Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier: IXxU1J0ebkUiIUU8oYD4tLf87LKF/Sa+5lKc20NuNt4=
Subject key identifier: E4:7F:11:FF:CE:E5:27:79:29:2C:98:DA:7F:DC:67:91:41:BC:65:65
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial: 019677C3B313891F105285DF9D796B21BD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 15:00:36 +0000
Manifest this update: Sun 27 Apr 2025 15:00:36 +0000
Manifest next update: Mon 28 Apr 2025 15:00:36 +0000
Files and hashes: 1: 16VwzWVgNRyLCtAXch9PWfSWgeM.roa (hash: C203Vfz7VUs5MzzkDe6+jJ/0Hm3QJ8YvUWmNLcGjW6Q=)
2: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: eOKy7wqMaA2LH9dxE+ZcXF2MPTGz4PqNaVcY7q3Oj5U=)
3: si754UrpKqsViXC-aHyx2LtipFA.roa (hash: VCYyh8ACSkDGJLu/cfRmB43QT8YqJ4jUUodjDefcg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:b3:13:89:1f:10:52:85:df:9d:79:6b:21:bd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Validity
Not Before: Apr 27 15:00:36 2025 GMT
Not After : Apr 28 15:00:36 2025 GMT
Subject: CN=e47f11ffcee52779292c98da7fdc679141bc6565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:8a:06:04:e0:4d:6c:86:86:48:81:f4:a1:
d3:9a:5c:60:5e:37:88:cc:19:aa:26:06:a2:29:80:
9d:5b:fb:ed:f5:8a:ca:ba:5f:b6:d8:50:85:c7:53:
2e:b3:d3:f8:98:c6:df:e5:33:24:5d:00:5c:1e:4e:
49:44:57:1b:34:84:76:01:e3:6a:f1:7f:2b:4b:80:
e7:bd:68:8c:43:1c:4c:dd:db:1f:41:e7:44:b6:56:
39:84:2c:cc:60:a0:61:97:58:61:b0:f3:31:16:10:
66:6c:b3:dc:75:42:f0:3d:be:6d:b3:6e:99:f0:a1:
63:fa:7c:6a:db:41:84:63:c1:50:42:1e:e1:0b:4e:
18:e5:21:5e:fd:ec:4a:67:09:5a:1f:22:e7:75:fa:
1a:09:d4:2f:b9:64:5e:28:c4:93:e5:cc:94:e8:c5:
45:8f:30:f1:6b:58:d1:b4:69:e5:41:7f:94:f6:1d:
b3:06:a7:41:22:f5:76:82:be:c5:33:af:d1:a8:ea:
16:ba:0f:61:32:70:9e:3b:77:fd:2b:98:1c:4c:94:
5c:c9:87:df:41:62:1f:8a:a0:1c:b5:fd:04:18:83:
40:2a:91:a4:7a:95:e0:d9:fd:73:ac:fd:bf:4a:c3:
ca:e0:6d:4c:07:fa:1f:3f:ae:ac:f5:a8:6c:94:ec:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7F:11:FF:CE:E5:27:79:29:2C:98:DA:7F:DC:67:91:41:BC:65:65
X509v3 Authority Key Identifier:
keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a1:8b:43:3d:4c:3c:93:16:aa:6b:7e:9d:45:95:1d:b1:8f:
66:b2:e2:41:8e:6a:0c:3e:fd:d9:81:80:b8:d7:fe:10:7f:66:
8b:c4:cd:d9:fa:f0:a7:7e:7c:83:75:fd:a8:79:bc:e0:4e:6a:
5c:30:15:d0:1d:ad:c4:c3:62:2a:d2:0d:f3:5b:e3:a7:0b:14:
79:85:c8:d3:c0:0f:3c:1a:b4:c8:d8:88:e5:84:12:fb:a5:0f:
a7:34:f5:7b:d7:b8:b5:b1:25:a7:e1:1a:39:be:a4:2f:72:d5:
d9:c2:7f:f2:19:1b:08:fd:5a:fc:de:5d:33:08:8b:33:5a:b6:
68:b3:96:c1:f4:98:11:a4:ea:a0:0f:72:c6:bf:54:c0:9d:4f:
a9:c8:af:20:df:73:a1:ae:2b:ae:59:2e:ba:43:44:0f:96:d7:
7f:50:8d:81:cb:0c:22:93:b1:ef:72:82:d7:d8:80:52:30:bb:
51:57:bd:c7:61:3f:47:af:77:81:fe:0d:ab:fb:4e:ee:79:93:
0b:d2:b8:6a:9d:fc:ef:75:e4:e3:b5:e7:df:ce:39:59:b1:f2:
5e:01:d6:7d:72:7c:45:3e:c6:06:a8:b0:c8:fa:38:55:db:d8:
26:1f:82:d8:b9:75:f3:14:23:93:cd:93:73:d9:ea:4f:c4:a0:
8f:1c:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:10:17 2025 by rpki-client