Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
File: dvMR7xWBoA5DfNcEtigayGIa_FY.mft (raw, json)
Hash identifier: vTNix5tDK6LBisiKJg3EXJd9dpbQ1xVdC1PQp+7sGKc=
Subject key identifier: 9D:50:CC:35:34:64:FA:34:33:37:D9:E9:50:30:2D:19:77:F0:1F:48
Authority key identifier: 76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
Certificate issuer: /CN=76f311ef1581a00e437cd704b6281ac8621afc56
Certificate serial: 0196741E445C0F9CFACEFF442C51B8B2B032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
Manifest number: 1510
Signing time: Sat 26 Apr 2025 22:01:02 +0000
Manifest this update: Sat 26 Apr 2025 22:01:02 +0000
Manifest next update: Sun 27 Apr 2025 22:01:02 +0000
Files and hashes: 1: Q6cjkrSokxtUJmUsJvQ_7Hwg27U.roa (hash: m1XnL/411Yf9huGjfl9fr7l+U2VdNJkxGE7M3cXIn3c=)
2: _Bhg_0oqoTNSpwMzEcCpFnd46nA.roa (hash: AG0x4xC1l+R6ZCFoLMsVQeQ9AoJqN1cWLKxqvQ0rMIY=)
3: dvMR7xWBoA5DfNcEtigayGIa_FY.crl (hash: 1xgdnbEEmgohkZnwlsLm7EzT2yhWfBp8tEQbj7nsCVE=)
4: gdPoGNVcOTxve9Q4-VpVufJk2tk.roa (hash: WuZzCuCA9L2ThwhAvWX+I1Ah6JPhfZ6ih/yP6XwGm+0=)
5: m7C4LK8pgT5lORZBsv-BS_VdFFQ.roa (hash: X3l+LpnL2+oK3trvHtfdrKfFth5mN5qj+aVKY9/H5Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:44:5c:0f:9c:fa:ce:ff:44:2c:51:b8:b2:b0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f311ef1581a00e437cd704b6281ac8621afc56
Validity
Not Before: Apr 26 22:01:02 2025 GMT
Not After : Apr 27 22:01:02 2025 GMT
Subject: CN=9d50cc353464fa343337d9e950302d1977f01f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:af:d3:ad:15:c2:75:15:05:8b:a0:8e:4f:cf:
97:20:c6:60:ee:78:88:8b:1a:d3:53:c3:f0:89:83:
fd:20:e2:33:38:02:a7:09:3b:2d:d9:0b:58:5b:8f:
af:53:ae:f2:6a:fe:53:ff:07:46:f7:3a:2f:62:ed:
ae:9d:7a:e8:d9:04:08:c1:ac:89:0f:e8:dd:99:1c:
db:bd:0b:47:07:fb:8f:39:c3:60:56:e5:0b:18:27:
b7:44:1d:0e:20:25:34:70:14:0f:eb:43:d1:6e:12:
d3:bd:4a:4c:7b:a1:4f:de:01:66:e7:02:4a:60:64:
13:e4:dd:f8:dc:a5:50:70:ce:44:ac:cc:8a:4e:e3:
e0:37:00:42:e2:82:43:75:29:e5:1a:8f:34:b5:e8:
b8:a2:49:d4:80:aa:2c:2b:8a:d2:76:ee:d4:75:dc:
d2:70:db:f3:50:f4:51:38:af:fd:cd:12:f9:fb:10:
b3:5b:d6:a7:21:ea:70:62:ac:7d:09:32:a3:ef:fb:
e4:ed:9f:42:37:12:16:04:2c:d7:a8:6c:0d:89:2b:
85:19:79:cf:15:80:b2:75:c3:b6:94:ef:a0:8d:45:
2c:21:20:83:b9:ec:e3:0c:b1:37:3f:78:70:4f:dc:
4c:60:48:d4:52:f1:e9:2e:f9:17:ef:11:06:c6:01:
ca:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:50:CC:35:34:64:FA:34:33:37:D9:E9:50:30:2D:19:77:F0:1F:48
X509v3 Authority Key Identifier:
keyid:76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ac:1e:ce:61:8e:34:ee:95:5b:e7:ba:e5:ba:d5:93:bb:d1:
76:b5:a6:5e:a9:0b:ad:af:66:8d:af:58:2b:43:15:c1:ce:aa:
b7:ae:8a:f9:7f:89:50:dd:b0:52:d9:a9:a0:dc:e7:45:b0:3c:
47:b8:f4:d6:94:67:27:e5:2a:7e:50:08:b0:f7:99:19:a1:f4:
e7:dc:30:09:a4:a8:74:37:d0:95:b3:8f:74:be:77:6e:fd:a6:
68:e1:b3:3f:7b:23:00:cd:90:5f:b2:91:e7:e6:d2:ba:42:e0:
98:68:40:21:3d:65:6a:32:88:bc:b7:bc:3f:7e:f3:0d:c1:b0:
d1:60:5a:b7:f4:a4:41:bc:e4:04:72:f8:12:2f:3f:e7:b1:98:
eb:15:1f:74:29:db:3a:99:f4:b2:11:97:15:0a:c6:d5:52:7b:
d0:77:22:cb:d0:47:a9:6d:2b:85:ca:70:02:61:a5:aa:e3:f2:
ca:88:94:97:f7:fb:fa:f1:37:7d:53:c9:9f:a3:e7:dc:8f:53:
85:eb:ca:f5:13:14:dd:99:ee:6a:6d:2c:a7:8a:02:76:24:3c:
6a:e5:cf:2e:20:85:ea:00:09:69:0b:61:6b:12:b8:6f:4d:84:
8a:f9:39:5a:ef:95:32:71:11:c4:e1:c3:3a:21:e3:b7:0f:de:
d3:89:bb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:27:04 2025 by rpki-client