Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
File: ddl3qipMEMe0evKt2WgESH4idKk.mft (raw, json)
Hash identifier: eXcq8zEwiyS2As2iXRVyB8PEPa/0P8tcNeHxKE2rBG0=
Subject key identifier: 27:E4:A9:78:C3:D3:62:9F:F0:41:61:25:23:0C:D9:46:AF:59:B7:0E
Authority key identifier: 75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
Certificate issuer: /CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Certificate serial: 0196802231F58673EFA235F7D76F8C143E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 06:00:46 +0000
Manifest this update: Tue 29 Apr 2025 06:00:46 +0000
Manifest next update: Wed 30 Apr 2025 06:00:46 +0000
Files and hashes: 1: d1djO8IkOk-DAQF-B5CVMX1fEOA.roa (hash: ObQ/agHgncZ7LWNprlr11FO8JEBhRFid61XXKnLc8Hc=)
2: ddl3qipMEMe0evKt2WgESH4idKk.crl (hash: Z2Izip/mk3g6ADdy416JteIz/mm6AceFkOAQdU/RqAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:31:f5:86:73:ef:a2:35:f7:d7:6f:8c:14:3e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Validity
Not Before: Apr 29 06:00:46 2025 GMT
Not After : Apr 30 06:00:46 2025 GMT
Subject: CN=27e4a978c3d3629ff0416125230cd946af59b70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:2c:60:f2:5c:ae:59:e2:39:d8:fa:e6:06:
b7:94:bf:50:bc:9a:94:b6:9e:52:86:86:4a:0a:38:
72:1d:3d:8d:e2:89:c9:d3:6f:3a:39:10:1f:1a:9f:
54:9b:55:48:3a:e7:8d:a7:6c:c3:56:69:8c:f1:fd:
30:8a:a9:6b:a1:18:34:43:71:70:1f:8a:ad:9d:9f:
ca:ac:3e:bc:c6:3d:07:6e:e5:3b:06:d1:45:c2:4a:
c8:4e:37:be:5f:c8:e9:33:20:5c:2e:8a:c3:94:c5:
9e:11:7c:09:22:5e:5a:24:02:9c:ee:a5:fa:1e:44:
eb:f1:b7:bf:2b:7b:fc:94:9a:72:f4:7d:0d:58:74:
ab:f1:37:58:21:28:31:d2:63:74:83:07:fb:36:52:
a1:d0:e1:82:73:1a:c9:3d:f9:c8:92:84:40:06:52:
69:30:5c:95:59:c8:92:fa:a1:7a:f9:b9:a5:61:b9:
1f:f0:68:7e:b1:fb:2b:24:42:7e:db:57:f0:a3:68:
de:a9:b3:46:f3:99:57:1c:cd:0b:0f:60:64:2a:0d:
ef:c4:c3:a1:83:72:46:f9:1b:a5:0e:fc:af:96:aa:
d7:77:e9:49:3b:d4:c2:df:68:30:39:b7:22:46:15:
4d:e1:66:b4:99:26:09:ac:dc:7b:1c:66:98:2a:07:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E4:A9:78:C3:D3:62:9F:F0:41:61:25:23:0C:D9:46:AF:59:B7:0E
X509v3 Authority Key Identifier:
keyid:75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f0:71:c1:e7:25:f2:d1:bf:04:82:bc:f7:43:58:73:0b:50:
51:92:3d:17:b8:91:5b:ec:bf:69:37:cb:d3:fc:96:c5:17:8c:
33:15:d7:34:cb:f0:11:5a:fc:b2:bd:df:7f:4e:26:2c:b0:3c:
9d:42:25:e6:80:bc:54:09:5b:6e:45:e1:cf:88:54:71:17:f2:
c3:dc:6f:9a:5a:27:9f:3d:31:16:cb:b4:5c:ec:2e:e8:cf:94:
58:05:0f:e3:1e:fd:c1:30:92:15:b2:f9:ea:42:97:bc:a5:ae:
82:af:fc:66:d9:5e:ad:00:7c:1a:c5:b3:e3:9c:ad:cf:8c:b8:
8d:86:5f:bc:fc:47:1e:c9:ae:f6:01:90:57:f0:e6:56:96:dd:
b3:4a:74:a8:76:87:19:b0:5c:64:48:01:24:d2:b6:a4:c3:64:
fb:33:f2:0d:cd:d2:c7:97:88:47:87:95:45:29:39:bb:38:31:
54:8b:55:85:91:14:9e:34:e6:fa:17:10:eb:c7:28:64:41:67:
94:9e:90:cf:61:53:c9:2f:21:e7:60:d6:0b:38:de:ed:c7:7f:
dc:17:09:fd:af:d4:ce:00:f5:83:4d:c4:22:87:06:cc:33:ac:
b6:5f:6d:31:76:1a:13:b8:a3:11:81:95:56:b9:8d:ed:16:2a:
68:88:9a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:45:30 2025 by rpki-client