Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
File: dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft (raw, json)
Hash identifier: oxBUViDQzoJjIWjlZry7/IBWcVFaJX5tuEaPZhAPHyI=
Subject key identifier: F5:88:86:F8:00:1D:6D:90:B2:60:7D:F8:4A:2F:2C:91:C0:1F:98:1C
Authority key identifier: 74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
Certificate issuer: /CN=74b975898d10f1a5052133e1e25036c6114d8876
Certificate serial: 019694BB95F7F71CCB6807BC58ADA85D0768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
Manifest number: 11B9
Signing time: Sat 03 May 2025 06:00:43 +0000
Manifest this update: Sat 03 May 2025 06:00:43 +0000
Manifest next update: Sun 04 May 2025 06:00:43 +0000
Files and hashes: 1: dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl (hash: JYBzqIcAoiiHwzDlPaNcsHJqnEtjFxfevWnCm9qPRwM=)
2: z_2rtoFCvPkDkADqibZPjoJmwkw.roa (hash: q/SzHtsnHuDBpVkpEWhHESnMoXOnwPbEJuDNiDhbwHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:bb:95:f7:f7:1c:cb:68:07:bc:58:ad:a8:5d:07:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b975898d10f1a5052133e1e25036c6114d8876
Validity
Not Before: May 3 06:00:43 2025 GMT
Not After : May 4 06:00:43 2025 GMT
Subject: CN=f58886f8001d6d90b2607df84a2f2c91c01f981c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:a2:0b:bb:b4:18:26:ae:02:11:b8:19:44:
39:2e:11:f8:7c:e8:ff:a3:fc:ee:6c:b7:6e:b4:45:
8d:e7:82:7f:35:de:ee:56:8a:3f:61:5a:9b:a0:b6:
f4:d6:64:9f:90:ac:c8:60:d5:39:6a:5e:de:87:a1:
2c:94:9f:e9:b4:8d:67:3c:95:15:fd:f9:7c:ac:07:
91:c0:f3:fa:60:46:db:79:53:7a:c5:4f:53:8c:06:
e1:a6:72:91:0a:af:5f:8b:b3:48:1c:e3:77:63:11:
fa:b1:89:6f:e5:60:83:04:f5:30:c3:d1:9d:34:e7:
94:ad:e2:3c:68:a1:3b:ff:4e:f7:db:7d:6a:5b:87:
cc:c8:e5:b2:5c:a6:e3:65:9b:8a:73:d0:a8:1a:32:
97:98:c4:2b:76:c0:2b:29:c8:b9:71:47:4e:1a:1e:
50:88:47:24:47:1a:5e:64:d9:d4:ef:65:8c:29:f8:
5a:73:56:27:fd:b1:66:a5:73:d8:49:c0:8c:95:c3:
5e:b5:ef:01:36:c1:ab:9d:07:2d:92:c4:75:18:8f:
8d:01:ee:10:21:05:ce:b8:85:48:df:84:88:43:ca:
94:ed:b8:11:62:f4:da:b0:94:7e:01:5a:96:c8:1e:
a6:b8:d7:69:4e:22:21:ba:14:7a:42:50:f7:2b:c6:
4a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:88:86:F8:00:1D:6D:90:B2:60:7D:F8:4A:2F:2C:91:C0:1F:98:1C
X509v3 Authority Key Identifier:
keyid:74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5c:4e:eb:ec:7d:88:d2:1b:88:fe:f1:8e:7d:0d:5f:64:dc:
7d:d4:eb:b3:07:e9:bc:b8:94:75:5c:f6:2d:2e:06:6f:06:68:
43:73:27:1a:54:1b:c9:79:3f:c1:fb:df:cf:3b:e5:46:ee:e9:
0a:85:d2:03:bb:3a:98:74:ee:0a:ec:4a:b3:e6:30:94:05:6c:
5e:09:27:33:df:62:46:1c:d8:af:2f:41:7d:2c:0d:3d:a7:4f:
62:87:08:44:1c:fd:88:16:d6:5f:23:6e:03:8c:b8:63:ed:b1:
23:16:f6:7b:79:cd:31:98:1a:41:1d:d7:5b:2a:dd:2a:a8:37:
a3:fb:63:66:5a:4c:dc:49:f1:e6:2c:b4:91:d9:5c:d3:87:68:
1f:7b:73:ff:d6:0b:ad:93:81:bb:25:9c:fa:79:38:d6:a2:e1:
39:03:a8:59:47:c7:70:a2:69:27:30:e0:40:2d:7b:57:68:a3:
3c:b0:b5:bc:81:97:c5:61:6d:3d:ef:e4:39:bf:be:83:8b:8e:
49:2d:12:a7:b7:49:c9:b7:f5:74:da:ab:67:5e:4f:b0:26:5b:
7f:ea:e9:a7:6d:c3:6d:e8:d4:6a:83:eb:40:0a:54:21:e6:67:
9f:c4:0f:11:0c:5a:99:ba:22:9b:15:ce:74:c4:d8:62:ff:39:
2f:20:a6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:47:33 2025 by rpki-client