Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
File: drTT6JcTIsZNegRYurdFqJreTeU.mft (raw, json)
Hash identifier: 5agKINncr2OOj1gLDAqAK2VK4vfWHNS7c5mLOyqw8uI=
Subject key identifier: FF:E9:2E:55:1F:B7:72:20:04:F3:76:D9:00:A5:05:9A:D4:74:98:38
Authority key identifier: 76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
Certificate issuer: /CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Certificate serial: 019679E963AD34BE07457B3D4C336EEE6BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
Manifest number: 0194
Signing time: Mon 28 Apr 2025 01:01:00 +0000
Manifest this update: Mon 28 Apr 2025 01:01:00 +0000
Manifest next update: Tue 29 Apr 2025 01:01:00 +0000
Files and hashes: 1: ZYX1Qhws2vdCl-u2QXbSsdG6zUs.roa (hash: 1Yas72g5IvT1A6G5CoyKopOr6adZNC8arOgG6BPNF2I=)
2: drTT6JcTIsZNegRYurdFqJreTeU.crl (hash: cnihOHrya1GjQZK1fP0cF9UuPJ4IXFKwVN5gelxc41Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:63:ad:34:be:07:45:7b:3d:4c:33:6e:ee:6b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Validity
Not Before: Apr 28 01:01:00 2025 GMT
Not After : Apr 29 01:01:00 2025 GMT
Subject: CN=ffe92e551fb7722004f376d900a5059ad4749838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:cd:1f:48:13:ba:30:a5:24:a3:34:bd:38:
c0:28:9e:f6:b1:e0:68:cc:59:ac:2f:67:f7:47:ce:
47:9e:60:a6:75:82:58:a7:84:26:ac:92:40:ef:c6:
5d:65:58:94:99:f8:bd:ac:cc:8b:ce:1b:4f:22:88:
1f:ba:e2:42:c4:30:c6:ef:9f:1e:15:7f:88:77:81:
28:9b:6e:92:e4:7e:3d:5e:dc:40:12:84:0c:ee:c9:
5b:ad:98:5d:2f:0c:98:66:58:00:ad:d4:7b:21:6d:
b2:bf:f3:f8:3d:6f:36:07:cf:7d:d9:b3:0b:3f:b1:
2f:21:22:2d:4c:ef:b6:de:cf:a4:a1:03:9e:58:5e:
d6:00:fd:7e:f0:6f:00:b7:f4:72:b8:fc:14:83:62:
39:e1:d3:97:21:98:7c:fc:63:30:26:fb:47:d2:04:
37:66:fd:f8:97:78:93:73:08:88:30:a9:e3:ea:ba:
3c:e9:de:fe:2c:aa:b4:31:72:7b:61:4c:bd:0c:99:
b2:2a:76:46:13:0a:c0:36:a7:53:15:80:57:a4:a4:
33:b6:2b:ea:08:29:4f:69:da:7d:75:b5:00:ca:ef:
ca:42:7b:20:cd:71:61:b0:c8:55:6a:59:c1:71:61:
97:b2:c5:22:1d:2d:b5:c7:a6:f7:28:42:59:f5:29:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E9:2E:55:1F:B7:72:20:04:F3:76:D9:00:A5:05:9A:D4:74:98:38
X509v3 Authority Key Identifier:
keyid:76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7b:92:68:f2:70:a8:ec:d9:a3:70:f5:09:0a:6a:c0:e5:a3:
91:9c:9c:46:e3:ad:d9:d8:7a:fd:bd:2b:e6:a2:4b:21:90:13:
d5:12:31:1e:66:bf:dd:72:52:19:83:85:81:92:5b:6d:6e:76:
2c:0f:02:41:f9:8a:b2:e8:d4:ef:95:f8:68:50:96:9f:71:05:
c6:d9:13:8d:32:1d:c1:9b:3a:0b:93:8a:27:be:09:4f:46:8d:
0c:c7:67:76:e6:bf:d3:39:24:5f:25:f6:e8:d6:aa:e7:45:f2:
ea:fb:51:da:1b:8b:38:5f:c8:58:aa:44:eb:44:51:a4:47:69:
81:3d:25:9c:de:38:84:b5:89:1e:c3:1d:24:f5:e2:9a:f1:e3:
c3:8f:25:47:61:f2:58:24:0c:3a:74:74:13:89:9c:f7:f8:bb:
63:19:0d:ec:73:cd:73:70:ba:44:31:02:41:f0:71:a4:b3:45:
2e:61:4c:af:09:10:d3:03:2f:04:02:48:c4:d6:e7:8d:ac:82:
58:bb:14:eb:9c:df:a0:c1:ef:2b:b1:3e:ab:ab:e1:a2:18:50:
81:47:d3:2a:36:de:09:a0:13:20:0d:f9:53:45:2c:af:62:a3:
ec:72:59:a7:67:8e:05:b9:bd:1a:ad:ba:05:0c:07:bf:bc:b1:
77:1f:b6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:54:29 2025 by rpki-client