Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
File: dw0111Zu5yRuTSEzy95Ip3RCPHc.mft (raw, json)
Hash identifier: /5sADQoDlZUl41MDUwrLJIpXAqeHvkDIZdxYqu3wBHU=
Subject key identifier: A3:E9:4E:BC:B2:78:FC:0A:92:43:C7:61:6B:BF:1E:88:BE:A0:52:E0
Authority key identifier: 77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
Certificate issuer: /CN=770d35d7566ee7246e4d2133cbde48a774423c77
Certificate serial: 0196790D11C66BE0CFDCB126C15934EB545B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
Manifest number: 08F4
Signing time: Sun 27 Apr 2025 21:00:21 +0000
Manifest this update: Sun 27 Apr 2025 21:00:21 +0000
Manifest next update: Mon 28 Apr 2025 21:00:21 +0000
Files and hashes: 1: SOT0W2XrP7CCow7oMidVP0WeTQc.roa (hash: LK/wr/vv637+E1XEkLAUiLeI/zSDn9f20e+XXEbQLBM=)
2: ZHw9z1FJzdvIzznM9dzN2O5C56I.roa (hash: bAuKlmhtwV1RMYb3UiAoj3013/bGmnUu7vNpvbyFAaw=)
3: dw0111Zu5yRuTSEzy95Ip3RCPHc.crl (hash: FFnSPHg4rYnt3l2u0F7q+5Dvh/f4OoiyxHIcE9S/dpE=)
4: kb1hhl4VhznPe9ar0pe3UEE3K-I.roa (hash: smgbn2o+yW8NSkrB4nhx/ecIptLt+NRlqrEvEJN1ma8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:11:c6:6b:e0:cf:dc:b1:26:c1:59:34:eb:54:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=770d35d7566ee7246e4d2133cbde48a774423c77
Validity
Not Before: Apr 27 21:00:21 2025 GMT
Not After : Apr 28 21:00:21 2025 GMT
Subject: CN=a3e94ebcb278fc0a9243c7616bbf1e88bea052e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:25:37:08:44:87:ac:35:b9:49:fd:a3:91:
89:0e:5d:50:85:d6:34:07:9a:38:73:39:f7:43:96:
b4:d9:11:70:60:71:68:4e:99:2c:f3:2b:cf:ea:3a:
4e:b0:85:8c:72:93:33:0d:84:df:db:d7:f0:cf:7e:
4d:66:3f:dc:fc:a4:68:bb:e5:92:79:83:8b:a8:40:
f8:50:b8:24:9f:ec:f8:8c:67:1c:58:94:25:7e:bd:
1b:7d:01:71:d7:9e:3e:41:16:e6:ea:f0:57:76:b3:
2f:9b:cf:02:70:00:6b:7c:80:16:27:0d:7b:5d:a0:
be:82:c4:4d:a3:f1:aa:2f:91:93:dc:59:77:b8:33:
a1:fb:a9:91:f8:12:ad:98:36:45:24:c6:9e:06:71:
a5:e2:f6:b1:13:7a:db:de:25:29:a0:b3:af:2c:dd:
5f:f5:10:0c:21:6a:8b:ab:64:f0:be:6f:15:bb:13:
a2:aa:9a:7b:3a:f1:f5:9a:f4:84:4d:c8:45:8d:40:
6d:41:c1:5f:68:91:1a:5d:84:c2:bc:c3:3a:6d:ba:
83:e3:72:04:0e:1e:ae:51:f6:92:d2:77:5c:4f:4d:
c1:06:58:9a:79:c3:53:2a:36:dd:e4:0e:84:84:ce:
72:d7:04:b8:46:08:54:b5:6f:2d:46:1d:f3:57:4b:
81:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E9:4E:BC:B2:78:FC:0A:92:43:C7:61:6B:BF:1E:88:BE:A0:52:E0
X509v3 Authority Key Identifier:
keyid:77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:05:d4:bd:78:7f:9d:2c:cb:fb:3a:00:55:95:45:da:a7:a4:
d7:90:d2:c5:92:81:29:0a:74:0c:8d:d0:07:a4:ef:6f:26:71:
c7:40:0b:cc:f9:30:ef:02:56:65:1a:e8:41:4f:af:a9:b0:c8:
23:83:a0:8f:42:36:b5:79:11:b8:f6:eb:04:c6:ff:63:c9:48:
28:2a:62:1a:25:d1:49:83:7f:cc:56:dc:6c:40:3b:28:20:20:
90:86:3a:06:93:94:c4:4f:d1:49:2b:4d:57:56:83:49:b1:86:
09:84:d6:8d:9d:55:09:29:1f:41:59:fd:3a:72:cf:1a:85:24:
97:59:31:97:55:56:50:b7:f9:9b:1a:7e:48:94:70:01:18:30:
f0:91:94:6a:b2:f9:b8:bd:f8:b1:4f:6f:37:fe:d0:92:30:ae:
63:fb:fd:25:11:47:21:19:cc:42:07:59:64:db:69:3a:69:ae:
df:2e:3a:b6:7e:73:fd:aa:4b:7c:86:32:f2:8c:dd:6c:7a:8f:
f9:6f:82:93:cd:f1:c0:74:95:47:60:13:8e:7d:94:ec:6c:7f:
19:05:14:f8:13:b9:15:29:48:99:65:ca:51:1f:7c:45:79:26:
11:d9:22:97:85:46:f2:a1:74:71:e6:b6:d8:50:a9:8b:74:3e:
bb:06:d1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:27:35 2025 by rpki-client