Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier: Sp9jPhFOrLWZiGnj2+HoDLVL8ciq53FmSkXKDJpRAHs=
Subject key identifier: 98:17:4C:0C:75:DF:FB:36:D3:79:D2:04:F5:F2:72:85:9D:B6:85:30
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 01967BA0967FFB0628DD27D1096BA62ABAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number: 1337
Signing time: Mon 28 Apr 2025 09:00:43 +0000
Manifest this update: Mon 28 Apr 2025 09:00:43 +0000
Manifest next update: Tue 29 Apr 2025 09:00:43 +0000
Files and hashes: 1: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: 7i2WQ4RbiD9u9t2pnqevbsWuhUsWE3mgXM0s8GBJhsg=)
2: ecFLrFSYazGNpMwtdUC2GTyB7Ls.roa (hash: 9V1D5AZ/eHVRt4YDKcmTOE8v9iNuXaOV/i0Ye/mdU9E=)
3: zeZfDF6FQVXfyXUfk9yRfeoJZIA.roa (hash: DtxqGawsrFVZx4HNzS+S5CsdD6flwYPGqAxKv36rkJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:96:7f:fb:06:28:dd:27:d1:09:6b:a6:2a:ba:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Apr 28 09:00:43 2025 GMT
Not After : Apr 29 09:00:43 2025 GMT
Subject: CN=98174c0c75dffb36d379d204f5f272859db68530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:e2:c1:5c:f2:61:a4:d2:31:f3:61:d4:c1:
f9:63:a8:0b:fd:f0:00:8b:6b:48:2b:1d:e1:ab:c9:
1c:0a:66:1d:ec:50:5f:5d:89:95:e1:1c:3d:33:52:
86:47:67:d6:c2:8f:2a:d0:21:7e:e3:d3:59:f6:db:
b2:85:d0:e1:3a:b7:2e:6c:d0:ee:d5:ab:d6:fc:56:
25:f8:aa:1d:4d:58:1e:8b:62:8e:41:f7:1a:1b:34:
55:81:0a:ec:04:03:92:ad:f2:1a:11:24:2c:88:37:
e8:22:9e:87:3e:e6:72:ce:34:f2:d5:f6:37:df:ed:
1c:82:87:f2:df:24:14:06:76:46:97:a6:b8:f9:2f:
97:ee:f2:42:f3:c6:72:f3:1d:ac:c6:a5:84:87:fc:
fd:de:a8:55:7c:2b:4b:53:90:24:6c:a7:3c:3f:0f:
86:21:21:17:e0:a9:2f:c7:65:c5:1b:5b:8d:ee:88:
70:21:bd:92:95:7c:ed:90:f9:5b:3d:66:61:c6:35:
89:5c:af:5e:47:e4:67:43:46:51:4c:05:65:23:b9:
8b:c8:95:72:ef:24:55:05:b5:26:c3:d3:7f:8d:91:
72:b7:ec:40:3f:8b:d0:4b:a4:bd:3a:7a:31:c0:64:
1e:f7:36:3d:93:08:ea:c2:45:87:94:bb:4f:b1:be:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:17:4C:0C:75:DF:FB:36:D3:79:D2:04:F5:F2:72:85:9D:B6:85:30
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7e:c2:8e:79:d5:ae:0c:dd:89:77:00:a4:1b:2b:0a:2f:2f:
eb:9a:95:ae:54:e1:f4:1b:63:1c:b2:8b:86:4c:f3:21:4e:31:
f9:df:f5:61:19:bd:b5:7e:29:fb:98:4a:05:c0:f8:12:70:96:
b5:39:4e:55:7d:61:27:a9:99:9b:f0:30:83:9a:99:af:b8:12:
73:1c:a2:0c:bc:c3:74:fc:08:8b:82:31:77:bf:04:34:87:36:
bc:e8:35:93:32:93:1c:ed:1c:f8:de:ba:87:a7:b7:44:b4:73:
bc:6a:fa:64:e5:53:95:a0:88:14:7b:f4:51:45:ce:f6:af:0f:
06:c9:17:74:9c:8d:90:e4:8f:56:8a:a1:61:fa:80:00:d8:1f:
cc:5b:cb:90:c3:6e:b4:bf:57:9c:f1:18:a7:43:e5:80:8a:4c:
96:11:67:ce:cf:71:be:27:6b:a4:c7:30:b1:ed:8b:3c:92:31:
54:a3:48:7f:48:6b:a5:66:20:b6:fe:3c:22:64:2a:32:18:15:
05:58:b4:92:2f:e6:8a:60:9e:12:3c:d3:b5:de:6b:98:b2:cc:
96:5c:51:82:98:79:aa:7d:62:f5:d0:f5:2b:8c:d2:28:3d:f6:
e8:cb:1d:54:08:95:82:80:c2:04:ce:03:7f:68:7d:90:83:74:
e6:6b:3a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:19:05 2025 by rpki-client