Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File: d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier: tBRlF1oel9QO8y3uA7mtv+ixtcVbuC2Kn1nrcuwuMFA=
Subject key identifier: E8:AB:57:A3:F1:77:B4:E6:56:7C:FE:F5:47:0B:42:66:50:62:B6:F6
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer: /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial: 019675D56EAAD72A23DA345D3856105B4B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number: 0BF8
Signing time: Sun 27 Apr 2025 06:00:43 +0000
Manifest this update: Sun 27 Apr 2025 06:00:43 +0000
Manifest next update: Mon 28 Apr 2025 06:00:43 +0000
Files and hashes: 1: JS20272zzOd7lsvAhAy2fEVjeyI.roa (hash: cOcrvgmIxE66W+f+FGaVHK7zq1S4gdeOGb2xk9gX0lg=)
2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: Wp/Wst2r3paBhusvdxZprSgPzQ+/Es7eIaZS79Sp4ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:6e:aa:d7:2a:23:da:34:5d:38:56:10:5b:4b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
Validity
Not Before: Apr 27 06:00:43 2025 GMT
Not After : Apr 28 06:00:43 2025 GMT
Subject: CN=e8ab57a3f177b4e6567cfef5470b42665062b6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:5f:7b:c8:ff:9a:ff:cc:9c:87:e0:bc:42:
e6:bb:b8:8e:4f:a7:ed:03:44:75:e8:cd:50:24:bc:
93:c4:17:67:6f:49:fb:37:7a:89:06:7c:8d:a5:24:
3b:46:1b:80:46:f9:b7:d7:c9:2c:c5:7c:97:e6:43:
a0:f5:38:46:3d:d2:98:9a:a7:35:30:fe:dd:9e:ab:
94:84:42:03:63:53:42:fa:35:99:a7:06:7b:b8:ac:
7a:08:08:2d:ce:b4:ed:2d:48:8d:fb:00:9b:95:b4:
7c:02:62:c9:7d:e4:f0:0b:43:cb:ce:5c:2f:95:55:
6b:29:b9:9b:9f:3a:05:d6:20:e3:75:8d:7d:8e:3b:
24:f1:b5:84:e1:22:52:94:62:da:d7:5d:04:1e:58:
2e:82:c3:e6:0c:da:cd:a4:57:e6:8a:d8:ce:ac:65:
4e:80:60:d2:68:9a:85:0f:76:7e:8b:2f:ab:17:39:
21:07:c1:39:b3:4c:12:01:59:91:8c:3d:41:98:0d:
b5:6a:28:60:df:78:52:51:cc:7f:5c:62:bf:0d:a6:
77:b5:52:e8:7d:18:4a:94:e1:bb:0f:21:43:af:50:
66:57:ca:bd:e1:53:9b:73:08:70:f4:e0:7b:2b:c6:
49:bc:8f:e2:b0:1b:db:77:19:36:ec:a6:4f:b0:17:
e0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AB:57:A3:F1:77:B4:E6:56:7C:FE:F5:47:0B:42:66:50:62:B6:F6
X509v3 Authority Key Identifier:
keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f8:09:52:d2:f3:1b:a2:76:4b:c3:e9:09:85:b0:b4:4e:fc:
ac:2b:34:5a:82:7d:69:e2:ca:e4:57:e7:6c:ae:39:93:67:c1:
b5:6c:28:3b:bc:e9:53:df:90:5a:25:a4:9d:63:1b:f8:2c:43:
f4:52:bd:6b:94:98:98:cc:27:be:88:c7:47:f3:48:f8:41:51:
ce:38:5e:4e:4a:b3:c5:9f:ef:af:a9:26:0e:59:64:62:0c:a1:
2f:cf:58:92:30:7c:c5:69:8f:58:5a:2b:93:3e:31:f1:8b:3e:
1c:fc:af:b4:10:30:6e:73:7e:4d:3e:1f:7a:52:05:0d:df:a7:
90:19:66:ba:9a:51:9a:fe:94:6f:44:13:2b:2e:9d:99:a8:f1:
d1:25:aa:e7:b2:98:23:73:7f:08:7b:0e:d5:a1:9c:bf:5b:48:
f9:91:e1:7b:ee:2c:d1:db:86:17:cd:ec:6c:86:9f:1a:64:af:
f7:fa:b5:ad:60:d2:d9:37:8f:44:ad:44:e5:46:9a:3d:91:c2:
69:b8:7f:4e:1b:54:e4:ad:c8:f9:ea:56:06:aa:4f:49:2c:f7:
01:46:78:82:a1:2e:ba:82:2f:3d:50:dc:4e:68:cc:73:e5:cb:
87:c9:b3:97:4d:e2:ff:2a:c3:53:a5:2c:0b:6b:21:8f:a1:5d:
ca:d7:c4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:06:59 2025 by rpki-client