Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
File: dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json)
Hash identifier: /5LYwlRixgzUes+vrgsk+kmOJ6jIQS0QWc4Pw9XeAJ4=
Subject key identifier: 6D:28:F9:DE:B9:94:78:DB:C1:68:29:95:4C:40:79:BD:50:B6:C6:71
Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
Certificate issuer: /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Certificate serial: 0196753045CAC805DCBEBEE6D102C7C1811F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
Manifest number: 14A3
Signing time: Sun 27 Apr 2025 03:00:19 +0000
Manifest this update: Sun 27 Apr 2025 03:00:19 +0000
Manifest next update: Mon 28 Apr 2025 03:00:19 +0000
Files and hashes: 1: SmenFq2eO29wVInO8xQQnEozH4M.roa (hash: NLqfCsW+19ubwmofae6n/UEN1RfOh4ZI/s4/YAFk4k4=)
2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: eTkXIBGrpIi5fBjUmDFJyVRwHbmWY6gECWHsNPMwus4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:45:ca:c8:05:dc:be:be:e6:d1:02:c7:c1:81:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Validity
Not Before: Apr 27 03:00:19 2025 GMT
Not After : Apr 28 03:00:19 2025 GMT
Subject: CN=6d28f9deb99478dbc16829954c4079bd50b6c671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:7b:02:a9:bd:bd:7a:97:ee:c7:f1:8b:22:
c3:9a:66:6a:c7:2e:be:c8:2d:97:2b:e0:2b:95:88:
57:bc:4d:ad:8c:09:2e:de:b4:56:97:c5:51:0e:4c:
4b:c7:cf:e6:c8:bf:db:bc:f4:54:5d:c3:95:ea:b8:
d5:c5:02:16:ae:4b:83:c7:95:2b:5a:cc:6e:90:08:
3b:8a:a5:b1:d2:84:32:30:56:82:1e:49:e6:38:b1:
aa:22:8e:61:87:8b:c2:98:fe:a6:88:68:2e:99:fb:
42:69:40:95:b4:60:67:b7:ba:2a:c2:cb:d5:f5:9f:
dd:a8:9f:78:5e:79:de:75:a3:5f:d1:57:13:40:59:
ff:c9:49:50:be:df:81:c7:7a:8c:d0:18:84:e1:fd:
1e:6b:b0:51:46:c8:93:c7:4e:29:9f:34:b5:af:5b:
b7:7a:98:6d:aa:30:cd:88:04:85:55:72:7f:b8:9a:
2d:83:33:44:27:de:7f:87:1a:ff:98:27:c1:45:1e:
15:1f:10:2a:95:79:fe:b4:1a:31:16:33:87:5d:58:
a8:16:7d:30:17:c6:3e:4e:f4:4a:10:94:e2:de:4e:
b0:25:b0:96:4d:21:8e:45:59:28:3a:a2:e4:5a:c0:
f6:c6:33:b6:42:57:8e:c5:d4:40:d7:37:36:9a:b2:
9a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:28:F9:DE:B9:94:78:DB:C1:68:29:95:4C:40:79:BD:50:B6:C6:71
X509v3 Authority Key Identifier:
keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2b:5e:62:b9:38:4b:b5:c7:8f:99:ca:8e:0f:0e:bf:67:78:
e9:d6:66:a8:dd:9e:72:4e:9a:7b:46:1d:59:ec:a7:50:bb:6a:
4d:de:46:35:ba:93:d4:84:85:c0:bd:a8:62:f5:38:c9:9e:83:
09:bc:8a:92:95:b7:68:e4:21:3a:51:ec:30:b9:d5:ce:a6:0b:
02:18:41:e3:82:a8:b5:04:68:22:23:87:24:ba:79:ff:40:b3:
17:f7:e0:15:be:a0:78:b4:43:e3:54:32:22:dc:3d:d8:33:48:
ed:a6:e3:1d:72:e0:7e:88:a0:9d:bf:a2:e8:ac:13:41:b8:c2:
23:45:7f:c0:6f:cf:58:a8:2b:2a:8b:17:d9:49:89:d4:c8:10:
c7:59:91:07:e1:47:85:a6:e8:dd:ab:b0:60:3a:80:6c:45:bc:
c7:4f:76:ba:f3:3a:f8:71:a0:6c:cb:d3:97:bb:02:bc:42:42:
82:5d:73:2d:99:c1:c7:12:4c:23:44:a1:6a:15:cc:10:fb:39:
9f:df:2d:67:13:d2:86:33:4d:0b:77:b4:63:e7:89:bf:bc:ec:
21:4c:3c:2a:76:16:6b:1a:59:44:7f:06:5e:31:cb:9b:0c:11:
35:67:c1:ed:da:f9:3e:c5:eb:6c:e2:c2:c5:28:25:4a:da:18:
94:8f:46:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:03 2025 by rpki-client