Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File: dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier: FYBXNxRU30BrIRLMKCS3ioiFXaUdC8Ub5vtYiBkCzII=
Subject key identifier: 00:01:38:46:65:8B:98:4F:FE:F2:C0:F6:E5:4D:A3:4B:0B:17:30:BB
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial: 019684A342122CDD4749545A77BE9F399CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number: 05C8
Signing time: Wed 30 Apr 2025 03:00:13 +0000
Manifest this update: Wed 30 Apr 2025 03:00:13 +0000
Manifest next update: Thu 01 May 2025 03:00:13 +0000
Files and hashes: 1: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: /q+QCzH2uWtjgIWrw0xkjT6nH5bRQK3m53IAR98Z3NA=)
2: wmFwOwWe4TE9uLkEByUtzshEopU.roa (hash: QBlI2HpuFwgzwXYHTq+pMuExi7xAAtXFZ+n0JdzIy8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:42:12:2c:dd:47:49:54:5a:77:be:9f:39:9c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Validity
Not Before: Apr 30 03:00:13 2025 GMT
Not After : May 1 03:00:13 2025 GMT
Subject: CN=00013846658b984ffef2c0f6e54da34b0b1730bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:5b:8a:e0:e0:b1:f4:81:91:d3:9a:e0:13:
57:21:c4:48:15:82:8c:5a:f6:f5:e6:78:7e:29:73:
8f:66:9e:0b:b1:de:73:04:d6:4b:16:f1:38:bb:12:
3b:1f:0a:a2:dd:a7:76:fd:aa:35:e7:5f:1d:5b:a1:
82:bd:0c:07:b3:e9:ac:a7:ae:3e:de:da:bb:dd:26:
a3:34:7f:24:00:01:c6:3b:85:31:f8:f4:5c:df:e3:
d1:74:97:2d:6b:c8:b0:6a:85:7e:a5:66:88:e0:9c:
40:da:3b:fd:ec:42:fd:91:60:54:1e:60:74:64:ce:
ed:50:3e:c6:cd:ce:7d:2c:d8:b6:2e:78:23:ec:5f:
ec:e8:5f:87:71:ba:ef:e7:29:d4:8a:4d:9e:09:26:
b1:95:00:68:eb:fd:0d:a0:26:04:d2:8e:0e:41:db:
d3:fb:58:1e:ba:d6:e4:57:8a:af:25:be:c8:0a:32:
42:fa:41:9b:8c:26:82:a9:08:ee:cd:2c:30:90:33:
42:a1:f4:e2:45:35:15:76:46:4c:8d:dc:bc:23:02:
e1:16:c5:12:f0:f1:08:51:16:62:13:58:a8:93:61:
8e:d9:3b:ca:62:ac:f1:84:bc:f1:22:5a:59:ef:cf:
25:e1:3a:3d:c4:8d:28:61:76:e5:1c:6b:33:f7:5e:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:01:38:46:65:8B:98:4F:FE:F2:C0:F6:E5:4D:A3:4B:0B:17:30:BB
X509v3 Authority Key Identifier:
keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:af:d0:9b:c6:b0:bc:64:e5:b4:a9:11:ad:09:0e:d8:8a:2d:
3e:d9:7d:3b:39:a0:fc:bc:59:32:b4:0f:31:ef:1b:bc:af:43:
5a:a0:ce:a0:ef:17:15:c4:1f:5f:e0:38:b0:08:9e:5a:7f:17:
12:ca:28:6c:f7:fa:ec:a7:74:2b:d4:2c:19:0c:f9:c9:25:8f:
64:7a:5e:17:9a:42:01:01:ef:eb:e0:b0:b8:ba:d7:70:00:87:
92:73:59:ad:42:9f:52:b8:f8:03:0e:65:bf:6f:5f:6a:f9:c0:
ba:52:15:94:a9:55:7c:08:1e:7b:ad:6e:c6:61:4d:95:04:54:
27:f3:56:4f:7a:79:03:7b:b0:62:e8:95:e8:7e:31:d8:2d:8b:
6b:fb:13:25:e6:59:c2:46:16:16:e1:c0:33:80:59:08:19:9c:
f5:e9:be:f8:57:4a:32:91:85:bb:a7:72:d9:74:75:b7:e5:71:
5d:96:50:b8:1e:f7:00:1f:fe:9f:d4:06:b6:b5:bc:65:e8:77:
db:f2:58:d1:9b:ef:39:79:63:a4:14:6b:3f:bf:44:fc:8a:2e:
c1:61:e1:53:5f:4e:3f:ee:95:08:df:24:7e:56:67:4c:b7:eb:
a3:02:13:bb:45:97:66:14:06:83:75:eb:08:00:31:c0:61:53:
6c:07:4c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:33:43 2025 by rpki-client