Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier: D0btdLTHlIGaAteeOhopmAcoJatKdOUgaGLeuWXuHQU=
Subject key identifier: 70:FD:79:3A:B6:46:DA:CE:D4:D9:BF:C5:74:E4:EF:6F:B1:4C:FB:8B
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 0196A98BF559CA883C1246BDA5AAB1EFA343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number: 152C
Signing time: Wed 07 May 2025 07:00:43 +0000
Manifest this update: Wed 07 May 2025 07:00:43 +0000
Manifest next update: Thu 08 May 2025 07:00:43 +0000
Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: FClfpj8+AKfdCIMKkh8GGKJAS4aiunhlSkFiJspK9cg=)
2: ZfyPZAhLEDJfbRWOZTPW6i5uxAs.roa (hash: lVcg5S8ltJ0oxrMYvDgCBMGIQj26liJSgr9Rj1kE0c4=)
3: dywSz8RV6R_zILQ66xhZrS_rEB0.roa (hash: 9q5cK6mUpjjqk6wT4UQLlfFH4bjjllWU5kv3AHNWRgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8b:f5:59:ca:88:3c:12:46:bd:a5:aa:b1:ef:a3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: May 7 07:00:43 2025 GMT
Not After : May 8 07:00:43 2025 GMT
Subject: CN=70fd793ab646daced4d9bfc574e4ef6fb14cfb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:ba:5b:5b:29:be:db:f9:ce:1a:69:ff:72:
69:58:3a:7e:41:0d:e2:0f:dc:88:78:b4:60:57:71:
8c:f2:80:50:6f:2f:b7:da:d3:67:48:d4:f4:cd:9a:
5e:16:e7:53:f5:41:a6:f0:17:6a:3a:76:62:a6:e2:
43:26:cb:9b:22:fe:d6:df:08:d3:e1:04:db:bc:76:
5b:8c:b5:74:25:9e:93:ac:19:84:6e:e0:b3:73:a1:
7e:d5:31:2e:53:54:07:f2:d3:f6:5c:62:6e:eb:61:
d3:b3:f6:a1:1f:7f:27:8d:a8:47:be:bd:7d:3b:62:
5e:7e:ee:c8:c6:48:95:80:f9:55:2c:4f:08:44:25:
40:ec:11:f1:24:d8:eb:42:1d:26:52:cc:2c:24:4a:
59:f0:d0:f9:1f:09:82:f8:d0:22:5c:7b:35:9b:5e:
25:5e:c9:fc:ad:89:0a:84:e3:6a:f5:d7:e1:9b:33:
ee:ed:ea:63:a6:90:83:48:6f:e0:55:7b:6c:4d:47:
a9:c0:67:ef:b9:33:aa:ee:14:54:3a:be:75:bd:4b:
df:93:a5:df:ec:4a:5e:fa:b5:82:15:15:4c:cf:8e:
24:3b:b1:b1:50:58:58:45:11:9e:03:25:c2:8b:4f:
d2:0c:43:53:64:fe:31:28:40:61:d8:c5:98:f9:70:
b6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FD:79:3A:B6:46:DA:CE:D4:D9:BF:C5:74:E4:EF:6F:B1:4C:FB:8B
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ce:5f:49:d0:fd:ae:8c:56:3f:88:b3:d2:29:95:72:f7:28:
38:f1:4f:a2:79:24:43:84:c3:61:cf:e4:5c:30:07:cf:7d:54:
7e:fc:e2:f1:2d:57:ed:ee:08:76:7e:01:47:3e:f0:04:58:db:
d0:e8:da:94:8e:d2:99:b4:42:57:12:88:f6:89:ad:90:eb:60:
8b:9f:b0:ef:00:94:b4:56:02:94:ec:e3:a4:65:1b:c4:d4:98:
67:35:54:f7:46:df:75:ed:e8:0d:c9:10:45:c7:c1:3d:0a:fb:
f8:77:2c:a6:22:43:93:56:3d:b8:16:87:87:31:ff:47:d2:5f:
29:ea:dd:e1:2b:14:9c:6d:5d:0e:1f:b2:cd:36:e6:0e:0b:0d:
4f:06:7b:d9:d5:18:64:2b:24:67:c7:d8:8e:46:31:c2:16:7c:
41:f9:cc:63:41:9d:61:6e:16:c9:cd:f0:66:a2:79:d5:4e:52:
79:16:7b:36:f3:cf:59:76:be:78:b3:f7:91:d0:21:c9:89:f6:
c7:39:50:b8:c9:54:d6:d4:16:07:52:06:be:a1:fe:e3:57:16:
c6:39:da:2c:e0:a2:11:ba:c8:66:4d:dd:52:22:1f:d8:f6:d9:
3f:67:5c:bc:6a:c2:0b:c3:43:8b:78:8f:98:04:ad:58:b4:d4:
fa:d3:2f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:28:34 2025 by rpki-client