Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
File: dAThbzM9iWUMZhOsbJXTSNxLeVA.mft (raw, json)
Hash identifier: 5dmHjk0kv8+s3RqEWYWoZIY58KsishPfVogRIjIZp7k=
Subject key identifier: B5:BF:97:42:E4:E0:27:0F:B9:DA:05:59:92:EB:DE:41:98:B3:90:A0
Authority key identifier: 74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
Certificate issuer: /CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Certificate serial: 0196797B357D6095A002E7668B7C6B27FD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
Manifest number: 9A
Signing time: Sun 27 Apr 2025 23:00:39 +0000
Manifest this update: Sun 27 Apr 2025 23:00:39 +0000
Manifest next update: Mon 28 Apr 2025 23:00:39 +0000
Files and hashes: 1: USYf1bw7MHizcISPSt3QDNx57-c.roa (hash: hlppK+U0LprItNasoWls7BUhYE5DrUbPlgUCcoN0Ou8=)
2: dAThbzM9iWUMZhOsbJXTSNxLeVA.crl (hash: kX66F77t+ygrIqU+XI41gkqlqjjQlNzvYONIQy6xKE4=)
3: mPel-Ky4KTw-yipTpTX6XFn1X6g.roa (hash: N5pE0c5lXs23W7feBcxuowFluJhlp7T2zf0Dpvw7muA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:35:7d:60:95:a0:02:e7:66:8b:7c:6b:27:fd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Validity
Not Before: Apr 27 23:00:39 2025 GMT
Not After : Apr 28 23:00:39 2025 GMT
Subject: CN=b5bf9742e4e0270fb9da055992ebde4198b390a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:5b:b4:4f:bf:79:44:62:0e:b6:0a:86:f9:
a7:7b:42:04:66:16:a5:19:5f:78:68:c9:0c:08:69:
59:6a:18:23:06:a5:4e:a9:2a:c0:2f:ab:9f:62:bd:
99:9f:b4:9d:a7:2c:25:06:77:60:82:98:5a:59:29:
c8:e9:cb:2d:3a:9f:b1:84:9f:5c:72:b7:c3:3b:99:
e0:9e:db:03:88:87:ea:5d:d1:b1:10:ca:ea:1f:a6:
64:92:ed:24:a5:15:63:33:8b:f8:e6:4c:59:f9:83:
73:2f:44:31:09:db:a9:90:a3:1f:23:85:77:bf:5c:
2c:f1:9b:2d:90:c1:f5:71:24:b4:2b:95:6e:d8:05:
32:f8:f2:e7:c2:8a:07:41:46:38:e6:43:3f:a6:aa:
15:c0:a4:f9:50:d5:40:11:63:57:33:12:8e:d9:2b:
6c:dc:59:28:ee:a6:89:88:2d:34:e5:bf:24:d6:da:
23:df:5c:de:e0:c1:b3:ef:fd:38:fc:23:82:fd:98:
b5:6f:ab:e3:ef:33:6c:4b:1f:54:82:1f:07:0f:87:
83:a9:7b:26:1c:58:5c:8e:04:d4:00:b2:2b:e7:35:
9f:9c:b0:1a:25:60:1a:7f:42:c5:c3:0a:7a:c2:a5:
e7:7a:e5:bd:f2:01:e7:34:3f:ea:0c:29:cd:b9:b8:
de:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BF:97:42:E4:E0:27:0F:B9:DA:05:59:92:EB:DE:41:98:B3:90:A0
X509v3 Authority Key Identifier:
keyid:74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2d:24:0b:dd:59:15:54:f1:16:fa:dd:e7:9a:76:67:75:4b:
88:4a:31:e6:27:1c:e5:22:c1:9b:7d:4e:96:94:70:84:0a:c3:
03:ce:a8:6e:d9:c3:4d:cd:58:53:70:6c:32:f1:b4:da:7d:69:
9b:c1:b6:2b:ea:69:66:b3:4f:06:46:d3:c9:82:a6:78:a7:9c:
ac:93:4a:c0:f2:a8:3b:3d:6d:30:6b:bf:c2:44:17:a0:38:be:
59:eb:b5:3c:c3:b4:e2:a3:ee:a5:b3:0d:11:96:aa:fe:27:22:
5c:08:60:e0:4b:fb:e4:1e:12:69:77:12:69:02:bb:eb:d9:21:
a3:60:fd:4c:7e:7f:4a:61:ad:b8:41:2c:05:60:b2:0d:2d:06:
96:fb:44:8f:01:d0:0b:54:4c:5d:a6:57:c4:3c:4a:23:88:ca:
77:98:b4:04:fe:90:17:8c:0b:40:32:29:0e:5c:ae:66:34:bc:
ac:d6:77:b4:74:ef:f1:b1:4d:36:19:a8:f0:77:ee:62:11:d0:
d9:70:c7:25:36:8e:7b:37:69:e8:72:c8:27:b9:21:9c:1c:1b:
80:1d:1f:15:b1:d3:85:f9:48:f1:99:56:4b:49:33:cc:92:41:
e3:de:88:67:85:99:6f:7e:0d:bf:37:34:4f:63:c2:79:a8:fa:
c3:a2:ae:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:32:54 2025 by rpki-client