Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
File: d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft (raw, json)
Hash identifier: 2dGSh5trhgc54K7pcyfM29cwMnY13/VTGo10aF7FsWk=
Subject key identifier: B7:CC:8F:CA:85:28:06:C3:41:37:53:81:F0:7D:DE:B4:00:6B:19:90
Authority key identifier: 77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
Certificate issuer: /CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Certificate serial: 019674C258BAA71E68C04E1B8BC489014786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 01:00:15 +0000
Manifest this update: Sun 27 Apr 2025 01:00:15 +0000
Manifest next update: Mon 28 Apr 2025 01:00:15 +0000
Files and hashes: 1: 9RiEw_mWI329p00ygK6PV3zCib8.roa (hash: 76xZV8riwU1FZRHFqIOaKnZ1x4iN7Apxati5A/6/dRc=)
2: d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl (hash: 2kowNoyXUdK8Q4g1wykqMsa+Sac3sHDUrrJMfsqz40w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:58:ba:a7:1e:68:c0:4e:1b:8b:c4:89:01:47:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Validity
Not Before: Apr 27 01:00:15 2025 GMT
Not After : Apr 28 01:00:15 2025 GMT
Subject: CN=b7cc8fca852806c341375381f07ddeb4006b1990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:13:36:af:f0:2d:97:d1:74:a2:f5:8c:37:
44:89:a9:37:50:87:1e:2d:7a:42:f7:bd:09:41:88:
2e:04:fc:42:c5:d1:63:69:e5:d5:99:f2:88:23:11:
1b:02:e7:19:5a:8b:fa:94:a0:26:59:8f:3c:27:a5:
a9:19:0b:35:5c:f9:2f:e3:79:27:a7:7f:26:b9:1a:
64:e5:c5:a1:06:fa:7a:8f:b6:6c:c9:a8:5b:67:2c:
1b:6b:87:ff:01:7f:c4:fa:81:6b:df:70:5b:01:a3:
aa:93:00:6f:6f:ae:97:10:10:43:b2:bd:41:43:e7:
f1:c8:45:c0:61:1c:e5:9b:11:eb:a5:ee:70:a4:18:
07:e8:cf:2f:e0:b0:52:5e:77:ce:90:be:9e:ed:50:
d3:74:45:cc:a0:f2:30:02:b1:39:5b:fa:9b:b1:b7:
7e:78:1c:20:97:fb:97:eb:12:44:25:e3:1b:39:f8:
de:b8:ac:ac:57:36:fb:51:53:38:57:a7:07:7b:31:
ce:06:77:96:70:8d:50:7c:65:ed:d9:9c:6e:17:b6:
2f:c4:c7:b8:a3:69:b1:df:23:b4:ba:92:40:83:e8:
21:48:57:41:cb:fd:83:eb:a5:57:7e:fa:26:89:54:
1e:df:d4:86:1b:28:2b:bb:79:df:4f:ca:d7:02:2d:
e6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CC:8F:CA:85:28:06:C3:41:37:53:81:F0:7D:DE:B4:00:6B:19:90
X509v3 Authority Key Identifier:
keyid:77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8a:65:14:8e:64:8b:34:e8:21:da:c3:1d:11:37:29:aa:bc:
0a:e1:e0:aa:1f:bd:b6:0f:3e:9e:23:79:e6:42:ae:cd:55:1a:
76:44:2e:2f:c2:54:c8:93:1c:eb:f2:6b:97:e3:c5:f7:31:6c:
66:a7:61:8a:0f:94:07:f8:e8:f5:65:45:d3:11:d9:13:11:78:
17:1a:7e:db:a7:9c:83:1f:9a:3b:76:6b:a5:62:da:19:2e:c7:
36:5a:93:10:9d:f7:cb:89:ef:75:73:30:7c:a6:0c:68:bd:6b:
a3:78:c6:69:7f:c1:5e:12:ce:1b:6c:55:67:65:4c:af:b8:7b:
96:85:9d:61:1e:4f:3a:e7:f4:90:81:d9:87:7f:aa:c5:1a:52:
04:de:2b:6e:a1:c1:2a:40:c8:54:44:9b:ac:b1:2e:ed:60:a8:
21:2e:45:8f:43:e3:2a:8e:0f:61:f9:64:1f:11:7c:7e:cc:3f:
0a:d8:52:04:2b:cf:a2:66:56:e3:3b:12:98:75:5c:dd:41:76:
da:09:15:10:ca:4b:f6:0b:e4:47:79:07:1f:95:d6:ed:f3:f5:
2e:be:6f:d2:17:a9:a5:8f:f9:27:59:5b:56:29:24:ad:c1:e1:
7b:44:5f:59:47:8f:5a:8b:46:c4:9c:b6:67:35:e6:4b:11:6f:
03:eb:c2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:17:41 2025 by rpki-client