Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
File: dBmPcCK5VgUB20SK9gMB-ihekjY.mft (raw, json)
Hash identifier: UatrEN2Hz4cbhMGqmZR+6i0WH9NOLTY3WkVA7iwCiAs=
Subject key identifier: 59:B2:B1:E5:39:0C:47:3E:4B:68:66:7A:6E:7C:F3:67:B0:3E:98:66
Authority key identifier: 74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
Certificate issuer: /CN=74198f7022b9560501db448af60301fa285e9236
Certificate serial: 019676E7F4D66B2111155D0DC0E406E2C28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 11:00:35 +0000
Manifest this update: Sun 27 Apr 2025 11:00:35 +0000
Manifest next update: Mon 28 Apr 2025 11:00:35 +0000
Files and hashes: 1: HIDgrdHX_QU-bGXtDjZHW_ouIno.roa (hash: CeASJRYiDgx1fz5UAh5dDbAHwn7ALNNERk8t4H2LNDQ=)
2: dBmPcCK5VgUB20SK9gMB-ihekjY.crl (hash: DfV1h0AIqCkNEGYAknJHjs5pzlfBWJlYBVFIhDfNLKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:f4:d6:6b:21:11:15:5d:0d:c0:e4:06:e2:c2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74198f7022b9560501db448af60301fa285e9236
Validity
Not Before: Apr 27 11:00:35 2025 GMT
Not After : Apr 28 11:00:35 2025 GMT
Subject: CN=59b2b1e5390c473e4b68667a6e7cf367b03e9866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:8b:55:6d:d3:10:e7:d9:3d:f1:1d:68:11:
a6:cb:e3:af:bd:fb:ef:49:a8:f5:67:ea:70:c1:ae:
d5:5c:1b:ff:3c:fd:63:a4:f4:04:97:10:4d:e0:3a:
66:6c:f0:fb:d6:62:28:da:bf:ba:43:e9:35:43:f4:
d9:ba:d9:bd:8e:c2:b5:7d:1c:3d:fe:ce:29:dd:96:
d2:13:c2:77:65:c7:1d:e3:a2:9f:1c:56:69:59:db:
26:58:29:90:2d:38:56:ac:62:1f:78:c6:65:6b:7a:
d9:37:ac:30:40:15:22:ac:8e:09:b6:4d:64:71:87:
20:2f:de:26:61:8b:ac:13:1c:d9:d6:29:c6:cc:30:
94:a5:1a:97:5c:cf:d6:32:33:24:db:05:8d:6b:fe:
88:e4:0d:70:55:98:8f:a8:b5:58:9e:fe:0f:90:8a:
ed:56:02:64:1d:67:1f:aa:ae:23:aa:6c:9f:a9:5b:
80:83:65:9d:a0:3f:b6:fa:d9:b3:e5:1b:d7:54:fe:
a7:c6:15:98:89:40:05:44:0c:f1:6f:44:6e:2e:63:
da:b1:00:f5:e0:90:4d:c7:8d:db:76:b3:65:bf:a9:
52:7f:4f:71:86:4e:da:bf:2e:51:2c:51:e1:f5:ac:
f2:75:c5:f4:b1:aa:ac:78:28:e4:ab:3f:27:27:b3:
57:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B2:B1:E5:39:0C:47:3E:4B:68:66:7A:6E:7C:F3:67:B0:3E:98:66
X509v3 Authority Key Identifier:
keyid:74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a6:ca:cf:c1:06:a0:ad:b2:f8:59:b3:f2:4f:ae:18:4a:12:
20:26:2a:1f:6f:e6:41:51:b5:0a:1c:82:99:29:2d:fa:a8:f5:
bb:26:5a:fc:7a:a3:95:1d:e4:9a:18:d0:97:65:7b:1d:69:5e:
59:d9:90:e0:a0:63:3c:ae:bd:57:0d:a2:55:03:5a:59:f5:31:
ea:34:f0:61:57:0e:4e:05:30:cd:57:9d:d2:f1:c5:e4:3e:8d:
cf:5b:9f:23:e3:fe:fa:4b:2d:d9:25:bf:db:44:32:ff:5f:3b:
0d:df:28:65:36:c6:2e:c4:35:c6:9f:6d:d5:2f:e4:e3:99:af:
5a:13:93:5e:80:a3:28:a1:80:54:fd:84:54:74:a5:79:53:f2:
20:60:55:c4:16:3e:f0:6d:74:ef:92:6c:88:aa:25:96:cd:b5:
90:5f:46:c1:0b:d8:48:48:51:4f:86:9a:7d:91:86:bc:ee:6b:
97:10:14:21:24:db:5d:d3:d0:0e:6e:bc:27:3e:1e:eb:25:62:
b2:ea:af:70:6e:47:18:c6:d9:61:6c:67:d2:ea:45:26:3b:b1:
56:38:7b:53:8e:6d:da:80:68:e3:a4:aa:c2:4b:f2:dd:53:16:
43:8f:78:08:9c:d4:1b:a5:ac:60:80:e5:3c:1e:40:b8:5a:f2:
61:50:93:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:13:28 2025 by rpki-client