Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
File: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft (raw, json)
Hash identifier: K1QI9V1hIesIti+u2uVNWWi9FVr2D/ADuhW2RVGkYdY=
Subject key identifier: AF:E0:9F:67:EC:39:75:73:06:D4:AE:D1:44:40:EB:32:F1:12:1C:1A
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 019677FADF5A23D14E970FDAD5C89E960CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 16:00:51 +0000
Manifest this update: Sun 27 Apr 2025 16:00:51 +0000
Manifest next update: Mon 28 Apr 2025 16:00:51 +0000
Files and hashes: 1: 8lBoSilDtW0ItY1m1FNkzFR9g7g.roa (hash: eMaeIeeNpB0IKHLHfs7pADlpK9Gp8r9cF63rKmEO7/4=)
2: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl (hash: am+f4fJvR0exJyTmFjXUH7Bh48q8WB6CsHjRADJ4Deo=)
3: vijarIUYgiNYSjUBEIP4lkhLgNI.roa (hash: 2GV5AIMYaF2M+jJbsLpgLW6R69LfUwGZ1/GjUEqVegk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:df:5a:23:d1:4e:97:0f:da:d5:c8:9e:96:0c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: Apr 27 16:00:51 2025 GMT
Not After : Apr 28 16:00:51 2025 GMT
Subject: CN=afe09f67ec39757306d4aed14440eb32f1121c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:26:3f:8c:11:a5:bc:49:61:f4:25:90:81:
52:18:a2:19:b4:59:aa:f5:de:af:67:d4:5e:fb:3e:
65:78:63:11:3f:46:df:e8:52:69:7c:e5:be:c8:21:
54:e9:46:7c:52:6b:05:d7:6b:f9:72:86:c5:54:57:
86:b3:ad:3a:57:9b:2d:ce:4a:d9:27:e0:c8:d0:2f:
79:77:c9:8d:52:14:f0:6b:ec:a1:84:1b:ee:b2:b2:
ae:3e:dd:92:65:02:c0:95:1d:c5:14:2b:dd:8f:ed:
ec:c0:11:27:16:5a:1b:5a:f2:b0:e4:aa:c0:76:57:
dc:be:ed:eb:26:d4:47:72:2e:9e:c2:48:ae:39:a1:
30:cc:5f:c9:b2:3e:53:6c:b4:f6:84:06:43:75:00:
e2:74:33:60:86:df:6b:f5:36:f1:e7:94:7f:34:e4:
7e:ca:7b:20:41:4e:9a:32:16:fc:a8:8a:1b:3e:ac:
0e:03:9a:1d:1d:dc:53:db:4e:6d:e7:b1:f9:0b:67:
d5:09:15:1f:8e:f7:c1:43:23:a4:c5:18:91:ce:2a:
5c:95:7d:42:73:d4:51:7a:fa:9b:14:c4:29:a4:31:
4d:1d:7a:45:e4:1b:dc:9e:8e:08:e5:7d:97:2f:bc:
13:6f:63:79:c7:af:50:63:8c:d6:3d:45:a3:12:be:
5e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E0:9F:67:EC:39:75:73:06:D4:AE:D1:44:40:EB:32:F1:12:1C:1A
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:98:3f:bb:f1:01:a1:f4:99:8b:10:f8:3c:b1:d3:1d:a5:15:
29:4b:85:6d:9b:9f:6a:a5:7c:bb:c8:6f:d9:bf:d7:45:49:5f:
45:01:9e:85:28:51:fb:3a:5d:28:84:a0:c8:74:73:13:d0:2d:
d3:8e:ba:9a:7d:6f:e7:a3:7e:bb:75:57:25:c5:b2:17:11:fa:
1b:cd:fd:14:40:79:a9:c2:6a:97:09:8d:57:fe:0f:3c:5d:57:
e6:56:41:b1:16:d0:00:4d:d4:09:b5:b0:bd:0f:db:a5:61:ad:
ac:0c:57:7a:13:6c:f8:57:d4:23:ab:30:8c:94:ee:26:99:01:
1c:44:38:be:7f:d6:f8:94:ed:26:4d:43:cf:b0:dc:7d:bd:9d:
b1:90:6e:ea:c1:fb:9d:ad:71:50:0b:ec:d0:40:5a:56:f7:ca:
cb:34:fe:ef:a7:a1:f0:33:ef:03:1e:e6:08:9d:85:73:52:ce:
df:55:88:eb:2f:2f:8e:d5:07:16:4e:5b:49:0b:71:24:12:9a:
2c:b7:a6:c8:2a:57:2a:9d:b2:56:9e:9d:95:37:9c:11:0f:65:
b6:19:f2:15:51:26:81:18:e2:1b:ec:f1:cc:1c:46:b0:d3:4e:
5e:27:7c:08:83:6d:97:eb:5a:07:28:07:a7:02:58:d5:59:06:
cd:25:05:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:55:14 2025 by rpki-client