Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier: lBbSncWVajPF1g57daFLHZjxRiXlAEuVUggVS+llLk0=
Subject key identifier: 88:55:E5:E4:D9:57:09:89:91:61:09:FE:03:9A:B6:26:8D:37:90:19
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 01969FE3FC86DA59F68ACD63E1393B1AB1AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 10:00:40 +0000
Manifest this update: Mon 05 May 2025 10:00:40 +0000
Manifest next update: Tue 06 May 2025 10:00:40 +0000
Files and hashes: 1: IVq_YZ1jGuMcDD4JRK3mmzzTW3o.roa (hash: sPByzBItFj1JqphVomCmYz50m1zlhsIta4Uhmwr6ALo=)
2: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: 8T551ejwG0KdltLIeRwtlVZpWRyevROgEPmN4m2gDL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:fc:86:da:59:f6:8a:cd:63:e1:39:3b:1a:b1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: May 5 10:00:40 2025 GMT
Not After : May 6 10:00:40 2025 GMT
Subject: CN=8855e5e4d9570989916109fe039ab6268d379019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:80:ee:54:ec:23:13:4c:30:47:fa:e7:2d:
54:90:a8:61:42:f7:37:25:80:4a:47:30:55:38:60:
b0:3b:80:f3:4f:23:28:2f:fa:6d:97:a9:ed:14:76:
62:05:5a:50:d8:ef:6b:b4:61:3d:43:52:c3:7f:14:
19:e8:00:75:a1:57:12:02:b0:c8:18:3a:72:02:02:
2d:7b:fa:b6:11:33:68:f8:d7:35:2a:b6:d3:3d:62:
76:6a:34:7c:aa:72:e6:40:31:a0:77:4d:0e:f7:21:
d3:06:be:74:2e:62:9d:96:d1:8b:7b:de:0f:86:61:
99:eb:e5:e6:47:7b:f0:83:44:29:a2:c8:c9:7d:76:
40:7e:fe:1e:a2:e9:e8:7d:9d:c9:48:21:95:0c:09:
6c:7f:cf:a1:f3:76:2c:91:bf:0c:0f:6b:2a:39:3c:
7d:0f:11:dc:4c:80:21:3e:89:53:25:a1:1b:27:f7:
a1:3c:57:f5:38:d3:e2:bf:b9:56:59:a5:7e:ea:dd:
25:10:0b:49:95:05:ea:d2:f5:0c:f8:29:64:64:05:
37:83:4c:a0:37:bf:53:81:8e:0f:9a:3a:86:85:c7:
5f:a9:66:86:29:06:4b:c5:cc:94:5c:1d:99:8a:d3:
a8:86:3a:06:ca:2e:41:eb:a2:6d:84:f5:3a:7a:84:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:55:E5:E4:D9:57:09:89:91:61:09:FE:03:9A:B6:26:8D:37:90:19
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a8:4f:1d:5d:2c:f4:49:87:4a:b6:9b:df:85:b9:36:92:69:
21:e2:fc:57:18:d6:6d:bc:d0:a8:08:5b:68:82:96:e6:bf:4f:
51:5a:75:57:db:38:02:2b:83:60:7c:b2:78:c4:f0:2d:5a:0b:
ea:34:a5:02:84:71:23:27:b7:d2:2e:db:09:f2:97:22:61:69:
d5:0b:7a:a2:36:a1:4c:c2:52:a6:d4:79:ea:79:93:2e:ab:9b:
4c:dd:42:bf:3e:de:4d:93:8e:9a:bc:f6:02:73:26:54:69:34:
d7:4b:4b:f5:36:56:a9:47:4d:70:ee:02:51:3d:95:c7:b1:b7:
b5:ff:a0:5e:f7:d0:a6:f9:5e:08:df:f1:79:e0:07:9b:0c:cb:
c6:98:cf:1a:d8:30:ea:26:90:58:0c:ac:f5:9f:eb:91:7f:01:
02:c0:8f:d7:8c:ca:36:77:b5:b7:9e:6e:ba:82:ac:25:44:94:
5d:55:18:91:f6:a3:2d:ab:4c:52:c9:b8:5b:77:18:82:b9:aa:
af:3c:0d:26:5e:bf:bd:de:0e:c0:c2:1a:36:78:94:c6:94:1a:
98:b8:9c:68:0f:30:29:e9:50:32:94:87:12:83:3b:3b:bb:e7:
48:4b:df:54:3c:4d:fb:16:63:97:6a:5f:f0:de:a5:6e:c0:a6:
43:85:c7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:04:31 2025 by rpki-client