Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
File: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft (raw, json)
Hash identifier: RpDCNY6ZJx5ellhUd6GwCwTfIdxt3eDpsixJ6wHSqck=
Subject key identifier: E3:E2:67:3E:CE:83:CA:F7:B1:40:73:1B:FF:44:F9:8E:56:BA:8D:4C
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 0196895CB44ECF34E38F91DF61762E7B7868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
Manifest number: 1518
Signing time: Thu 01 May 2025 01:01:16 +0000
Manifest this update: Thu 01 May 2025 01:01:16 +0000
Manifest next update: Fri 02 May 2025 01:01:16 +0000
Files and hashes: 1: 1-TOVnm2gd04tI-uLivEABR6Pazo.roa (hash: QVp2c0LkMSwloi3MOMCG1fyuxaPczwJ3tn0nHSxmhjE=)
2: HgA_tKLG5N3ASR5gcHl20EupVRE.roa (hash: DRYtmqvkH/s26hespCVF8HpGzgqR1cL88tvUFROmz9s=)
3: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl (hash: GAKD+sjk7qAy2IONQM28ywYBygeOagXagvERj40Gt1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:b4:4e:cf:34:e3:8f:91:df:61:76:2e:7b:78:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: May 1 01:01:16 2025 GMT
Not After : May 2 01:01:16 2025 GMT
Subject: CN=e3e2673ece83caf7b140731bff44f98e56ba8d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:21:9f:ce:cb:d4:89:c9:be:9d:c8:b3:17:55:
30:0b:41:05:af:82:e3:c5:e2:f3:be:17:91:73:3f:
9a:31:9a:ea:d6:2a:93:f7:59:f0:1c:0d:a0:51:75:
95:81:3b:8d:31:53:0a:c1:69:7e:db:9e:55:ef:1b:
e7:86:99:ac:92:65:c4:be:1c:6a:b4:73:23:02:31:
95:cf:28:4c:cf:f0:52:c1:0d:d4:78:c3:54:95:36:
76:cc:ee:1e:a5:3f:19:58:d5:b4:eb:e7:db:14:a5:
b3:c3:57:a3:04:99:a3:1d:de:b7:68:f8:c7:f9:55:
e7:e0:2c:d0:af:41:92:3e:eb:db:ed:45:79:ab:f3:
eb:17:ec:4d:55:ec:52:0b:42:d2:ab:c1:01:f5:9f:
9f:65:86:dd:07:52:b8:d0:bd:be:62:27:83:4b:56:
7d:32:12:ca:06:d4:6c:b7:cf:46:b3:2e:05:0c:c6:
22:d3:7f:71:d4:19:ae:df:6a:b9:5b:b2:19:41:98:
89:3c:58:ad:6e:ee:c7:ea:3a:28:50:83:e4:f7:18:
ab:7f:ba:d9:1c:42:d8:2d:31:d5:57:da:c9:fb:be:
f4:af:2c:78:a8:83:cc:36:2a:4a:12:9c:a4:cc:a7:
5a:44:c8:dd:10:4c:b0:08:07:7c:c5:83:c2:60:0c:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E2:67:3E:CE:83:CA:F7:B1:40:73:1B:FF:44:F9:8E:56:BA:8D:4C
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:74:f3:c3:92:ae:ed:0e:2a:e7:64:e3:98:0a:e2:4c:f5:42:
61:44:a0:ea:f4:fc:c2:3a:12:98:43:2b:13:09:a6:8f:8e:8c:
bc:16:81:d0:0e:e9:cc:48:19:1a:ae:dc:83:76:d2:96:86:93:
84:bc:6c:89:7e:3a:34:57:7b:ab:45:cf:2c:21:c3:30:52:70:
23:f0:06:9f:a5:a2:79:0e:bc:ca:69:23:8e:c9:21:f1:18:3f:
2a:5f:f0:d3:48:db:1c:bb:11:0f:1a:eb:a2:ff:92:3d:84:a6:
7a:0c:c7:ab:e6:9e:28:e2:8a:36:fa:4e:b4:fc:91:ac:e0:ec:
0c:3d:a8:12:8b:c9:f5:32:64:93:cf:59:da:80:7c:8e:d9:9e:
06:8e:06:50:b2:2e:f7:42:59:8d:93:a9:de:76:5e:e2:39:f1:
82:78:f2:c1:66:df:bf:6b:eb:1a:a4:fb:8d:f4:f5:74:a3:d5:
5d:83:c3:b1:ed:cd:e1:15:4f:c7:8f:29:36:92:78:7c:1a:9d:
f2:30:ef:56:b0:b6:06:18:f4:1a:f6:b6:3c:e5:c3:04:7d:68:
7f:44:57:b4:b6:ad:1c:1c:2d:37:2b:5d:9e:f2:a4:46:dd:e3:
be:c5:cf:62:89:8f:07:f8:d5:47:20:1b:14:54:45:2d:c6:12:
5c:8a:65:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:46:50 2025 by rpki-client