Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: QZRK2S68XsYK6JlpTDPa8eCiFz/TzIY9ZRa2Q7K4Kw8=
Subject key identifier: C5:CA:4D:79:07:EF:B9:80:1F:0E:34:E8:2D:76:66:9F:70:23:50:12
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 0196ABB0F5FB0938F222C09AE167D3426295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 0FF4
Signing time: Wed 07 May 2025 17:00:23 +0000
Manifest this update: Wed 07 May 2025 17:00:23 +0000
Manifest next update: Thu 08 May 2025 17:00:23 +0000
Files and hashes: 1: 1-jgtOPobXCJDbrHGNdmL9rzJbgM.roa (hash: uCWGxr32WWfEG1/b7Z2jim0tRFwDuOHUsX5k577/0+I=)
2: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: p2Oy+BVg5L8PjzmaFlVnOND6EL81cdpL45jRaMiX7KI=)
3: x3drftlfvyiEtkh0afmWcroU9Js.roa (hash: NILZn8jb2pSCwJZ594oMmV5sakNi3NDJXkj51QTnCsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:b0:f5:fb:09:38:f2:22:c0:9a:e1:67:d3:42:62:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: May 7 17:00:23 2025 GMT
Not After : May 8 17:00:23 2025 GMT
Subject: CN=c5ca4d7907efb9801f0e34e82d76669f70235012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:90:5a:54:33:7d:3a:f1:18:95:5f:25:ad:
70:f2:86:bd:7f:0a:75:05:f0:f5:e0:e4:2e:89:d1:
c5:16:2c:6c:9d:15:6a:d0:3e:9f:04:49:95:d4:f5:
e0:1f:ae:ee:ff:8d:22:9a:aa:3b:f6:18:6a:0a:1b:
c1:81:09:56:59:a3:64:95:34:71:94:f4:40:14:6c:
0a:ec:11:f8:34:a2:1f:03:2d:de:9f:79:d9:ac:5e:
59:ac:cf:0b:bb:89:55:69:ca:a3:b4:fc:fe:c6:c8:
10:f5:5a:a5:d3:35:b7:f0:c5:00:55:b1:29:67:a2:
c5:a4:1a:57:31:17:ed:12:9d:03:87:29:92:88:43:
eb:14:6d:da:23:d6:aa:39:c7:49:95:22:91:7e:43:
58:58:7a:5a:38:07:64:ba:1a:ec:8e:08:22:81:cb:
99:02:4b:73:b7:a5:d6:cc:df:f8:f2:a9:20:75:00:
d8:ef:ff:43:62:50:3e:9c:07:10:8c:f0:6c:5c:cf:
f6:07:43:89:e5:e3:44:37:2e:24:8e:28:cd:0a:f1:
35:61:9f:1a:91:6c:f3:83:2f:18:7a:7d:12:72:de:
9f:4f:72:a5:9b:02:ff:a7:56:18:6b:40:ab:6b:a7:
4a:fa:33:30:6c:75:9f:0a:88:53:ca:11:2d:6c:f2:
fa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CA:4D:79:07:EF:B9:80:1F:0E:34:E8:2D:76:66:9F:70:23:50:12
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5a:53:15:65:56:e5:20:fc:65:e2:78:12:16:5d:32:9f:e0:
6c:6b:f2:66:69:e3:cd:66:51:59:f7:94:2c:ac:d2:d6:2f:37:
10:fa:7e:60:16:f4:56:40:a2:dd:a5:c3:31:d0:26:e3:b4:17:
3d:76:79:99:8c:2c:70:f1:4f:84:15:6b:05:d7:d0:21:fe:bf:
52:d0:9a:a8:68:94:a5:7a:6d:13:6a:02:db:61:ca:2b:f7:10:
45:1e:11:10:92:a8:c6:04:61:48:f6:77:0a:0e:7b:4a:da:4e:
40:ca:08:61:65:ec:4d:4e:14:91:0c:72:fe:31:6b:b4:2a:eb:
bb:66:68:d1:59:25:20:32:77:fe:6d:63:0c:0e:b6:1b:11:89:
d1:12:95:30:a7:28:eb:31:23:1c:b0:76:4d:66:4a:4d:2f:d5:
a5:0c:02:cc:8f:d4:0c:88:06:82:ca:3e:d3:6c:cc:8d:51:95:
58:0e:a4:e7:dd:f1:d0:de:fa:d6:36:0e:25:ef:c3:0b:80:b9:
17:1b:0b:90:a9:31:8d:a4:d5:95:52:cf:0f:89:3c:f6:7c:35:
76:bf:76:08:ca:0b:9b:a1:ba:6a:31:99:b0:a7:e9:12:cb:f8:
b3:92:14:ea:f9:74:a6:ab:76:e3:9e:94:35:0a:5a:28:56:8e:
18:1d:89:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:05:56 2025 by rpki-client