Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: /gNqbE+7NjcL3eErSEkedeTbsyM0nW6bfoHrmm0q6uI=
Subject key identifier: 12:C4:A9:52:6F:4E:25:17:C2:B1:FD:C5:CB:92:93:51:EA:E9:B0:4B
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 0196CC4F085EA15E789D5842C8C808171714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 153C
Signing time: Wed 14 May 2025 01:00:53 +0000
Manifest this update: Wed 14 May 2025 01:00:53 +0000
Manifest next update: Thu 15 May 2025 01:00:53 +0000
Files and hashes: 1: c_4VrUZIMtuPlYj4DhW8ouhaRQw.roa (hash: 3ElLAVX1FXo1T4VYhDu+QaMztPbJUQVgeIUdwTADFRI=)
2: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: /mulPqQm3me5kbT8lCuSPbHLu6c9Uuu+cnE2GexV3oA=)
3: r_WAi-eWzHC7Psr81UVNU3kzOJw.roa (hash: ZETLofVAHwa7kjk2pEcSj1ALX1XE9n9Z4taPD31cXSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4f:08:5e:a1:5e:78:9d:58:42:c8:c8:08:17:17:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: May 14 01:00:53 2025 GMT
Not After : May 15 01:00:53 2025 GMT
Subject: CN=12c4a9526f4e2517c2b1fdc5cb929351eae9b04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:99:e0:ae:c2:8f:2d:35:9a:63:4a:12:86:
dc:e4:18:a9:c6:01:ac:f2:cb:ee:a2:38:da:6e:c9:
5f:03:07:59:d8:28:c2:33:42:f5:51:d5:a9:11:5b:
f1:28:19:65:9b:01:63:f1:5e:48:46:73:9e:51:f1:
31:56:93:01:b1:d8:a4:71:98:37:6d:c7:46:e9:c2:
be:9c:61:c4:05:a8:26:87:8e:43:86:d3:00:3a:f3:
cf:2d:86:4e:a8:0c:98:96:7d:17:98:8d:86:11:34:
a4:4e:f3:c4:37:2c:3e:0e:e1:ff:09:6e:34:66:d2:
5b:be:54:d2:64:d7:d4:64:ac:82:a1:ac:f0:f5:0d:
d1:ee:4f:c5:5b:bb:7b:8e:56:11:de:bb:9a:ea:65:
f6:a5:54:ce:7b:85:a8:8f:42:cc:3b:ef:0c:c1:88:
2a:e6:86:88:ee:5f:f6:d6:01:21:c9:ac:fc:33:35:
13:8e:86:b4:34:1e:7e:f7:78:ce:84:c1:df:5c:78:
3a:8b:84:b1:04:a1:2a:49:3e:04:bd:fd:f0:35:47:
9e:87:de:22:fe:f4:6a:d3:1c:46:f6:71:41:15:e0:
44:de:0e:5c:a2:57:c9:02:e7:eb:ab:9c:bc:17:6e:
45:4b:9b:14:34:6e:8b:2b:68:f7:dc:9b:0e:d2:0d:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C4:A9:52:6F:4E:25:17:C2:B1:FD:C5:CB:92:93:51:EA:E9:B0:4B
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c0:90:ef:28:6b:ad:1e:a9:f3:52:ce:b7:ef:df:a8:0e:cd:
7a:08:99:7d:c0:da:78:f3:89:d5:33:b0:ec:1e:55:12:69:8b:
a7:30:84:da:c7:42:f1:7d:9f:f7:8e:2e:f5:ed:54:97:1e:c0:
47:b4:44:2c:bc:b1:ac:4e:d5:99:9f:c0:67:7a:83:87:35:f0:
9a:03:96:b3:84:ae:30:d7:43:8c:6c:98:ab:d3:76:56:28:42:
31:32:30:08:53:0e:4a:ea:bb:4f:e3:b5:19:c6:bd:73:02:bd:
e6:c6:ab:a8:e3:42:62:dd:77:0c:bb:cc:6c:78:f9:17:15:e1:
af:17:06:50:a2:8e:43:44:08:1e:42:c6:78:99:d7:d9:46:d6:
2e:0b:7f:88:df:27:a2:5f:6d:14:d5:20:bb:89:61:72:d3:1f:
31:b2:6f:07:7b:71:fd:da:29:98:a1:80:8a:9d:ab:9a:a1:71:
50:f9:76:69:9a:ee:e3:97:75:ef:33:a3:5d:1a:eb:ec:52:79:
a7:ed:2c:87:2b:97:34:8e:73:40:7d:0f:cc:8d:7f:37:ec:0e:
b1:ab:1a:8f:db:d4:d4:2a:8d:85:d6:ed:99:0b:34:1d:aa:f0:
ab:18:02:12:91:9d:6e:ce:5d:2c:41:3c:6a:a7:62:e2:eb:55:
70:6d:93:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:15:32 2025 by rpki-client