Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
File: dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json)
Hash identifier: NFh7U8FExaq4lf8FI3vU+YNqHBDp/uVwTBTilvdHLys=
Subject key identifier: 97:37:4C:EA:3E:79:DF:FB:92:EC:A3:50:B1:32:D2:B9:1C:CA:BA:9F
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Certificate issuer: /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial: 0196BD80C4A3542015361EC1473443C81987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
Manifest number: 0507
Signing time: Sun 11 May 2025 04:00:54 +0000
Manifest this update: Sun 11 May 2025 04:00:54 +0000
Manifest next update: Mon 12 May 2025 04:00:54 +0000
Files and hashes: 1: 5YMm7iUmf7YXCbeTMsZ2gbUF8Mc.roa (hash: IgoqrrmJPuGzGpT+UcpwCttOwj7BjxbDg3tOXCDKJe8=)
2: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: tF4uwV+oNw8E2iK5EMFhfjDZ2GpYIz4Plaqo7QfZUaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:c4:a3:54:20:15:36:1e:c1:47:34:43:c8:19:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Validity
Not Before: May 11 04:00:54 2025 GMT
Not After : May 12 04:00:54 2025 GMT
Subject: CN=97374cea3e79dffb92eca350b132d2b91ccaba9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:95:af:41:e0:f9:41:fe:97:78:f3:1f:0d:
8a:d9:ee:d0:6f:48:e4:32:43:d6:8e:38:34:e4:3f:
d9:60:53:5e:ce:07:20:f9:96:d8:3e:73:3c:ab:e7:
d9:59:df:7e:df:5c:82:bf:89:26:95:33:7c:8b:4f:
50:0d:d9:6e:50:e7:e4:6b:b8:55:87:6e:8c:ba:db:
e6:70:c8:8d:22:1b:47:6c:e0:aa:62:b3:9d:f7:3e:
54:34:6c:07:f8:0b:dd:e6:51:a1:be:3d:d5:80:fe:
f0:a3:a9:de:de:bf:4e:bc:85:81:bb:d7:cf:d4:d5:
b3:d5:7e:0a:dd:e8:7c:fe:ad:b6:ae:22:40:5e:13:
b4:59:73:d8:ea:bf:e7:10:1a:0e:b9:a1:36:de:13:
5c:9d:2a:46:b8:bb:f6:aa:b0:8c:81:1e:cd:a6:1c:
57:d2:84:98:3f:77:7e:1d:38:9c:e2:e3:30:86:82:
ca:f6:4e:3e:57:e6:62:9e:dd:6f:28:74:c0:2e:52:
37:6a:e3:a6:e8:46:1f:12:8f:4e:55:4f:81:30:0b:
71:c2:0c:29:3f:d0:e7:8a:2e:53:58:85:a2:fd:93:
2a:ed:f2:47:89:a6:45:5d:21:99:87:94:6f:95:9b:
d6:dc:52:82:df:c3:8f:ee:f8:6e:09:a0:2e:ae:79:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:37:4C:EA:3E:79:DF:FB:92:EC:A3:50:B1:32:D2:B9:1C:CA:BA:9F
X509v3 Authority Key Identifier:
keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7e:4a:dc:4b:a4:18:1a:9b:1a:79:49:6f:53:e5:30:38:80:
10:1a:4a:74:01:17:7f:f2:72:41:84:50:bd:25:50:88:7e:e0:
60:c6:14:38:e6:c1:cf:1a:79:eb:20:f5:7b:73:41:c3:36:0f:
52:94:c7:a7:96:f3:f2:e9:86:93:12:e2:73:89:86:84:3c:bb:
c9:5a:26:fe:f6:7e:61:07:e9:b8:17:bd:db:9b:7d:79:79:73:
6a:cf:21:15:97:1e:5d:c1:44:8d:4a:f3:b1:bd:b9:45:2f:cf:
55:f3:94:57:2e:74:b6:20:34:bf:35:f0:54:68:0f:4a:b3:7e:
4f:94:c2:eb:56:95:af:42:63:34:11:7a:f1:62:1b:91:56:9b:
d2:5d:69:a1:c4:3d:fb:70:7e:49:48:ce:8a:52:98:c7:64:2e:
94:e0:af:3b:5e:fc:c6:2f:bc:97:97:c4:75:c7:eb:8a:a4:86:
f3:26:47:65:f5:dc:35:ac:ca:d8:d6:7c:a3:5e:16:7c:2b:48:
da:79:56:ab:9a:8c:83:0c:45:ee:04:f5:5a:b3:66:7f:45:d6:
d5:8a:38:21:0e:cc:4b:f3:79:cc:e8:a7:71:27:b0:2d:c1:81:
14:07:26:86:19:fb:9d:05:62:6a:bd:95:45:dd:3e:e2:40:d8:
f9:e4:94:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:45:23 2025 by rpki-client