Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
File: Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json)
Hash identifier: n6Pm6Qa/TIQpnPbVB3+LN5zHTjAcB1aRhVmC2M2UfV4=
Subject key identifier: 4B:BC:B9:B5:26:68:EA:23:8F:8A:21:C4:33:55:2D:9D:D0:FE:AD:28
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 019684DA99227C11A348F967B5E0E24D9496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
Manifest number: 1513
Signing time: Wed 30 Apr 2025 04:00:40 +0000
Manifest this update: Wed 30 Apr 2025 04:00:40 +0000
Manifest next update: Thu 01 May 2025 04:00:40 +0000
Files and hashes: 1: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: Rc7rGsVPPhlVo3C6DnisidJUtg8Ytekj1F2uh222I1U=)
2: v4JI5sgw_p3rivCunMet_POOF2w.roa (hash: HrxRsSTft3bYHQ8KkRnRYehAe6cSQ1K0zkkE09H7dNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:99:22:7c:11:a3:48:f9:67:b5:e0:e2:4d:94:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Apr 30 04:00:40 2025 GMT
Not After : May 1 04:00:40 2025 GMT
Subject: CN=4bbcb9b52668ea238f8a21c433552d9dd0fead28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:54:48:26:06:e7:30:b0:9e:92:c2:48:84:1d:
a0:7f:ca:fb:99:63:9c:4d:6f:89:c4:42:30:9e:4e:
aa:d7:0d:db:73:fb:a7:bf:c4:58:61:d1:eb:4e:ce:
03:7f:0a:42:0b:e8:23:b2:9a:6f:a2:b2:07:e1:45:
51:38:ae:c5:6d:30:4d:7c:fb:2f:a9:0b:d0:42:e1:
ad:f4:93:2c:1f:cc:be:93:0d:90:b3:64:ea:87:b7:
5b:73:9a:cc:90:09:46:ba:25:46:df:08:1b:d1:33:
76:3e:69:7a:6a:b5:5a:14:ba:0a:18:9c:22:8a:94:
36:1c:55:82:1d:64:69:a6:4f:32:26:06:9c:b4:46:
ef:07:40:de:1a:d6:b7:b7:83:de:72:3b:9b:48:5d:
7e:8b:84:70:ad:9d:dd:8f:d4:32:2f:c4:f9:2f:a5:
32:17:33:f8:f4:ef:7d:c0:07:41:c0:5d:45:04:4f:
93:f4:c1:6e:97:bf:57:26:c5:92:98:7d:60:3a:4b:
11:bc:f9:e2:a9:04:31:f4:0f:89:3b:c0:46:05:8c:
b1:2d:8d:de:e0:f5:bf:b8:1d:3d:ba:5e:12:f4:0e:
0a:85:f0:7f:f5:99:0c:c6:2c:5f:f4:39:30:48:1c:
1d:d1:3a:c5:04:8a:67:d3:98:d9:80:b1:b1:63:f0:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BC:B9:B5:26:68:EA:23:8F:8A:21:C4:33:55:2D:9D:D0:FE:AD:28
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7d:78:72:3f:55:d6:0a:d7:9f:a7:77:a9:5b:63:dc:66:c1:
76:b9:db:34:97:ce:f8:96:db:8c:72:9e:00:93:ea:4d:d2:84:
d1:a6:bb:e6:a0:3c:ab:bf:2d:80:1a:fd:d8:a2:6f:f9:68:ed:
de:0a:ac:71:2c:9c:ee:71:99:b1:2d:21:0c:af:da:1f:8b:9f:
b2:02:73:d2:e9:04:5f:de:5e:f6:43:2a:03:9d:58:2c:86:89:
e5:9a:ab:19:2e:d9:1d:87:31:5c:78:a2:52:a7:46:32:bd:e0:
7a:7b:8e:ce:49:30:e4:76:97:61:01:12:77:81:7c:59:56:cd:
fe:f6:7b:f8:c9:24:69:36:f9:32:bd:a9:9d:da:ce:70:49:72:
32:d0:b3:2d:a4:6f:62:23:a8:7c:4c:7b:e1:23:08:33:d8:30:
dd:2a:ff:d2:ba:68:c2:9a:b5:ad:75:d3:f7:1b:00:53:3e:40:
1d:9a:4b:b6:c1:9d:4f:0f:63:92:1c:ce:ce:44:a0:d7:45:38:
16:c4:29:8d:0e:e1:12:ac:9f:9b:77:d8:b4:91:83:6b:2a:73:
f6:3a:9f:aa:c6:83:1d:53:d7:b0:b1:34:5c:17:46:00:a0:6c:
f8:eb:93:98:d8:36:c4:0c:99:01:2d:41:bc:fe:74:b6:c5:47:
f7:bf:0f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:45:35 2025 by rpki-client