Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier: MDMZlBrW7DzdXCcGfFE13yVIo4tVh7SR0KvZntYCJ38=
Subject key identifier: 19:32:2D:FB:A1:2E:5B:B9:28:6E:EE:AC:08:BD:E5:65:1E:44:21:02
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 0196BD80E06475483F38B37C504FE3154706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 04:01:01 +0000
Manifest this update: Sun 11 May 2025 04:01:01 +0000
Manifest next update: Mon 12 May 2025 04:01:01 +0000
Files and hashes: 1: 3_-hgw-hEPZjrdcvbmBPfyZjJX4.roa (hash: 32NxwfNK1ZaYklZXBKeX9wsuxMzcdx3YENya2fUqH/0=)
2: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: VSJ/XBraX1odZsJENvZSNZLyMfPBZXV19shVpl14/bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:e0:64:75:48:3f:38:b3:7c:50:4f:e3:15:47:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: May 11 04:01:01 2025 GMT
Not After : May 12 04:01:01 2025 GMT
Subject: CN=19322dfba12e5bb9286eeeac08bde5651e442102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d2:30:51:86:72:12:ee:eb:56:6b:b1:ea:0e:
d9:97:82:56:d2:c2:fe:c5:65:cf:b4:a7:51:2c:45:
ff:b7:55:b1:8a:68:7b:f2:4c:2a:f5:a8:c3:38:f3:
c1:cb:d7:eb:b3:ff:e0:ef:6d:bc:6b:e8:8c:c5:c0:
78:88:1b:c8:cb:7b:4a:c8:03:c2:e6:24:43:e6:07:
ef:19:92:a8:72:56:91:79:62:d9:bb:d4:2d:56:27:
b6:d6:df:f8:70:26:a3:d9:15:1c:08:4e:10:43:9a:
39:b7:94:15:a1:f2:8d:f2:bc:f7:f1:8a:cb:b9:44:
43:cf:94:27:7a:74:40:20:5f:a3:14:ae:35:67:2c:
eb:76:08:ac:d7:b5:94:9f:99:82:ce:eb:c3:ec:2c:
07:4c:2c:c0:a5:82:90:fe:28:4e:bc:55:50:75:f4:
70:19:5d:c8:0a:88:cc:bf:bb:8b:eb:5d:bf:1d:8f:
f2:ad:69:61:fd:5b:9e:0a:3c:1f:7e:5f:f3:e8:d1:
1d:ea:f1:b6:3b:a0:11:4f:cb:fc:71:8c:ec:e1:be:
80:65:99:c7:d2:1a:3a:4e:03:93:38:fa:fe:6d:a5:
07:3b:69:9a:7f:ea:a0:3f:29:c6:0f:b6:3f:e9:41:
b3:93:79:5c:a1:cd:c3:49:29:48:d2:0c:78:19:b4:
c8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:32:2D:FB:A1:2E:5B:B9:28:6E:EE:AC:08:BD:E5:65:1E:44:21:02
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8b:92:90:64:56:37:75:21:2e:02:49:0d:94:d0:74:3a:35:
5f:57:3b:56:e3:1b:aa:6f:c4:d2:00:82:f5:d2:5c:2f:da:26:
9d:1e:c9:f0:49:a3:ed:1e:7d:52:3e:93:52:9f:f9:80:98:c3:
46:e5:bd:9c:77:fe:29:9b:97:15:04:43:05:0b:85:f0:43:4e:
47:75:4d:9c:53:6c:67:2b:88:f4:0c:a5:95:a8:5c:cf:d0:47:
96:10:21:c8:33:73:bd:f0:40:0a:eb:dc:b3:d4:de:9e:b2:c5:
3b:80:ff:b6:84:7d:45:24:4c:4b:b8:8e:82:44:f2:ae:fc:37:
0a:1d:21:b6:b2:f2:27:d3:81:ca:84:9a:23:aa:6b:71:96:78:
38:dc:ed:4b:55:76:de:e3:25:08:e2:2b:02:ad:c3:8c:f7:f1:
c6:a6:8f:53:db:7c:36:29:10:1c:47:be:45:cb:18:ea:70:ad:
39:34:4f:d6:1c:2c:a3:c5:a2:f4:14:3a:a6:d4:c8:6d:f0:2a:
3f:f2:93:9e:bd:53:03:1c:68:f3:e9:c6:a5:c8:7d:6f:51:ba:
a2:4b:cc:0e:fb:66:39:80:6c:ee:ed:1c:f6:94:07:82:dc:ff:
c6:88:90:16:dc:bc:01:26:71:aa:42:6e:d9:f3:8d:63:68:fa:
de:a3:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:48:59 2025 by rpki-client