Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File: dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier: SFvz/cGJQAoZEdZ2mCMdGEOS/PtIBapvi/Lyt8gajk0=
Subject key identifier: F0:28:D9:A1:5A:75:95:29:DE:D2:68:B6:E0:F3:EA:98:E2:62:0F:26
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial: 019683FF90593B711CD656804D1B12572728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number: 151E
Signing time: Wed 30 Apr 2025 00:01:26 +0000
Manifest this update: Wed 30 Apr 2025 00:01:26 +0000
Manifest next update: Thu 01 May 2025 00:01:26 +0000
Files and hashes: 1: PVmSZDGrn03CmC3ystxrDr3TZfo.roa (hash: Pjr4/1MqbKXy/FJJPo44XPup/Kfr50sF5z3bYT1o0SU=)
2: XU_IzR1XNktTavIx_nI3l6sD7WI.roa (hash: QAWYFwQ7d4DDdntznflGhPwEdw+c4lyHMRKRE5reGnk=)
3: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: /V0QJOiUIh8wEvYep5ZAsdJPzBjlNH7O/WINDa61G6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:90:59:3b:71:1c:d6:56:80:4d:1b:12:57:27:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Validity
Not Before: Apr 30 00:01:26 2025 GMT
Not After : May 1 00:01:26 2025 GMT
Subject: CN=f028d9a15a759529ded268b6e0f3ea98e2620f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:74:a8:88:5a:ac:28:5a:9a:49:07:41:ec:
1e:0c:fe:42:05:89:5e:00:13:af:e2:02:54:3c:69:
9d:4f:ef:53:02:35:4d:48:bb:d7:1c:19:52:55:ea:
fb:7a:b8:e1:92:ec:8b:85:62:68:0c:7e:8b:7b:c0:
2a:6f:5a:42:a0:83:be:7d:63:81:78:bc:9b:28:fa:
af:8b:23:fe:18:d3:72:04:62:2a:7e:27:ee:ac:cb:
46:3c:54:d0:65:1b:a0:5c:95:ec:4c:76:1e:e9:79:
93:90:18:d9:cc:1f:3a:d2:2d:2b:18:7f:f0:bf:09:
81:9d:a3:26:f9:37:f9:0e:1b:c3:d9:d1:9f:78:66:
ab:25:4b:c2:32:1b:80:bc:4a:c6:3e:66:ff:f9:89:
a6:9a:12:ba:cc:29:3a:d1:b5:79:d6:e6:bb:aa:4c:
d5:b5:00:15:d0:e2:72:0b:73:a0:6a:64:bb:5d:e2:
79:f1:77:c6:35:6c:6e:79:b4:3f:d2:b6:89:bd:7c:
90:0c:fc:e7:cf:8a:89:70:91:f9:6d:0a:d5:ea:08:
22:15:53:45:24:aa:12:68:97:17:27:7d:df:56:16:
59:bb:35:12:9a:d4:db:8c:14:0b:e5:09:d9:d9:d7:
7a:44:da:0d:5a:d5:ea:34:92:15:53:41:b5:c7:e0:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:28:D9:A1:5A:75:95:29:DE:D2:68:B6:E0:F3:EA:98:E2:62:0F:26
X509v3 Authority Key Identifier:
keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ec:c2:19:d7:18:3d:16:0a:6f:68:e8:50:06:a6:44:61:56:
9b:cd:67:e8:6b:23:9c:1f:52:39:36:62:54:b7:78:ef:b3:d1:
03:64:cb:4d:a5:aa:4d:d5:11:90:a0:ec:75:9e:65:49:78:a4:
d1:7b:47:a7:3c:9b:c3:0d:47:be:4e:27:20:7f:72:eb:09:6c:
07:07:cc:29:39:3e:c4:fb:a8:70:fa:32:24:2e:dd:9f:16:e5:
86:f0:42:df:2a:e2:5b:06:a0:0c:e4:32:93:0d:5f:3d:62:c6:
c3:5a:4f:96:95:18:af:0e:0f:07:af:b2:03:5a:be:9a:02:7a:
36:42:7f:ea:d2:e2:3d:45:69:08:2e:33:41:91:4e:fb:bc:58:
28:a8:76:40:ef:fe:65:7f:cc:d3:51:42:16:80:6d:cb:c4:d4:
b5:68:64:f7:d2:0f:db:c9:ee:8c:44:5b:4b:92:17:67:f9:82:
0d:31:3d:ac:9a:2a:cf:c5:ea:3e:23:ab:b5:2c:98:0b:8d:f0:
4f:f7:d2:74:fa:94:f0:3c:1c:38:a6:44:45:c5:03:5f:77:e7:
1d:af:2d:a9:c4:dd:f4:81:be:de:56:b9:99:64:fd:d4:a6:54:
20:bb:3d:3b:f8:10:fa:19:f4:ce:78:7e:5b:6f:cb:74:d1:1e:
e0:65:0b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:33:37 2025 by rpki-client