Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: QqKQc8Sdj4FBvu773EPkVQvHf4Li6cSDa6KafU1p+S8=
Subject key identifier: 06:21:06:D4:73:B8:2E:BC:9D:68:EC:6C:4A:B7:51:69:DC:18:CA:2D
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 0196789FB00C3AF3FB3555619EFB475C989F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 0BDF
Signing time: Sun 27 Apr 2025 19:00:53 +0000
Manifest this update: Sun 27 Apr 2025 19:00:53 +0000
Manifest next update: Mon 28 Apr 2025 19:00:53 +0000
Files and hashes: 1: 4V_ibiqr3ToA5yeO7eCC_kmdHfY.roa (hash: iaaPPpRPgVRp2VBYf0amI7H0JrYQ2W8NdUPmUpkX7Ug=)
2: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: p0Ts/ZFj6S6oZIRtrmhp+Q7eQvjeHAKoKmSLwMxIr3k=)
3: jcgG2k-DMvgq0AsuFmjBxm0-O-Q.roa (hash: SEfA+iWkgEeN5RJiBiU8Z6qVRU+/NBl881HzOl2we+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:b0:0c:3a:f3:fb:35:55:61:9e:fb:47:5c:98:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Apr 27 19:00:53 2025 GMT
Not After : Apr 28 19:00:53 2025 GMT
Subject: CN=062106d473b82ebc9d68ec6c4ab75169dc18ca2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ec:de:5b:dd:a9:9b:5d:48:3b:3f:bd:80:fd:
ab:66:0f:2d:53:9b:8e:00:b5:43:c2:c5:06:ad:2a:
4b:df:23:b0:00:c5:bf:51:75:05:13:17:ab:80:99:
e6:ac:39:26:c2:ea:7e:10:ca:ac:9d:1e:e2:2a:26:
a6:3b:16:45:6b:51:96:72:67:6f:a3:e7:93:74:79:
be:7a:6c:33:35:d9:d1:99:05:4b:10:8e:75:d3:a5:
12:37:31:33:da:74:0e:91:b0:84:87:c5:e2:af:9b:
2e:35:22:88:e8:44:d3:c6:65:1d:89:fd:15:23:3c:
61:8e:9b:30:a6:4d:91:89:b7:88:e8:51:b2:f3:17:
ef:98:0b:be:ac:d8:92:48:20:fd:fc:fa:69:64:ff:
f4:c0:3f:34:ba:62:c2:18:3d:b5:70:c2:b4:79:30:
c0:04:93:3f:1d:b6:f0:b8:7e:32:ec:a0:ec:96:63:
34:b4:b0:b7:e3:33:01:ff:93:81:c9:b4:98:68:18:
e1:cf:aa:48:4d:fc:f6:36:fc:7b:0f:d7:c2:9b:4c:
4c:2b:05:00:fa:96:4a:d9:0a:34:8e:d3:0b:05:da:
9a:90:ef:8a:a2:6f:96:80:fb:09:07:68:6f:54:ee:
82:5f:74:0f:f7:38:fd:6d:db:34:d2:03:f7:10:9d:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:21:06:D4:73:B8:2E:BC:9D:68:EC:6C:4A:B7:51:69:DC:18:CA:2D
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1e:36:93:ca:74:71:15:34:fb:76:9d:a3:03:bd:6a:ef:2d:
b0:98:f7:d8:3e:d9:1c:87:61:9c:52:43:bd:54:4f:c2:f3:bb:
81:c4:14:11:f6:8a:0a:89:e3:e6:eb:59:b8:f9:0b:df:20:84:
ec:4b:6e:75:e3:4f:0e:80:0c:aa:ba:b3:78:ad:ca:15:c6:b8:
0f:d6:d5:fc:5f:91:11:12:bf:ef:8d:b1:28:c4:26:70:88:45:
3c:f7:1e:56:7d:32:38:ac:cb:77:e1:65:33:d7:f2:9b:7c:3b:
95:97:1a:74:77:de:45:23:20:03:a4:46:6a:25:b3:77:e6:7b:
37:48:1f:43:ae:21:49:65:e4:83:d5:a0:49:1a:50:88:79:82:
1b:20:8f:d0:3f:04:42:5b:28:81:ae:31:2c:0a:38:7f:89:a6:
df:d8:ac:66:4c:1c:36:c3:2a:86:c2:1e:45:8f:1c:61:48:6b:
18:39:68:a4:7a:92:8b:85:72:41:b3:94:46:d1:e7:bc:32:21:
17:b8:d6:2d:8d:02:b2:e4:03:84:bd:3a:65:9b:35:53:d0:b0:
a2:b7:cd:4b:bb:74:2e:74:42:e2:82:a2:e3:b0:f5:a7:7f:e1:
13:0a:43:22:cb:31:e5:72:61:f2:68:a4:2d:52:15:34:8f:a1:
df:60:a3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:44:56 2025 by rpki-client