Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
File: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json)
Hash identifier: lonJHbX8tSDEKFyTorhUwREYrzlEylxt0yMqMct0Cy8=
Subject key identifier: 9E:86:F9:3C:F1:10:B3:BF:19:F2:4F:3F:50:67:5D:D0:AC:65:90:EF
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial: 01967FB3E28B277A5D33B7AE2D615D2C14CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 04:00:17 +0000
Manifest this update: Tue 29 Apr 2025 04:00:17 +0000
Manifest next update: Wed 30 Apr 2025 04:00:17 +0000
Files and hashes: 1: TsaeWiaMsP1j_z_xMCDhi5soRx0.roa (hash: cFv4JeYxc6KlGhF0oX6eBMNahY8RJkA5Wg3CLEjEyhU=)
2: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: 3d7YPs/3nQ2DVTTDC315et/Ui1+CrsS6xEAEIN6bG7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b3:e2:8b:27:7a:5d:33:b7:ae:2d:61:5d:2c:14:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Validity
Not Before: Apr 29 04:00:17 2025 GMT
Not After : Apr 30 04:00:17 2025 GMT
Subject: CN=9e86f93cf110b3bf19f24f3f50675dd0ac6590ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:51:87:5f:3e:30:ed:7b:69:b2:2b:c2:74:
64:a9:1a:4e:48:88:fe:61:ea:87:4c:35:5e:77:23:
e1:2d:65:50:22:fc:60:b4:11:d3:80:69:97:ba:3a:
87:9c:b4:f6:19:60:da:81:c6:c6:af:dd:8a:2f:9b:
e9:73:11:ed:38:14:68:87:5d:90:83:60:cb:7f:6d:
49:ab:d2:d1:af:f5:6f:d1:7e:20:10:23:07:56:2f:
31:e9:68:8b:8f:0e:38:c0:ee:7a:fb:86:3c:56:a7:
fa:c0:bc:0f:9e:87:32:6e:b4:97:ca:53:41:60:81:
75:28:24:76:74:53:bc:f2:d2:78:fd:9d:70:3c:ee:
45:ed:46:27:c9:e7:1f:1f:2f:f4:b9:3e:c6:db:57:
59:5d:21:c1:03:28:d0:72:f0:27:5d:36:73:54:8f:
20:5b:90:e0:a0:d9:6e:e6:6f:32:8e:4a:49:a9:d0:
8f:e2:da:be:09:00:d6:ca:fa:60:58:ac:be:97:92:
88:80:f3:75:0a:88:2d:df:20:ae:8a:52:3d:c0:55:
98:29:34:47:d5:51:8a:a2:fb:97:c1:4a:a0:7b:ca:
78:f6:0a:f9:79:e9:56:2d:bc:9f:b2:31:b1:61:e6:
3f:7a:5c:47:0f:a8:55:a8:e4:10:8f:d5:94:ad:e9:
97:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:86:F9:3C:F1:10:B3:BF:19:F2:4F:3F:50:67:5D:D0:AC:65:90:EF
X509v3 Authority Key Identifier:
keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f9:99:dc:cc:6d:ed:07:de:e7:12:1e:fa:4d:39:bf:db:b0:
1c:04:ab:53:97:f8:90:91:1e:c6:d3:b9:58:9b:e0:41:15:a5:
99:2c:c3:5b:ba:a3:00:37:80:41:f8:a0:0c:0f:55:4b:7f:d5:
9c:07:b4:ad:0f:f3:49:23:07:7a:91:19:f1:4c:59:db:a5:a2:
01:d7:53:bc:e2:3b:e4:44:5a:34:48:ba:3b:0a:20:47:c8:d2:
15:f9:f4:63:2d:34:4c:f2:81:c9:e7:74:8e:08:70:15:15:8b:
fa:f6:fd:d5:cd:e8:0d:0f:77:68:9f:2a:29:21:c1:9b:f1:55:
04:58:d0:dc:a1:dc:70:4d:30:d1:70:8f:56:f5:ac:8b:56:89:
f6:8f:7e:c6:60:d0:8c:83:8f:69:a6:ee:2f:84:01:1a:f9:51:
57:5a:25:e1:a1:88:3b:c5:75:4c:7b:93:09:80:3a:64:7a:ca:
54:f7:57:49:d7:72:e8:6f:ca:84:2c:11:a3:b4:f7:a8:21:38:
e7:e1:b1:32:b6:3e:a7:08:5b:fc:d3:9b:50:30:d5:ba:ea:b7:
f3:ce:41:55:22:27:00:1a:42:c7:8c:68:8b:f4:4b:71:c7:0e:
b9:1a:9b:4d:70:e2:95:fb:5a:62:d5:48:1f:e9:a3:96:6e:a3:
4e:21:95:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:43 2025 by rpki-client