Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: pFJnqvo/Ru3lhM4PUReNQ03bGAPnVbjnU8ucvdDsGfA=
Subject key identifier: E2:32:B0:53:FE:3A:27:DC:B1:04:EE:86:70:53:9C:75:C0:41:C5:57
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 019682479C08936E8F72C8B9DDAF67582B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 151D
Signing time: Tue 29 Apr 2025 16:00:53 +0000
Manifest this update: Tue 29 Apr 2025 16:00:53 +0000
Manifest next update: Wed 30 Apr 2025 16:00:53 +0000
Files and hashes: 1: 2ruUNINuI6uV8MYI78EZQWS_RIg.roa (hash: VHS2lsqC+IJ5oxkyfws5q9amIcBNw+9L6nwp+Qj/0vY=)
2: 8i1g8XKNJedNWFOzfSsVo0JxCqM.roa (hash: qcd7n9F8BEzZZvgBgE1cIJu2JRF1Xvz0rV08SZQkPQw=)
3: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: Cs0Z3bOiubZrPqatUTmyiNQBnzochGedbJvCLdwt9S4=)
4: lXftion8-6bSPXb1hByWoZWZToE.roa (hash: SvWuwU45VoYUssTvSq8q7tUVCqlmbl2PlDyAIGIPVcs=)
5: m8rrUo6uiDcirMi6Sl7eYgFmoKs.roa (hash: ooZ40cwVnj6zMgLWzk/b928qzd5lbFKtSTI7ArxTES8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:9c:08:93:6e:8f:72:c8:b9:dd:af:67:58:2b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Apr 29 16:00:53 2025 GMT
Not After : Apr 30 16:00:53 2025 GMT
Subject: CN=e232b053fe3a27dcb104ee8670539c75c041c557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:1d:b0:73:f3:50:c7:92:d1:9a:a7:b9:5f:
18:b9:2c:ca:5b:e8:08:38:ae:a1:ef:cc:ec:35:13:
88:a7:0d:b4:c7:02:77:59:61:70:ce:9f:1d:47:9a:
cc:bf:ec:a3:05:42:03:fc:b7:21:0b:ff:44:34:00:
ea:35:27:9f:96:54:e0:78:3e:c9:eb:b9:d1:d7:05:
3f:1c:19:41:a7:71:9e:03:ed:2b:44:f6:a6:2a:2f:
d2:25:3f:6e:97:3b:7a:7a:7f:bf:04:7f:22:d6:77:
d3:c4:d6:17:26:4e:ba:f1:91:c9:61:73:95:d7:96:
5b:d2:5d:11:71:d7:7e:f5:8f:d7:67:38:0e:70:ce:
92:4a:c0:86:50:04:fe:8f:f4:09:e7:f2:b7:71:50:
4a:7b:61:fb:3d:d6:98:75:75:b0:b5:a8:53:4d:72:
63:42:9a:92:40:3d:98:05:22:21:6c:a6:8a:bc:96:
ca:37:08:1c:9e:3d:bf:d4:e4:05:c0:a0:b3:2e:c0:
c1:97:09:8f:bf:1a:01:87:0d:d5:1b:c9:77:27:09:
87:7b:39:f8:0c:a1:30:a5:57:df:76:35:83:47:c6:
42:2d:f0:39:4a:da:60:ed:b8:d0:3f:a9:06:87:33:
f1:bc:32:f3:67:48:29:76:32:45:94:85:40:38:5f:
a3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:32:B0:53:FE:3A:27:DC:B1:04:EE:86:70:53:9C:75:C0:41:C5:57
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6f:56:4c:62:45:29:c2:69:76:42:6a:2c:ba:00:5e:c6:f3:
ec:f4:a8:46:dc:82:75:36:16:5a:dc:6e:a1:1f:eb:2f:91:93:
be:c9:f6:f9:e1:d6:e8:67:54:c8:a4:43:d3:7c:b2:99:15:6e:
04:61:98:7b:0c:1e:05:ec:ea:5a:28:2f:04:bb:a4:48:bf:67:
9c:d6:db:8c:a2:d5:b3:64:59:6f:de:ec:f3:14:38:4d:6c:c2:
fa:51:28:b1:c1:e1:a8:86:73:69:ea:d6:20:06:4e:23:b0:fa:
cb:62:4c:1f:45:29:0d:d3:da:f9:b3:6c:00:0e:3a:76:e4:15:
c2:49:72:37:b8:dd:db:22:98:d5:e6:98:f1:74:ed:cd:fa:94:
c7:cc:c2:09:15:5b:59:36:5a:df:33:83:76:18:1f:4c:41:66:
67:03:d8:b7:f5:50:3f:61:b0:5f:3b:f1:d1:09:83:ce:cb:80:
ca:eb:f4:fc:da:ad:aa:6c:11:c7:a7:32:2b:d4:a4:6c:6f:89:
f7:22:6c:9d:02:bf:1e:79:8c:32:cc:c9:f6:99:61:96:04:fe:
10:09:c2:66:80:88:7e:e3:f6:f7:50:fd:fc:de:cc:41:0e:88:
ed:1f:a6:a8:7c:b1:36:b3:b5:df:d6:08:da:d8:46:5e:d0:57:
13:08:bf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:20:52 2025 by rpki-client