Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
File: dYeQLOemozSk4Ntz5yGYkBXWSJs.mft (raw, json)
Hash identifier: X9fzn5qAUOkAQ2wBbg0y3i7v5vc248KjmZVihlvZXGQ=
Subject key identifier: 54:F4:BD:69:70:33:79:99:7C:3D:EB:8F:62:23:97:B3:5B:E9:B1:14
Authority key identifier: 75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
Certificate issuer: /CN=7587902ce7a6a334a4e0db73e721989015d6489b
Certificate serial: 019677C3B0D5F8340CB443A8A1B820AEC3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
Manifest number: 1385
Signing time: Sun 27 Apr 2025 15:00:35 +0000
Manifest this update: Sun 27 Apr 2025 15:00:35 +0000
Manifest next update: Mon 28 Apr 2025 15:00:35 +0000
Files and hashes: 1: 1-p_3utwZJLFIY_hjsgzsQwTLbiI.roa (hash: zpk9gNBEbgG53UDNDLXhMv6FzOCjxm3OmxU6M/IVco8=)
2: dYeQLOemozSk4Ntz5yGYkBXWSJs.crl (hash: EZKETK/5uZ+AKBj3eH5dV2LRfvECaKpz6wuYx5z6YsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:b0:d5:f8:34:0c:b4:43:a8:a1:b8:20:ae:c3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7587902ce7a6a334a4e0db73e721989015d6489b
Validity
Not Before: Apr 27 15:00:35 2025 GMT
Not After : Apr 28 15:00:35 2025 GMT
Subject: CN=54f4bd69703379997c3deb8f622397b35be9b114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:60:66:b8:c5:14:44:c5:45:d3:aa:cc:b5:
ad:04:d2:21:b4:f6:fd:21:b6:12:ea:7a:e4:c0:4c:
0d:18:bf:04:3a:e9:0c:69:46:e4:c3:05:00:f9:94:
64:5a:67:e0:3e:4e:34:de:58:d6:45:ea:95:a8:40:
c8:dd:8e:e6:2d:21:8f:00:0b:c2:61:a2:c0:df:af:
14:2c:ca:7d:d3:b8:db:f4:76:7e:d3:5a:09:0f:e9:
df:f8:b7:73:bd:c9:c7:c2:27:52:2a:b0:29:17:4b:
7d:ed:03:5a:e6:6c:86:4e:2f:55:98:0c:1d:30:2a:
1a:86:f8:a8:e0:f4:21:0d:fe:ac:30:b0:70:ef:85:
0d:d8:73:f0:dd:36:81:a8:16:cc:99:13:3d:20:9d:
04:95:09:a6:3d:90:51:bb:ed:39:9b:b2:08:02:a0:
1c:24:4a:62:11:8f:42:72:81:08:6f:0b:07:12:3b:
5c:11:b4:03:21:02:aa:c1:0a:24:08:6a:26:c0:41:
f0:b2:aa:5b:2b:cc:2d:cc:ce:19:63:7c:5f:19:54:
d7:c8:bf:23:8e:cc:9e:3f:72:fa:bd:6c:4b:cd:75:
8a:74:4a:8e:d3:f8:58:d9:e4:dc:c9:5c:ad:26:47:
c3:6d:ae:28:4d:86:25:4b:de:86:8a:6d:e4:ad:c9:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F4:BD:69:70:33:79:99:7C:3D:EB:8F:62:23:97:B3:5B:E9:B1:14
X509v3 Authority Key Identifier:
keyid:75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7e:19:79:0a:ac:e6:a6:07:c1:af:a1:fd:ef:99:48:cb:66:
51:0b:5c:e9:41:c2:dc:9f:b9:ce:37:f6:5d:a7:c8:d5:96:33:
56:34:56:9a:bc:e4:be:fc:97:03:fd:f6:d7:b1:06:15:1d:9a:
6c:f9:8b:a3:25:ad:ed:0f:33:f1:c0:97:36:a7:65:15:dd:a3:
13:ba:ee:64:07:40:2f:6f:a6:13:25:06:72:f3:f7:77:2b:80:
18:a5:26:76:32:c2:09:03:0e:83:89:8c:c9:57:66:4f:a0:77:
67:66:7b:fe:55:a0:e4:ca:a2:26:28:09:ea:d8:aa:d7:35:d4:
e4:c6:90:ad:6a:f1:ee:b6:f8:57:98:b3:a9:8e:f1:41:d5:27:
80:8b:3b:22:7f:a0:2e:15:87:f5:eb:f4:ae:26:b8:36:dc:6f:
65:e4:13:cc:15:8e:6e:fb:61:59:ad:a6:87:b9:9f:b7:41:ae:
d2:2f:2c:74:66:8e:94:82:98:f5:79:53:3c:07:bb:fa:31:68:
ea:e2:a4:b5:9a:a9:a4:1f:0a:f3:83:68:3b:d6:15:9e:85:1e:
e5:da:e9:01:b7:0e:24:1a:1e:df:f9:83:29:41:16:fd:8d:6d:
ed:07:02:fc:da:98:ec:33:6a:e7:47:14:2d:e1:0e:48:02:b3:
dd:0c:a3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:15:51 2025 by rpki-client