Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: Y5zglZ8GcLn/2Ec4FqCD0sMfbyZT/v74Ib1c8k0eCfI=
Subject key identifier: 26:75:B3:56:F8:0F:29:CC:8C:CD:A2:99:D3:49:D4:AF:20:22:0E:65
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 0196BCDBC854C6974F7FF668F870EF8FD93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 01:00:42 +0000
Manifest this update: Sun 11 May 2025 01:00:42 +0000
Manifest next update: Mon 12 May 2025 01:00:42 +0000
Files and hashes: 1: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: Y+c7ratU+y4Tl5O2mlHMR2bt449Aua4w8tMUWQ/bIS4=)
2: e3qYhLR-km5IQlHYrXGIQxD6r18.roa (hash: o3slshWpfwKW/e4DeCSWK9BRzXX7zHWEOnbvJOQywpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:c8:54:c6:97:4f:7f:f6:68:f8:70:ef:8f:d9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: May 11 01:00:42 2025 GMT
Not After : May 12 01:00:42 2025 GMT
Subject: CN=2675b356f80f29cc8ccda299d349d4af20220e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:9b:8a:d8:69:62:88:4f:09:02:02:31:c7:
29:48:4d:dd:93:a2:f5:a0:23:e0:45:75:ea:52:c6:
2a:b2:53:d9:9c:10:15:f2:0e:99:5c:65:c0:44:b0:
e6:e2:c0:f6:a7:48:af:7e:41:45:cc:6c:ae:7d:f3:
6a:93:19:3d:dd:29:bc:dd:26:be:5f:3e:78:2a:90:
43:cd:60:50:b1:46:70:50:97:43:87:41:d6:49:ec:
8a:04:1c:f6:39:0e:34:42:52:62:dc:d4:74:ff:27:
15:91:92:49:ef:9e:70:27:67:80:ca:69:00:de:50:
81:0e:ef:e5:dd:10:26:1e:4b:95:88:66:45:13:0b:
1c:3b:60:2a:47:9b:7a:4d:e2:72:b2:77:0a:e2:e2:
8c:45:85:59:cc:dd:c5:5b:e2:67:ef:54:bd:0c:96:
ed:c8:d1:74:3e:22:de:d3:c1:29:97:ac:41:99:98:
98:bc:f0:ba:01:67:3e:3b:69:60:c9:36:7c:fa:2d:
c9:14:88:eb:5a:df:d5:88:50:b6:bd:b4:eb:04:a5:
fb:8c:67:c6:4b:1f:ae:af:e0:73:ac:88:4f:15:ac:
ce:cf:d0:22:b4:07:18:c7:43:59:e6:3b:89:f2:c4:
97:d6:14:0c:e7:4d:62:3f:8b:10:e4:1f:e5:3f:13:
d4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:75:B3:56:F8:0F:29:CC:8C:CD:A2:99:D3:49:D4:AF:20:22:0E:65
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c8:c1:b0:e0:71:a8:43:52:fa:95:60:28:8a:2c:cc:f4:b3:
75:e1:ea:3b:c0:d2:52:2f:c2:c8:e3:66:cb:1e:31:84:bf:81:
78:b8:4c:2f:48:89:72:a1:c1:6e:c8:b9:3d:c2:08:07:27:f2:
ed:84:37:fe:f0:05:73:1f:6c:5f:d7:19:79:6b:9e:bf:c5:e0:
88:8b:16:50:b7:b3:82:44:01:cd:ed:ba:80:ca:51:38:3a:88:
c6:17:5b:9b:d8:70:79:81:47:ca:6a:01:91:8c:d8:ce:d4:8c:
9f:61:69:99:bc:90:ca:18:03:7a:0f:8f:a1:6f:a0:48:a0:ac:
e9:ca:19:03:0c:d8:5f:93:d3:8b:da:57:30:6c:ca:52:a1:f1:
5d:17:f5:ae:e8:fd:60:43:d5:ab:62:61:9e:ee:c0:ff:cc:90:
b4:85:09:31:2b:4b:a6:46:2d:44:f9:40:ec:44:ff:f4:86:24:
16:1a:75:73:3d:4a:a1:2a:e1:0f:10:e6:5b:a4:49:8e:6c:5c:
0e:72:eb:2e:9b:0d:35:ed:d3:41:a4:89:75:04:a6:4d:e2:67:
f6:eb:b7:94:43:e0:dd:30:91:54:37:dd:5c:60:25:3d:1e:49:
bf:36:82:0d:c2:b9:ee:38:7a:f9:f5:f8:02:ec:ca:7b:8e:d4:
f8:34:49:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:13:23 2025 by rpki-client