Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
File: d53x3kOsymHuwDTOomi0ZUzBXKw.mft (raw, json)
Hash identifier: l3++Ox8XQZJ1UwJMPRwrgawQR9x8gOM3EPZC38qLl5U=
Subject key identifier: 6C:6B:F0:62:5B:AC:DE:8D:FF:67:7F:82:69:6B:00:DB:A9:EB:B8:CE
Authority key identifier: 77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
Certificate issuer: /CN=779df1de43acca61eec034cea268b4654cc15cac
Certificate serial: 019677557CCBC0E6CAED8AD4D348E15BA10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 13:00:13 +0000
Manifest this update: Sun 27 Apr 2025 13:00:13 +0000
Manifest next update: Mon 28 Apr 2025 13:00:13 +0000
Files and hashes: 1: 0vZUeITqxhjYTZ09-IZPJQyJrFs.roa (hash: XWy8JIsvHPb13TWVq0G62lkPYB9FumkdweR7BRskWwI=)
2: d53x3kOsymHuwDTOomi0ZUzBXKw.crl (hash: 097FxFDyMh/WolhzYoiP2AJyCD66DprfvvPcegUWfGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:7c:cb:c0:e6:ca:ed:8a:d4:d3:48:e1:5b:a1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779df1de43acca61eec034cea268b4654cc15cac
Validity
Not Before: Apr 27 13:00:13 2025 GMT
Not After : Apr 28 13:00:13 2025 GMT
Subject: CN=6c6bf0625bacde8dff677f82696b00dba9ebb8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f0:b7:b6:27:fa:af:37:57:93:6a:b6:97:1a:
6b:2f:9c:13:68:e0:6c:b5:f1:98:51:ab:e9:29:30:
5c:fb:07:7c:4a:e2:6d:20:85:0b:85:de:8f:e2:26:
df:ed:4f:f2:59:72:fb:2a:c4:70:4e:23:03:c6:78:
24:bc:70:24:35:48:f6:d9:40:71:ee:e1:9c:9b:87:
4d:98:1a:cd:4f:e5:52:f1:99:09:34:06:83:23:d2:
e7:2e:9a:80:bf:4d:da:fc:cb:ec:ff:6a:1b:e3:4a:
eb:25:39:3f:7d:95:ac:98:8d:0a:03:be:45:7b:f4:
a9:9f:05:8a:0f:8a:54:05:7b:09:1f:53:06:d3:f7:
43:f3:1c:05:99:8c:b8:af:69:b3:fe:0b:db:2a:6f:
6d:20:12:db:55:2e:d5:cf:01:a1:7a:6e:05:70:c6:
71:a8:bb:86:a0:fb:14:c7:c5:c6:07:ac:31:60:96:
e1:05:25:35:5f:bc:3b:66:5d:b0:d2:d8:82:76:48:
b3:f2:40:99:3e:b9:09:c6:da:8a:f6:63:49:17:8d:
ec:ae:d8:aa:45:90:3a:76:2b:7c:1c:ff:3c:1b:5e:
97:18:d5:4c:b3:56:d3:a7:f1:24:e6:82:14:eb:bf:
dd:15:59:7b:e5:67:cd:6e:e6:a4:91:cc:fd:f0:6e:
43:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6B:F0:62:5B:AC:DE:8D:FF:67:7F:82:69:6B:00:DB:A9:EB:B8:CE
X509v3 Authority Key Identifier:
keyid:77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b8:bc:fd:e0:37:54:ef:6b:5b:28:ed:c5:fc:c9:87:80:0d:
4c:0e:16:42:df:a5:1f:1e:3a:ea:cd:91:69:cd:15:85:13:89:
0b:fa:90:ee:dc:9a:15:61:5e:7b:a2:b3:12:03:7b:ed:03:8b:
85:21:01:f8:8f:08:e6:5c:76:5c:2f:81:16:f6:4c:82:6a:28:
8d:d9:31:ef:38:ec:25:d8:79:22:ba:62:fd:b3:76:97:82:15:
b7:87:96:a9:65:dd:80:24:97:a9:31:c7:c6:1f:c9:a6:5b:33:
52:72:15:f4:fb:f9:11:36:86:01:d0:81:99:71:19:90:ff:ce:
2a:d2:45:0c:32:c6:37:c1:e3:08:43:1b:db:95:02:8b:4b:39:
0e:5a:d7:95:2b:42:1f:28:f8:3a:ca:ee:8e:09:98:49:1d:88:
83:e4:70:63:fb:35:aa:16:d3:0f:60:12:5c:f7:3d:87:f8:b0:
1b:0d:81:70:7e:be:71:fc:84:09:57:db:4c:99:04:c2:7e:a6:
c0:b0:61:34:11:96:b6:38:0f:83:28:3d:73:a5:74:c4:35:6a:
12:92:9c:92:e4:8d:be:c8:7d:41:30:fb:26:55:d4:f1:e7:ea:
e7:b3:53:fe:62:03:fd:8d:da:a9:2e:3c:73:d9:28:8b:99:2d:
40:81:82:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:05:05 2025 by rpki-client