:9c:e5:5d:e0:9c:36:6f:e4:d2:43:65:4e:
88:24:15:cc:2d:7c:4d:93:b1:20:e7:7b:99:3f:2b:
d1:83:54:ec:9a:f6:e5:25:2b:22:65:e0:78:2c:4d:
81:0b:1e:f8:a0:5d:8d:18:39:72:a6:ef:9a:05:b7:
f7:58:d9:b5:a9:d8:fa:e6:c0:28:60:d2:95:5f:0c:
42:62:fd:c1:1a:80:fe:f0:2d:81:93:17:76:10:78:
70:33:3e:a6:03:33:a5:dd:cb:b0:1e:7d:2f:5c:a8:
6a:1d:f2:d9:3c:4d:00:b1:d0:29:8f:e9:48:ff:53:
45:4d:70:a1:46:1b:ec:85:5e:10:c7:eb:47:f3:41:
0b:88:3a:ea:34:32:00:c1:12:a3:23:ca:e8:7b:ad:
df:11:c6:2d:f0:ec:4e:de:8c:cd:18:00:ab:05:b9:
3a:b9:82:44:a3:13:6f:6a:b2:99:a0:07:4b:15:fb:
6a:c8:ac:e2:a0:b6:b9:f4:66:52:30:f4:6a:1e:fb:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:93:6A:DE:C0:C6:9D:B9:20:32:82:97:77:67:7A:74:FE:3A:5C:87
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c5:05:1a:0d:e8:3d:cd:8b:b5:1b:2c:7c:da:04:e2:42:f4:
2a:c4:ca:b9:3f:f2:95:b6:34:34:96:ba:e6:bd:95:78:3e:ef:
29:12:47:79:19:4c:bb:1c:26:f8:12:98:62:eb:f5:69:8b:6d:
24:96:e8:83:64:f1:4a:ad:55:aa:9d:28:1e:f5:28:39:e7:71:
bf:d5:27:79:d5:16:ef:5a:42:05:33:9e:25:7c:4e:b1:0c:7c:
3f:49:62:66:de:48:d0:0b:43:c2:f3:44:22:94:e5:f8:22:cd:
4e:46:aa:bc:ef:bc:b6:47:9e:e2:d1:dd:ca:02:56:c2:8c:f9:
3c:48:03:03:91:a6:8d:16:86:65:f9:c5:2c:c4:c3:dd:7f:f9:
c4:f5:d7:80:e5:55:dd:fc:24:aa:1b:02:9e:8a:1d:65:0f:d7:
ae:94:f0:60:b0:f8:7f:f3:f1:b7:7c:7c:d1:87:9b:f6:78:0f:
7e:a3:3a:87:ce:0e:61:6c:8b:f3:21:6d:3f:1e:d0:4f:fb:2f:
27:75:77:7a:ba:43:4d:bc:89:f0:34:79:51:63:e7:fd:c7:de:
98:ee:0f:7a:af:7f:45:5e:af:2a:b8:8f:74:4b:09:fe:f6:66:
b6:bf:cd:1d:95:f5:45:8c:49:33:42:8d:2d:5b:68:ab:35:be:
c4:53:bb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:31 2025 by rpki-client