Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
File: druWg5UW9vs1BsYgZNY9YoeaUnc.mft (raw, json)
Hash identifier: if3ae4QybMKDjGm4ee5JF2h7EZ9/9+1J4Gn2e+vKBNA=
Subject key identifier: 86:FF:C5:B8:AA:18:52:8D:AD:68:65:82:9D:E8:2C:8F:F7:3E:E2:35
Authority key identifier: 76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
Certificate issuer: /CN=76bb96839516f6fb3506c62064d63d62879a5277
Certificate serial: 0196764309ED9ECD335E96835EBC5729D4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
Manifest number: 0F1E
Signing time: Sun 27 Apr 2025 08:00:26 +0000
Manifest this update: Sun 27 Apr 2025 08:00:26 +0000
Manifest next update: Mon 28 Apr 2025 08:00:26 +0000
Files and hashes: 1: A0Dli097tMkIVnJa3m1bqPYzScQ.roa (hash: xNtn+JNQ7hliFuQK823llLTpPPrEWU/YIk1KW2YsDWg=)
2: druWg5UW9vs1BsYgZNY9YoeaUnc.crl (hash: 9QsuDY1yeCzU2BVZpSB9adspY1suIeDM8KUsI++tTWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:09:ed:9e:cd:33:5e:96:83:5e:bc:57:29:d4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bb96839516f6fb3506c62064d63d62879a5277
Validity
Not Before: Apr 27 08:00:26 2025 GMT
Not After : Apr 28 08:00:26 2025 GMT
Subject: CN=86ffc5b8aa18528dad6865829de82c8ff73ee235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:11:a0:0f:43:f8:1a:00:87:a4:17:25:21:
8c:c3:61:c7:d9:1f:d0:d2:4d:e3:6e:53:6e:08:2a:
58:58:ab:b3:6c:2d:a1:f3:c3:77:38:fe:98:e1:9b:
10:ee:b6:e5:37:15:c1:19:fd:3b:96:a1:60:43:c5:
53:0b:38:03:db:93:33:a3:1a:f7:e1:71:f5:c6:4c:
cb:4f:a5:bb:1d:07:dc:80:1e:6d:09:ae:09:04:6c:
a1:59:45:7a:d6:e7:37:33:d2:63:cb:92:98:4d:02:
8e:97:b6:22:60:d5:e0:49:4b:7b:a2:6f:2b:88:d4:
5f:28:23:83:8f:8b:45:b3:72:fa:a8:9a:c9:40:93:
76:4f:78:1b:e7:8d:d1:fb:c5:36:ee:70:15:6f:be:
af:a6:28:44:61:23:ed:d6:8d:a6:7f:c4:09:b2:a5:
6b:d7:37:df:37:df:5d:3c:6a:dd:95:79:8d:56:97:
a7:3d:de:de:51:90:bf:f5:0d:c7:ed:31:8e:eb:70:
f8:fb:95:df:60:22:76:cb:b3:45:4a:e2:bc:e9:e3:
d1:72:51:92:17:fc:d4:e3:fb:01:31:a7:e3:3f:9e:
2c:28:69:64:6d:95:ae:7e:dc:73:5a:f2:5d:1f:90:
4b:1c:4f:ac:4e:e8:2d:11:4a:e7:11:02:08:3d:e4:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FF:C5:B8:AA:18:52:8D:AD:68:65:82:9D:E8:2C:8F:F7:3E:E2:35
X509v3 Authority Key Identifier:
keyid:76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:82:d5:a0:91:47:1a:37:93:86:b5:7b:17:71:b9:6b:43:10:
44:2c:f0:13:5f:02:11:18:0e:29:b6:4b:5a:65:f1:1e:26:a5:
c4:06:47:ef:42:1d:e9:b9:fe:64:30:d0:ec:31:62:fd:86:c5:
6b:78:7a:bf:d4:12:4e:1b:49:87:87:cd:8b:7c:0e:26:c0:c7:
ec:ef:34:fb:49:3c:77:99:35:78:0a:0a:29:16:ee:36:05:b6:
be:bc:51:06:0c:f8:d4:6c:36:73:27:87:62:b8:d7:7f:02:84:
f1:c0:e0:e2:bb:11:4c:af:5b:ea:65:52:98:9f:e7:fd:70:e1:
56:f7:3d:55:57:38:f2:da:e7:b3:a8:61:da:6a:27:f0:be:6a:
cc:b7:f2:6a:91:90:a7:c5:8f:58:ea:9b:0f:2c:b2:c8:8b:75:
27:4f:92:bb:84:d6:41:2e:f7:db:0a:1a:b8:f5:58:6b:2e:4c:
59:6f:01:11:e0:0f:d2:3a:cd:9f:2c:47:9d:a6:43:53:e3:fd:
93:b6:b6:ee:a5:64:02:27:02:12:50:26:2b:ed:70:4c:2e:8f:
ac:7e:3d:22:f8:57:c9:3d:c3:fa:73:0f:cd:79:37:38:9d:cb:
26:7a:36:64:57:5b:87:54:73:de:e9:08:4a:75:76:90:34:93:
75:0a:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:22:52 2025 by rpki-client