Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
File: dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft (raw, json)
Hash identifier: gbirhxgC7aWhjdvxFKpzhSvdv37F8x81qW9nsQuf2ek=
Subject key identifier: 2C:AA:9B:CB:B0:E2:B5:A0:83:CF:75:D7:F7:73:73:BE:42:12:C3:0D
Authority key identifier: 74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
Certificate issuer: /CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Certificate serial: 0196846C8828310EABFBEA1C923C4E7B7354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
Manifest number: 1516
Signing time: Wed 30 Apr 2025 02:00:27 +0000
Manifest this update: Wed 30 Apr 2025 02:00:27 +0000
Manifest next update: Thu 01 May 2025 02:00:27 +0000
Files and hashes: 1: NVfSq2DY4cD3_FemKxq3kFWdNbQ.roa (hash: FrMf82dKiOwRXnPTbOvJcW2xGJFytZk+POr0sPYgteE=)
2: dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl (hash: st/Mni4u6bAHjcF3j3tw/to2xxgqHS8RgL++CiYaAAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:88:28:31:0e:ab:fb:ea:1c:92:3c:4e:7b:73:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Validity
Not Before: Apr 30 02:00:27 2025 GMT
Not After : May 1 02:00:27 2025 GMT
Subject: CN=2caa9bcbb0e2b5a083cf75d7f77373be4212c30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5c:d0:80:83:ab:3e:3a:06:1e:7c:96:44:a3:
b2:3e:cf:3c:d9:49:88:db:f6:58:2e:ae:cd:a6:90:
d0:3a:5b:74:b7:aa:09:c3:7d:0f:2a:d3:96:ca:52:
8d:4d:d2:0a:1c:ec:77:8c:0d:22:d1:cc:ec:42:d9:
35:9e:8c:f6:18:79:53:83:bb:62:b6:f7:62:eb:90:
25:ca:c0:16:3c:eb:14:9d:d5:96:03:19:19:11:62:
8c:4b:7e:7e:2f:88:e8:73:08:e7:70:92:f3:0c:52:
84:9b:90:a6:59:a0:4b:83:af:9c:f3:4c:e6:a6:b2:
43:7f:c0:88:ab:35:be:8d:06:06:5b:1c:44:70:0c:
ed:2e:7e:6d:d2:e5:de:c2:7d:85:cc:6c:7b:68:4b:
f1:22:d7:cf:90:1a:b8:90:66:19:81:5d:4e:13:a4:
dd:37:60:ab:9d:57:f8:6e:0c:95:ad:09:57:94:1f:
f5:47:bf:4b:8f:c7:b0:49:6d:3d:e3:ec:b4:5c:44:
06:f9:a6:54:2a:c0:db:b1:f2:c3:a6:88:ca:c6:51:
18:e4:8c:47:49:49:4c:f5:6c:71:99:80:85:e9:4f:
81:70:3f:f8:8e:87:45:38:a5:25:f8:9c:30:a0:56:
ac:23:e2:ca:72:f0:40:60:c1:ab:b2:f6:ef:38:cb:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AA:9B:CB:B0:E2:B5:A0:83:CF:75:D7:F7:73:73:BE:42:12:C3:0D
X509v3 Authority Key Identifier:
keyid:74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:2c:10:5d:96:60:4b:11:41:47:ff:24:6e:a0:f6:8b:6a:41:
c5:56:c5:23:11:24:de:d3:a8:4e:1f:80:18:5f:1f:7c:c4:50:
d7:01:55:83:7a:6d:ed:6c:02:fe:f8:e9:35:dd:b1:64:28:89:
a5:ee:01:bd:2a:57:ab:e0:43:3d:95:1d:22:6a:0c:a2:21:f2:
d4:9d:2e:9e:00:91:72:e9:37:d7:53:ee:c0:e6:18:9a:12:5c:
3e:fd:c3:41:90:23:66:c9:b9:05:fb:cb:42:cf:1d:cb:78:70:
02:0e:72:d3:89:a3:d4:be:20:85:91:bf:36:28:71:4f:35:60:
8c:bd:b2:59:ff:98:05:6a:5c:4b:e4:0f:64:03:87:6b:82:58:
81:83:c0:38:cf:1d:5d:91:73:31:e5:43:f2:4e:47:7d:36:07:
75:a2:d4:a3:bf:bc:45:e5:57:ec:84:ca:6a:f4:81:81:cf:96:
92:56:27:26:83:49:9a:79:e8:2f:72:c5:61:75:3b:fa:42:4b:
59:7a:a4:4c:15:10:35:65:d9:39:23:ea:fd:f1:5b:3c:e7:24:
33:2c:b8:11:b9:ad:c0:11:6f:36:98:ce:6a:e1:d4:ef:a6:77:
91:d7:39:8a:28:da:15:fb:e2:3b:2e:a4:59:89:b9:6f:b2:9e:
28:82:d1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:42:52 2025 by rpki-client