Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier: jhhjY3pZhWVWS3/8AGpDGAbebbsWW1q6RrO61aiJ6Kc=
Subject key identifier: FD:BB:E0:00:AD:FC:97:ED:E5:FC:69:A2:2A:56:B3:D1:42:47:F1:CE
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial: 019682473B661414E0B9B89A1C2049FF16A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 16:00:28 +0000
Manifest this update: Tue 29 Apr 2025 16:00:28 +0000
Manifest next update: Wed 30 Apr 2025 16:00:28 +0000
Files and hashes: 1: 808eb-9aLu41roSMSaHO8r-sCJ0.roa (hash: rCM5eGiyr6wuq7y0i6XZdzgH6YJOrFxOSIfhu9ZqAu0=)
2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: af8PQ6BQzmFMzIwLqYapurbdfLf2drSanVqstMYEjIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:3b:66:14:14:e0:b9:b8:9a:1c:20:49:ff:16:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
Validity
Not Before: Apr 29 16:00:28 2025 GMT
Not After : Apr 30 16:00:28 2025 GMT
Subject: CN=fdbbe000adfc97ede5fc69a22a56b3d14247f1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:6d:e3:47:7f:f4:26:06:ab:98:f4:48:13:
58:27:19:d2:5f:cb:39:a2:96:6d:5a:fe:83:ef:ac:
a7:34:a1:41:77:86:fd:fb:88:ea:9d:2a:29:bf:b4:
d3:91:20:91:d7:3d:b3:b7:78:bc:d0:53:99:b7:4b:
4d:cf:6a:01:7e:d0:13:eb:0e:1d:21:9d:ce:24:4c:
f1:fd:4d:47:39:79:6d:c8:9e:05:77:e7:e9:a4:8f:
44:4f:1a:b1:07:a4:53:a8:3f:db:6b:7b:e7:ed:39:
c0:c2:9b:73:ff:d3:03:c0:29:98:b6:1a:1e:5f:00:
15:93:d0:c6:17:fb:fb:f6:28:28:2c:e9:6d:11:23:
f9:d2:6f:b1:4c:3b:9c:61:05:92:30:e4:30:e9:06:
da:c8:2c:85:be:5f:ae:8d:2a:f6:00:13:27:e6:8e:
62:9e:8f:cc:30:2f:85:b5:4f:1a:76:a5:08:3e:32:
60:a6:6d:f7:18:b3:14:a1:44:b4:12:11:a9:9b:81:
31:27:53:95:0b:fc:54:b3:75:b0:ba:1e:bd:49:e2:
f3:8c:4d:48:39:8c:33:71:21:93:fd:96:a1:fd:85:
e3:8d:53:ee:01:b1:e0:05:36:09:ae:35:ad:6f:d5:
09:2f:c5:74:59:0b:92:69:ec:91:0f:e5:cb:ff:7f:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BB:E0:00:AD:FC:97:ED:E5:FC:69:A2:2A:56:B3:D1:42:47:F1:CE
X509v3 Authority Key Identifier:
keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:89:55:b2:16:24:0f:3f:4f:84:63:06:e1:2c:18:2b:3a:00:
10:38:25:80:b0:bd:26:ec:f7:de:f1:e5:43:b1:89:7a:ce:da:
63:31:cc:89:e0:02:24:a9:cd:f0:be:51:fb:e6:7e:2d:aa:27:
7c:de:b1:52:65:d6:62:bc:40:4c:c6:8b:ea:d4:e3:93:4e:f6:
e5:8d:55:d9:a5:94:de:8e:19:98:8d:e9:99:4a:a7:54:cd:96:
6b:79:d8:3f:ff:6e:9b:c1:d5:58:09:e3:68:b6:1d:54:f5:da:
60:ae:c5:8e:10:b6:35:68:64:ed:ba:b6:cc:e2:e5:f4:60:ff:
69:e3:cb:26:46:2d:1e:01:d9:1c:46:f4:ec:c2:bb:9a:1a:06:
14:74:da:67:15:5b:35:03:5d:bb:c6:4d:3f:cf:c3:9e:d8:3d:
99:54:8c:16:fe:e0:54:ca:15:a5:ab:65:9f:34:44:14:a7:98:
d9:e5:b1:11:0a:fb:46:69:4b:fe:c6:56:71:60:d0:23:9b:6c:
f7:38:69:86:d5:c2:55:92:9d:8b:9c:c9:08:23:4a:86:b2:8d:
45:35:5b:b9:e9:90:3a:c8:f9:a2:03:90:ea:cd:b4:9a:db:e4:
d4:e5:4a:4e:00:8e:3f:40:8d:61:12:90:4e:0e:60:77:db:28:
df:46:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:12:27 2025 by rpki-client