Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File: dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier: GGDZ9SUq5/RkB4Si+gAInBgSwnrqlmiovax9Mfdxp30=
Subject key identifier: 85:57:30:D5:3C:A8:5C:8F:55:CB:DD:99:5C:2D:86:03:7A:5F:B9:59
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 01976CCFC34ED5363E9A9CDB1A4581B4F310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number: 12C6
Signing time: Sat 14 Jun 2025 05:00:44 +0000
Manifest this update: Sat 14 Jun 2025 05:00:44 +0000
Manifest next update: Sun 15 Jun 2025 05:00:44 +0000
Files and hashes: 1: 40QNfW5uxL4jypZTwjAvEPXJ-ss.roa (hash: scLT9GShE++kyEVNQ4Xr6VT4pmzB0wfzNMHjViw3ltA=)
2: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: AYKYSU+fzl3bNkk2q0IPK4EUGn1PYPq5Nyl6kbaNp0Y=)
3: to-C9o8M7rUM05HxGikjjRHVAbw.roa (hash: JaaGI9qnzexOYc7maJGwDizpvZfHfNfRXKpM/h4aHAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:c3:4e:d5:36:3e:9a:9c:db:1a:45:81:b4:f3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: Jun 14 05:00:44 2025 GMT
Not After : Jun 15 05:00:44 2025 GMT
Subject: CN=855730d53ca85c8f55cbdd995c2d86037a5fb959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:7e:83:89:c0:fd:08:50:6e:9e:f6:14:14:
06:1d:93:d6:54:f3:6b:a1:8f:6f:f9:b8:a2:42:d8:
2c:c5:3c:a0:9d:f7:21:1f:49:82:a8:d7:27:13:5b:
57:02:ac:a6:2c:7c:c5:0b:88:83:ae:8f:0b:4e:cc:
13:71:f5:8a:04:53:29:60:43:62:71:cd:34:8c:be:
6a:ed:ab:97:c1:e6:a3:e4:cc:11:f2:6c:3b:54:78:
bc:ac:84:0f:68:17:4a:aa:01:46:a4:ab:8d:8f:d7:
7f:a2:68:3b:47:6a:a2:aa:fb:1c:80:49:27:42:44:
f3:88:99:d5:ca:20:24:50:a6:ff:62:a8:18:fe:93:
68:03:e8:32:ec:8a:19:8e:76:1f:94:4d:52:c5:27:
7e:e1:42:16:32:3b:74:fd:1a:92:d4:c5:ec:6b:17:
53:26:41:48:fa:6b:c0:8b:3e:1b:29:81:76:82:b1:
91:90:40:b5:03:1e:70:9a:82:ab:f9:39:61:f8:75:
2e:ad:f6:e7:a7:ff:b3:fb:9d:a6:a2:99:f1:0c:61:
b5:b6:a7:e2:56:3d:6b:8f:e2:48:aa:4d:e0:36:76:
50:1a:d1:87:cc:db:bc:8d:f4:36:ab:f0:84:a8:dc:
b4:37:7b:1a:22:c9:df:32:5d:15:c7:b3:77:84:82:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:57:30:D5:3C:A8:5C:8F:55:CB:DD:99:5C:2D:86:03:7A:5F:B9:59
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f1:2d:40:92:10:d4:12:a2:04:0c:83:50:69:b3:d8:72:44:
50:d9:ae:44:28:cf:30:0d:4d:67:7d:eb:98:21:db:62:8b:68:
99:d9:3b:3f:ca:e1:9a:c7:71:11:c8:ad:70:5a:f6:05:71:1e:
6c:3c:20:13:00:87:0c:41:94:4a:3d:b6:54:d3:18:6a:3f:cc:
4d:37:f7:47:49:aa:81:d7:3d:d5:a3:b8:cb:d3:67:4c:56:b5:
80:7f:bb:10:24:e8:2d:1e:55:fa:64:31:bb:91:5f:24:77:e1:
78:80:df:72:3d:b9:b1:56:b2:d5:66:97:fa:6d:5d:a1:41:51:
0d:8c:08:1f:3d:e0:2d:96:03:c8:ff:e3:dc:67:05:2d:05:0d:
19:3e:e1:1c:8f:99:da:22:8c:22:64:08:da:81:c6:13:70:8a:
9b:5c:7c:d5:f9:c5:d0:4a:e2:c8:71:d2:76:e9:d1:2e:2a:b8:
7c:4e:86:41:4c:ef:b2:ff:62:9d:dd:43:93:12:10:29:ff:48:
aa:fc:f9:2c:2e:bf:04:d3:0e:37:d9:f5:1e:72:68:72:2f:72:
d4:3e:a6:4f:c5:c1:95:42:37:c7:3a:a5:da:f8:84:db:a1:4e:
fb:f3:bd:1d:e1:78:40:c8:c6:4b:86:5a:f5:e8:90:99:7a:3f:
34:9a:62:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:16:02 2025 by rpki-client