Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File: dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier: FNwIFzsJKPibfqj6X0xSIfzIjX8vCnV6bJJPiPeRhRg=
Subject key identifier: 4A:34:E2:58:2B:76:4A:22:BD:D1:97:00:2F:E6:AE:26:02:C7:2D:28
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 0196759E7B9C2606BE553F084CFA38E13C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number: 1246
Signing time: Sun 27 Apr 2025 05:00:42 +0000
Manifest this update: Sun 27 Apr 2025 05:00:42 +0000
Manifest next update: Mon 28 Apr 2025 05:00:42 +0000
Files and hashes: 1: 40QNfW5uxL4jypZTwjAvEPXJ-ss.roa (hash: scLT9GShE++kyEVNQ4Xr6VT4pmzB0wfzNMHjViw3ltA=)
2: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: Tn553mlNhPKH6fXaqecA+1NQPkTEIvy2+Yjx774Ef/M=)
3: to-C9o8M7rUM05HxGikjjRHVAbw.roa (hash: JaaGI9qnzexOYc7maJGwDizpvZfHfNfRXKpM/h4aHAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:7b:9c:26:06:be:55:3f:08:4c:fa:38:e1:3c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: Apr 27 05:00:42 2025 GMT
Not After : Apr 28 05:00:42 2025 GMT
Subject: CN=4a34e2582b764a22bdd197002fe6ae2602c72d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:d2:91:dc:33:4f:ff:46:bd:f4:c2:a3:48:
55:61:61:99:12:ab:ae:86:1d:72:49:93:c3:68:4a:
05:ef:7a:45:32:ab:69:ba:99:0b:3a:2e:26:57:69:
e5:06:6a:6e:d4:d7:69:7c:6f:39:64:ed:ec:1f:14:
82:69:d4:0a:4d:b4:3b:6e:77:f8:cf:6e:ec:1e:58:
f8:60:5d:94:f1:a8:eb:db:9d:75:d2:bf:34:c2:82:
6a:80:bb:a1:f1:c8:48:27:bc:ad:2c:ee:39:56:ee:
35:ba:19:89:7d:c8:13:f9:f1:84:6f:1d:bd:71:e7:
18:d9:87:af:74:77:74:54:4e:d7:f5:2d:aa:87:e2:
c4:45:a5:1a:72:d4:d5:f9:da:1d:6c:a0:4f:16:6f:
27:40:6d:89:6b:61:c1:9e:4b:b1:3b:70:3b:59:32:
6d:6a:d2:9b:a0:83:9f:de:36:04:95:c9:67:3b:ef:
a2:0f:ee:ab:9c:3b:12:33:2d:7d:83:5d:98:b5:06:
b7:1f:bc:16:06:1c:de:0c:1c:d5:c9:15:d3:42:b9:
39:ca:7e:8c:b5:4e:89:1e:62:1c:39:58:98:77:c9:
39:89:d2:7f:0c:88:ee:df:70:5b:0c:53:25:36:d1:
fd:5b:5d:0f:0b:92:76:ea:92:19:27:26:14:cc:4d:
4b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:34:E2:58:2B:76:4A:22:BD:D1:97:00:2F:E6:AE:26:02:C7:2D:28
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f3:f6:0b:9d:98:f0:1f:81:94:d2:3f:8b:3d:46:7b:02:d2:
d3:e4:0a:de:97:a0:3e:80:24:09:50:85:41:a1:57:57:56:c4:
56:3a:73:9a:43:60:92:9e:ab:a5:46:bb:11:e1:fd:b0:f0:42:
1a:87:d5:dd:9c:f6:fe:65:b3:6d:b0:c3:49:66:49:0c:49:b9:
85:4b:f8:a1:f6:e5:4d:2e:2a:a5:68:f9:4e:44:8d:e3:12:5f:
45:96:17:5f:9b:80:04:c0:80:94:06:59:51:0f:35:92:b6:b2:
6e:fd:cf:07:89:fe:fe:6a:94:c8:9e:5b:4e:19:a5:8a:9b:4d:
b7:10:ad:ac:47:a8:08:e5:9d:77:ce:d5:1a:ef:ef:e9:a0:94:
62:3c:65:9b:fe:03:c6:bd:f6:59:b1:e2:3a:93:2d:4d:d0:cf:
75:de:f8:b5:79:20:e9:f6:28:64:ca:e0:ff:28:f8:58:8d:00:
5e:a4:57:d2:47:a3:a5:3a:65:65:4b:c5:cb:fa:12:d7:f9:fd:
4a:a6:eb:fd:bd:18:cb:80:76:8b:e2:3c:35:26:9a:75:5c:95:
28:43:d1:d9:f2:43:46:41:46:18:b1:ca:7a:90:09:46:93:64:
29:55:db:16:e7:dd:5a:45:5d:8e:16:c5:8a:e0:e8:54:69:89:
d8:f7:2b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:15:25 2025 by rpki-client