Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: p9mD3kGh7UKx6uSupko43aY1aGtMjNQLSny6qonGajQ=
Subject key identifier: F2:27:FC:10:71:5D:03:F1:73:51:86:62:68:C9:24:CC:A0:83:E2:04
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 0196B7477B2DB72A27FC49C3CA653E02DB5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 0FAB
Signing time: Fri 09 May 2025 23:00:37 +0000
Manifest this update: Fri 09 May 2025 23:00:37 +0000
Manifest next update: Sat 10 May 2025 23:00:37 +0000
Files and hashes: 1: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: gOmk6anhcUW+R5GqZwRF0ZdkTJ+JM28CmzMSUdUdDI4=)
2: XKbuE11HMiW-d3-7SHwE1VaECgw.roa (hash: iROyh9ucuOmjws3pOPkYjHDlUGlInLoKUEPjUvuWoZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:7b:2d:b7:2a:27:fc:49:c3:ca:65:3e:02:db:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: May 9 23:00:37 2025 GMT
Not After : May 10 23:00:37 2025 GMT
Subject: CN=f227fc10715d03f17351866268c924cca083e204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:31:e0:e7:8e:73:32:12:0b:97:7f:4b:c8:
2c:8e:5d:08:91:b1:28:a9:1a:73:10:d1:ce:34:75:
85:23:16:0d:eb:81:32:56:f6:50:28:e4:44:54:de:
fa:bb:2e:d0:75:e4:1a:e7:69:26:71:b5:e0:cf:ab:
73:55:3f:43:22:07:ea:d8:d9:9f:eb:5a:e1:45:9b:
7d:c9:c0:fc:48:a7:f1:6b:61:1a:c8:c2:ca:72:b4:
f2:f8:7a:1d:92:f1:2f:a0:fa:0b:61:44:34:13:8a:
7d:89:ce:54:4d:ac:56:a6:5e:2c:1c:ab:66:9b:ef:
ef:bd:2d:fa:78:18:ce:b0:d9:f5:19:10:9f:92:60:
9a:6c:b1:95:c9:f1:3e:23:86:1f:f9:42:da:38:8c:
f2:6f:f3:fe:d4:0c:10:2c:0e:fb:d2:31:21:7a:16:
76:b8:ba:b9:ad:87:49:81:bd:bc:f8:3a:08:5a:fe:
6d:ff:6c:31:dc:b7:de:15:57:f6:ba:df:43:f8:59:
34:1b:94:53:51:1c:8b:6d:81:64:9a:2c:27:67:42:
4d:19:5b:6d:ab:dd:8b:6c:41:35:fe:5d:f8:ed:42:
e5:58:91:f0:af:c4:61:da:45:1f:32:06:35:d5:33:
29:82:79:0e:a2:bc:53:67:ea:f5:44:c8:a3:0f:0d:
bd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:27:FC:10:71:5D:03:F1:73:51:86:62:68:C9:24:CC:A0:83:E2:04
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:24:4a:49:c1:37:95:bf:91:bb:f7:a3:16:87:df:08:70:0d:
62:e3:60:58:95:47:f5:7e:d7:ad:1c:76:85:a9:59:e4:5a:76:
e4:cb:2f:bc:ef:55:b0:c8:9e:14:65:d6:ad:07:70:71:a2:22:
ed:c8:5c:44:df:2e:bb:af:1b:79:1c:60:a1:82:5b:7d:2b:01:
b6:17:93:86:46:9e:34:c9:97:9f:27:58:e4:2c:d5:dc:5e:5c:
1a:06:8b:f8:26:1a:75:97:1a:0a:8b:06:ee:5e:80:62:ad:1c:
39:c2:d5:e8:03:3c:01:74:44:3b:f6:6d:b5:52:96:e7:56:94:
30:c5:0e:a6:5e:81:ca:74:26:ab:bc:bd:ef:b3:89:c2:b9:f2:
e1:d0:96:e7:9a:ce:f8:77:64:3f:ed:4b:d2:24:fe:7d:96:ec:
14:87:3f:82:8b:e5:3d:b1:88:00:d8:bd:5a:ef:92:1f:58:ff:
d0:59:73:c4:2b:c9:a4:35:96:79:00:b7:f7:28:48:48:6a:38:
12:00:67:90:6d:86:63:1b:32:f9:55:3e:70:60:55:3f:a4:66:
e5:41:49:0d:84:62:73:cd:44:7d:93:09:8b:49:58:29:15:93:
cf:f9:10:46:70:7d:13:21:d8:22:c4:51:29:fe:10:08:a8:7d:
98:94:c2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:10:11 2025 by rpki-client