Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
File: dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json)
Hash identifier: WV5IJcd982dK+I3SEoPYq3AaBLZiscvrnE9adXKRV+0=
Subject key identifier: 61:E2:1A:F9:19:9C:D7:5D:F7:4A:3B:BD:99:9F:CA:BA:2D:0F:53:9A
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Certificate issuer: /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial: 01968548316867247CE3C7112757178B621F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
Manifest number: 04CF
Signing time: Wed 30 Apr 2025 06:00:23 +0000
Manifest this update: Wed 30 Apr 2025 06:00:23 +0000
Manifest next update: Thu 01 May 2025 06:00:23 +0000
Files and hashes: 1: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: QCkTJn8qD853QSYB+qYXlM5iUito5WVJSu92mctvG28=)
2: sxE--2M3-CEKutD7kc3XYk7SzFw.roa (hash: B/i9pHkpIcvuAMYO5sH2j+DVrgIPQA4C6/72qRik9/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:31:68:67:24:7c:e3:c7:11:27:57:17:8b:62:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Validity
Not Before: Apr 30 06:00:23 2025 GMT
Not After : May 1 06:00:23 2025 GMT
Subject: CN=61e21af9199cd75df74a3bbd999fcaba2d0f539a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9e:01:62:5c:dc:4f:09:49:57:bd:fd:76:ad:
7a:2b:73:4f:3e:95:2c:e8:57:f6:31:a9:1c:37:86:
a9:55:c8:fa:0b:00:60:83:07:7a:69:86:26:e0:e1:
67:0a:76:20:78:68:3b:99:fb:31:2f:3c:b4:8f:84:
06:09:43:f7:49:a4:3d:10:d1:54:29:fa:6d:54:dd:
28:c5:98:41:d8:c4:71:b2:20:52:72:71:b5:e9:94:
e9:dd:10:4f:65:95:12:ac:70:3b:44:01:ea:55:ca:
4a:49:a6:d4:35:32:4f:0b:0b:13:bd:ab:d7:39:31:
e3:88:d4:92:6f:2c:28:fa:68:e2:ac:96:58:ca:0c:
d3:32:e0:68:ba:85:13:df:fb:40:e4:ee:01:73:49:
4f:a0:44:02:85:8b:7d:52:23:cf:80:eb:13:a4:c0:
c6:fc:31:a1:34:fb:ae:a2:1c:65:59:ca:16:22:1d:
45:39:4b:2d:f8:22:eb:80:cb:2c:fc:2c:33:8c:ea:
99:fc:a5:7f:a4:8c:53:52:9c:8b:fd:2c:77:1f:be:
32:fa:79:e3:5d:0d:8b:67:16:9a:21:fb:b2:a9:73:
a9:fe:84:6e:f4:c6:0d:ae:5f:a7:fe:dc:3e:cb:74:
17:f1:47:1e:45:9f:5c:10:00:f1:8b:cb:2c:df:e7:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E2:1A:F9:19:9C:D7:5D:F7:4A:3B:BD:99:9F:CA:BA:2D:0F:53:9A
X509v3 Authority Key Identifier:
keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:76:42:b4:e0:e4:fd:53:de:50:5f:ba:db:3d:3c:99:40:85:
d3:cd:82:2c:68:ef:34:e8:63:b5:55:03:03:45:9b:42:ba:d3:
b8:a0:2b:53:f2:92:7d:4e:d0:f1:17:24:6d:0d:a1:91:90:a9:
ee:75:a8:84:67:d7:25:95:db:a0:1a:41:39:c6:9d:d1:3b:0b:
b8:d8:9e:44:dc:f2:b0:f7:df:42:b1:87:64:55:87:74:7d:55:
60:8c:3f:80:fc:4e:87:0c:d3:33:b4:00:65:bc:75:ce:60:47:
89:db:1b:de:6e:59:87:c2:07:14:f8:f0:ec:e5:62:d0:65:4f:
ab:a3:59:5c:8c:9c:6a:73:7f:25:c5:38:28:a4:60:16:8a:60:
54:0c:3b:60:29:37:95:d4:f9:30:7e:23:7b:b9:29:67:b1:cf:
9f:fd:cb:16:d8:12:3e:d8:1c:7d:03:3a:46:4d:b7:dd:04:16:
5d:ac:70:4f:19:f1:a8:c2:cc:b6:61:39:c4:33:b2:3e:92:c7:
ba:1d:7d:95:3d:b9:a8:d6:20:38:d5:d8:69:5d:86:2a:6e:fb:
6e:65:9f:8c:63:27:82:dd:23:45:a7:6a:98:59:d4:48:60:6c:
58:7b:02:6f:a9:99:73:0f:a9:0c:43:f3:01:a7:40:ac:f7:30:
2c:44:46:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:10:04 2025 by rpki-client