
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File: du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier: zHHUhLWiFDh3EqJ1InVSfPp8W3aQ/Uj+Lmrugkdb2/U=
Subject key identifier: 17:7C:6F:C8:B3:11:15:88:56:94:5A:73:73:61:D6:BC:C1:B5:C0:59
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 01967FB3EBBA0BDCB6BD9C275BD091DE16CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number: 0487
Signing time: Tue 29 Apr 2025 04:00:19 +0000
Manifest this update: Tue 29 Apr 2025 04:00:19 +0000
Manifest next update: Wed 30 Apr 2025 04:00:19 +0000
Files and hashes: 1: Duy0w8egSd6_tWOhbaPt5UeYgF0.roa (hash: 85ocILxngCmwXS32iOfp1qK7+ygQ+Dz/qqJJB6oRnIE=)
2: J4VjN9NGRUAj6-HvTcD4a4pRvuI.roa (hash: BPJJa1BdBThf5/6mJP59LpQAGjz4XfDNQ5fBL115gk0=)
3: _fP9Z6Qv2kJn-Wq44o76SeffPHk.roa (hash: 4imK77f8nPoaw3AiGFAa7c39oqo+0JEgUABlegcK0lE=)
4: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: qaPBxdaausQQPt8qWC1nWiDOArORFMBqfG0ZHYEe0W4=)
5: l65724QI29Rvj8Dehw-WDE4zXrs.roa (hash: GIynNXgCpE42jnQGxrKvLDY9GYzVvsdz2aApBnrj/3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b3:eb:ba:0b:dc:b6:bd:9c:27:5b:d0:91:de:16:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Apr 29 04:00:19 2025 GMT
Not After : Apr 30 04:00:19 2025 GMT
Subject: CN=177c6fc8b311158856945a737361d6bcc1b5c059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:ec:83:af:e4:c1:cd:77:6b:b6:15:61:4e:
f5:e2:a0:b4:d5:fb:b2:df:66:e1:b0:f6:7b:28:ea:
22:3b:80:5e:58:22:c4:5c:3c:4c:03:9b:d0:a0:a5:
67:76:d4:55:fe:0f:64:36:a4:79:cd:29:3c:14:e1:
16:ea:26:ea:e7:6c:c6:7b:7a:10:e1:4c:56:7f:8a:
35:65:9a:7c:dc:ab:72:19:92:71:9d:37:35:e6:0d:
62:c6:ae:57:09:c4:b9:89:f1:6a:c4:40:a4:42:6b:
84:7b:8a:76:2a:c3:49:10:40:ef:fb:b5:a7:8b:dc:
36:21:d5:4f:f2:9c:6e:5b:e2:c7:3c:65:8f:bc:a5:
d5:49:50:c4:2f:88:0e:00:36:b4:48:60:7b:14:49:
76:ff:f1:50:eb:5e:ba:25:e3:7c:27:d9:d4:da:0d:
6b:15:5b:24:b9:78:b1:74:ba:48:09:16:ca:fb:ef:
34:e7:a6:37:cd:fa:12:cf:dc:8d:3d:64:96:58:48:
93:b5:d2:dc:34:57:48:eb:dc:c9:52:dd:41:61:df:
b4:0f:30:9b:61:c2:a5:4f:4e:2b:0d:b8:9b:13:e7:
13:c2:9a:e9:eb:65:13:d2:bd:c8:87:e6:f3:a8:18:
6a:98:58:40:00:61:ff:90:f1:88:25:18:b2:4a:63:
3f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7C:6F:C8:B3:11:15:88:56:94:5A:73:73:61:D6:BC:C1:B5:C0:59
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5c:c1:cf:61:d7:54:92:72:3e:ce:54:9a:7e:3e:da:5d:02:
12:60:58:17:f0:ae:f1:76:fb:a1:d3:b6:d3:71:2a:8a:e8:18:
40:2d:bd:f3:93:9b:86:eb:3c:d2:1f:51:1c:09:1c:7c:ad:89:
28:2b:82:f5:f1:5a:32:80:45:90:77:d1:bb:9f:7b:7e:b1:da:
60:28:d5:fb:55:31:e5:8d:13:e4:9a:6d:8a:e0:70:52:6b:d0:
d9:f8:2f:07:9a:e5:95:e2:6b:5a:24:9c:c4:b1:f0:43:df:80:
53:62:bc:cd:d7:e8:a8:4a:67:f5:6e:34:3f:32:31:e9:d3:7f:
e9:d7:0e:f5:e0:f9:65:16:76:0c:8b:29:5e:3d:05:2c:21:cc:
1c:a7:19:b8:b3:83:01:94:03:6c:00:08:6d:dd:f5:86:3e:b3:
7f:64:47:e5:94:1d:13:8d:02:06:ee:99:c9:d7:22:35:91:4f:
a8:83:d0:d5:04:bc:ed:e9:75:83:fa:b4:08:90:b1:93:c9:78:
a3:23:cc:9c:fe:a0:7f:a6:14:58:43:78:4b:33:f0:b2:df:d7:
d9:56:32:1d:ee:f4:4f:f8:f0:18:5e:82:fd:c4:82:03:16:64:
3b:3c:99:6a:30:8e:c3:ed:c7:35:2e:ee:db:bc:67:f2:dc:b6:
cf:ce:fb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:32:07 2025 by rpki-client