Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: eIH2Ttx66qya5TdPAtDW4ZXgtBzuK23MeLUB7M/pCeI=
Subject key identifier: 9B:F4:BE:5F:B2:63:B1:D8:96:C5:55:DD:BB:9B:3C:71:F9:D6:E9:5E
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 019685EDAAAC3220771540B12C27BAFFD7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 09:01:07 +0000
Manifest this update: Wed 30 Apr 2025 09:01:07 +0000
Manifest next update: Thu 01 May 2025 09:01:07 +0000
Files and hashes: 1: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: a6W8zR2ra/1UPBECf3cP4Jy7L1YVaDW5KJxRgAAkhTA=)
2: rMYX2ngJRfk9a7fGX1cc8xAfsos.roa (hash: zZBPIZevys4Y238DbVgB+9WvN4FdGE3xhipQLPtn3sg=)
3: z6ZVSnIWLOcBxsAI1RP3xusBmDI.roa (hash: 0P2kU02ZAocYSBgE7zWtiaNGeOEg/Gg5PfdYqLhXNf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:aa:ac:32:20:77:15:40:b1:2c:27:ba:ff:d7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Apr 30 09:01:07 2025 GMT
Not After : May 1 09:01:07 2025 GMT
Subject: CN=9bf4be5fb263b1d896c555ddbb9b3c71f9d6e95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:29:d2:d8:15:20:6c:d7:20:eb:44:9a:52:
f6:f9:eb:da:48:b0:77:08:3e:bf:a8:38:0f:9d:d0:
c3:8d:e1:d9:b1:14:44:e8:ed:cf:5f:36:06:0c:c8:
8d:b6:8e:17:d2:96:5f:1f:20:9d:bb:8c:e0:ac:5b:
62:a1:cf:16:8c:77:36:5a:8e:af:b5:e6:6a:d4:72:
25:43:0e:18:30:41:5a:85:80:00:14:27:1b:c7:0b:
50:84:f1:50:73:87:af:55:53:ee:22:e4:78:6d:52:
dd:1d:d4:e8:11:d9:63:20:2e:74:4b:63:a0:fc:9e:
b0:69:4e:6d:0e:97:03:41:db:6e:ff:e0:4a:ab:8e:
fe:38:3c:3e:98:66:b5:eb:29:59:a1:7b:70:2e:92:
2f:6e:46:e0:fd:ea:91:ac:11:0e:14:c8:e2:13:15:
45:28:00:a5:97:10:7f:f8:bf:ac:d4:3e:db:d4:97:
17:0b:d5:e1:15:3c:02:60:f4:9a:10:0d:f3:7e:71:
19:61:cd:d6:71:2d:00:61:1b:95:5d:14:a8:2b:dc:
e8:c6:f1:53:e5:62:fd:42:88:f4:ee:d2:9d:16:30:
11:56:c2:d1:58:59:b0:0f:95:3a:5e:37:0a:c2:56:
e5:0d:35:7a:61:77:13:81:62:02:4c:6b:b5:3d:26:
43:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F4:BE:5F:B2:63:B1:D8:96:C5:55:DD:BB:9B:3C:71:F9:D6:E9:5E
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e6:23:ea:92:d2:6d:e0:c9:df:2a:c0:12:fc:a0:37:ad:05:
f4:19:e4:23:f6:72:39:40:28:b3:6d:dd:ff:fb:b4:a8:e4:f7:
bf:25:0d:24:b1:6b:1a:8f:2c:df:c8:d8:a4:6e:f9:c5:ba:ee:
65:87:5d:69:3f:84:ad:2e:be:8b:57:f2:f1:69:3b:c0:07:5d:
ac:fe:5a:28:4d:7c:11:b5:cd:2b:93:31:1c:ae:23:e2:c3:20:
aa:df:a8:ff:3d:f0:a5:06:d0:ef:88:0f:23:fd:2c:3c:a1:58:
75:28:dd:19:7f:81:a1:85:28:54:5d:1f:c5:5d:4c:a9:90:70:
2a:6b:c7:6e:c9:65:35:bc:9f:c8:6f:8e:06:83:ec:af:ff:6e:
f0:d9:b2:f4:10:9d:49:fc:d2:3f:c7:1a:77:f9:a1:29:b8:24:
ed:70:89:80:19:16:4f:ee:e9:e0:b5:b6:f8:06:f6:89:e3:dd:
d8:79:2b:7c:c6:0d:71:5a:5a:15:d0:4b:74:4c:0c:fa:45:37:
5b:87:b9:de:70:1b:ee:63:88:e4:56:fe:f5:74:2e:a6:4a:83:
a8:c9:72:c5:79:86:28:c3:01:d5:b0:9f:6c:e2:21:6b:c5:73:
05:a0:db:06:de:80:16:f2:45:d1:24:02:eb:f1:fb:d8:10:4c:
03:70:7c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:45:57 2025 by rpki-client