Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: +ZuQzGu/BOkBFvtquidx0ZIE5dF4N0TjOAcRaT1hnCk=
Subject key identifier: F2:9A:84:A8:D9:A6:E6:A7:F4:B1:ED:13:3E:17:DC:C9:AA:56:FE:94
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 01967A571D186F97F49F9F365A4CC1585C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 037D
Signing time: Mon 28 Apr 2025 03:00:51 +0000
Manifest this update: Mon 28 Apr 2025 03:00:51 +0000
Manifest next update: Tue 29 Apr 2025 03:00:51 +0000
Files and hashes: 1: 59Mn6Fq_ztW3ZpObO3_epXiDhpk.roa (hash: cp+rR6j5Vo4FlHwAzBmhQ3KTx+zcyZnQHkQLzqefDBI=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: mQc3W0oIVWeC3smODocwYZUrFyblzMxg/EsyPPzwL24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:1d:18:6f:97:f4:9f:9f:36:5a:4c:c1:58:5c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Apr 28 03:00:51 2025 GMT
Not After : Apr 29 03:00:51 2025 GMT
Subject: CN=f29a84a8d9a6e6a7f4b1ed133e17dcc9aa56fe94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:aa:1d:84:f8:c9:85:f2:63:42:4a:6f:e8:
46:0b:af:06:21:04:5e:64:94:86:da:45:bc:c5:58:
25:89:39:35:2c:dd:4b:f8:a3:bc:de:6c:1a:2c:22:
51:c8:d6:bb:97:2d:0a:b9:f5:d6:55:be:8e:5f:0f:
c1:f5:4e:2e:5a:d3:b3:f2:7f:cc:e9:b1:eb:d3:22:
53:89:85:da:68:56:cc:17:d8:c7:a3:59:87:10:72:
47:89:49:2b:b8:e2:95:41:be:76:65:76:72:df:9e:
2d:c3:b3:3b:e1:58:37:d0:54:7b:74:69:8d:2a:9d:
2d:ff:c0:aa:e3:81:4c:e7:51:cd:78:1b:93:ee:a3:
81:64:c2:1d:c3:3d:22:bd:0b:3e:f9:d8:17:15:3d:
c4:6c:3c:cb:cf:05:0e:7c:24:11:d7:27:4c:77:8b:
81:74:bb:e4:9d:2a:23:af:12:4c:dc:59:ef:07:15:
0a:e7:6f:6c:2c:82:7e:a6:fa:4c:26:bc:88:d2:11:
ef:8a:2d:a2:cd:6f:4e:ea:81:4a:a6:d8:35:ad:1e:
12:8e:b7:d3:f8:0f:1d:cc:e6:b8:71:45:ed:f3:99:
84:d8:c2:2e:1f:db:a6:a5:5e:94:31:5e:48:21:59:
63:3a:df:d2:c0:a7:cb:54:89:af:6e:6e:88:e8:80:
b5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9A:84:A8:D9:A6:E6:A7:F4:B1:ED:13:3E:17:DC:C9:AA:56:FE:94
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c3:0e:fa:15:5a:9f:dc:36:d9:93:3e:53:eb:ac:f2:b5:ee:
e4:77:17:c2:c7:bb:f7:9f:d5:f9:b0:78:d6:8b:93:b5:0d:76:
63:27:5e:a7:89:52:e7:49:7f:28:66:0b:a8:f8:69:fc:08:d5:
4c:b4:fe:64:74:ba:97:74:c0:a6:b7:7e:f9:68:72:95:2f:9f:
98:d7:dd:02:be:b6:9f:d5:ec:5b:03:8e:b5:09:94:22:fe:da:
c8:f4:bc:8d:f3:ee:00:25:10:9c:56:2f:a8:70:2c:ad:30:8b:
57:8d:d3:46:d4:6d:b4:73:5f:89:e9:29:0d:25:f1:2c:96:2f:
11:dc:07:e6:3d:3f:1d:9f:1a:92:85:32:14:5a:c3:19:a9:c7:
74:6c:60:aa:ea:0b:e7:34:c7:1f:06:62:d7:0b:6f:9c:ae:97:
27:7b:3f:2d:77:13:a6:5c:18:59:0f:f7:dd:d1:a0:62:ab:f2:
d5:19:42:6a:d3:d1:42:cc:2e:c7:63:41:20:b0:ed:32:ae:5e:
fe:17:f0:16:b3:d3:95:4a:96:36:2e:36:00:79:ef:c5:0a:48:
01:84:11:0e:a4:f7:44:98:b4:0b:e4:06:22:79:14:62:1b:03:
47:9d:49:52:6e:85:e1:38:bc:20:bf:74:02:48:27:bf:2c:d5:
e6:41:bf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:51:18 2025 by rpki-client