Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json)
Hash identifier: 8IIuOj6PVNA3BVCNtKXzn/F0p/F2xak7+N4BRdpflbc=
Subject key identifier: 08:4A:B5:BC:31:44:74:3F:53:80:4C:3B:47:68:91:34:26:6B:F0:25
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial: 0196BDB75BED2FE3181DA2E2F7D8EF122F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 05:00:32 +0000
Manifest this update: Sun 11 May 2025 05:00:32 +0000
Manifest next update: Mon 12 May 2025 05:00:32 +0000
Files and hashes: 1: DTYyZuafFj4qXWfudssAoo7YyUc.roa (hash: XFaAmLI0e2ldAKL+t4MvCZW7ieWrsLzA21ljUa5d0Uc=)
2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: 98J3nEeji/mUz2dKtouDUdHqwrxCiO69Fd9NPC5STB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:5b:ed:2f:e3:18:1d:a2:e2:f7:d8:ef:12:2f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Validity
Not Before: May 11 05:00:32 2025 GMT
Not After : May 12 05:00:32 2025 GMT
Subject: CN=084ab5bc3144743f53804c3b47689134266bf025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3e:95:82:4b:4c:d9:bb:bc:a1:76:ac:39:5e:
78:a8:f3:7e:e8:f2:81:5a:fd:62:17:1b:45:fd:74:
0c:34:cb:de:ba:81:0d:53:5b:73:8c:a8:6d:e1:04:
24:29:2d:93:21:43:2c:f0:24:0e:66:3e:b5:d9:95:
be:54:a9:ef:92:f0:a8:46:63:13:e3:cc:f6:09:93:
16:e3:34:89:33:5a:78:53:f2:13:23:a4:98:aa:97:
3a:a1:1d:fc:ca:b3:b9:b9:aa:1d:de:8c:63:ea:6c:
d8:c7:26:7a:15:2e:91:16:7c:ca:27:c9:9a:d1:01:
60:46:54:24:b9:b3:79:95:dc:e1:b7:14:5a:db:b9:
1a:50:3a:6f:fb:87:45:60:ff:9d:2d:0f:33:b0:2b:
96:f5:d4:6a:6c:dd:61:eb:4e:7d:5d:5c:2c:8b:94:
ea:d4:0f:1b:a1:03:df:eb:49:0a:17:d7:2c:3f:de:
86:6e:28:9a:96:2c:f2:2c:07:33:e2:b3:09:34:a9:
c5:f6:96:52:13:6a:f7:cd:89:e8:e9:8a:80:23:ec:
88:eb:e9:c5:27:64:e0:cc:6d:23:b4:36:67:5d:e0:
cc:e5:6c:3a:67:f7:86:6e:e6:ef:8a:82:37:a2:e6:
1e:1d:5c:66:4a:2e:88:5a:75:86:79:2a:e4:c9:38:
13:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4A:B5:BC:31:44:74:3F:53:80:4C:3B:47:68:91:34:26:6B:F0:25
X509v3 Authority Key Identifier:
keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0c:84:e5:ab:d5:16:ef:1d:dd:5a:d1:a6:dc:85:5c:1c:e0:
5f:84:d0:b8:78:b3:f7:15:a7:f2:cb:9d:ad:e6:af:49:32:b8:
91:4f:4f:23:8f:ad:d0:eb:de:ab:86:8c:31:e3:81:78:ee:3f:
73:d3:2f:9b:8b:de:63:a8:fd:c8:3c:18:f5:a5:23:fc:aa:bb:
ca:90:f8:56:64:e7:c2:f7:ef:e0:10:87:43:33:2c:0b:73:d3:
33:e9:00:05:15:e8:43:1d:9f:a1:56:98:d8:e4:53:4d:bc:37:
62:07:e6:27:b6:56:eb:31:7d:b9:69:0b:57:6c:a2:00:06:43:
c7:8b:56:7d:4c:91:37:63:e9:d3:c1:f0:f8:d8:76:64:a9:eb:
a3:93:d0:16:ed:11:8f:c3:2f:3b:43:f1:ec:b9:04:e0:43:19:
c6:1c:de:0f:49:25:18:8d:7f:9b:b8:cf:ac:1d:41:2c:39:c0:
53:33:06:71:b8:c6:c2:ec:39:30:cf:a7:85:e9:18:e1:33:ba:
c6:6a:82:7b:2b:cc:30:37:2d:ab:60:2a:d7:b8:2d:ab:97:81:
e2:eb:95:96:2b:5f:29:8b:3e:ee:18:7d:93:fe:dc:08:d6:6d:
9d:29:ad:a6:9d:60:16:61:1a:8c:69:8a:30:12:67:ee:61:c3:
94:80:8c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:41:22 2025 by rpki-client