Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: F/DKT8beV44spV/GtOKDLyJIDXWZsng6RBPq3Sp3oqU=
Subject key identifier: 61:FE:8D:7A:76:94:B6:2E:C3:23:41:0A:A2:1B:21:CC:A1:AC:5D:44
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 019686C896AFE28BB9C2104B74DBACBAF3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 1516
Signing time: Wed 30 Apr 2025 13:00:14 +0000
Manifest this update: Wed 30 Apr 2025 13:00:14 +0000
Manifest next update: Thu 01 May 2025 13:00:14 +0000
Files and hashes: 1: _2TO4dSOjfvwTixfDBf-WBuIl0o.roa (hash: RPjvUg/mlm5LB8eSfOAwiB9MoMFdNTXRZHFg7kwXImU=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: 08sQpSQfA+YZZqeKC0Di3BpRYSOmQn27x5P0xwXXWBU=)
3: f516EGaO9yNnpKCtINgDdW37z6Y.roa (hash: ED6BLlxCP1AdH6cMJc87FGQDnI7Gyi9C1L6MTbKzt54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:96:af:e2:8b:b9:c2:10:4b:74:db:ac:ba:f3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Apr 30 13:00:14 2025 GMT
Not After : May 1 13:00:14 2025 GMT
Subject: CN=61fe8d7a7694b62ec323410aa21b21cca1ac5d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:68:42:54:30:fe:a7:ba:79:7f:48:41:1f:
78:8c:04:e9:36:65:68:36:b0:b0:f9:bf:74:63:e4:
5c:0b:78:ea:4f:91:48:27:25:d6:6f:dc:39:30:be:
89:c6:ca:08:01:4b:eb:d2:a3:fb:96:d5:01:2d:20:
b3:6c:ec:09:55:69:b9:3f:f9:58:a1:86:e8:d5:4c:
f9:10:e2:9c:ec:ed:cc:f7:b1:f0:01:f1:c5:9e:78:
f3:fe:7c:3b:98:75:7a:73:7d:21:c5:ee:15:7e:4a:
84:65:6d:7c:b1:e1:b0:93:70:91:65:0a:fc:56:9d:
a4:d3:9e:19:a5:0b:b5:d8:f1:06:d8:b9:22:14:ff:
2b:2f:ea:48:63:a9:d9:6f:e5:cf:9d:02:09:e8:57:
a2:75:d9:fc:6b:0d:9f:dc:5a:67:a6:ed:e7:fc:7a:
3c:6d:54:f4:fe:bf:fb:98:31:33:1b:03:cf:08:9c:
08:ab:19:a2:6c:df:2b:dd:11:ab:3c:e8:fd:7d:85:
e5:82:75:82:8f:8e:fd:59:8a:da:42:96:da:f0:7f:
a4:71:a7:7c:b2:fd:b6:b6:b6:77:e8:bc:fa:26:29:
b8:39:62:a7:41:61:7c:83:0b:98:90:d8:a0:fc:df:
15:57:b2:cc:a3:b1:91:d9:10:60:b0:6b:de:3a:f3:
52:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FE:8D:7A:76:94:B6:2E:C3:23:41:0A:A2:1B:21:CC:A1:AC:5D:44
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2c:92:b2:dc:1b:7c:ec:74:8e:fc:3a:c5:99:23:ae:23:33:
aa:4f:a4:c6:5a:f1:c9:38:87:69:96:7b:16:6b:91:8a:56:c7:
a8:78:0e:19:f8:57:bb:55:68:6f:31:ce:14:95:c1:64:27:34:
a9:b9:06:5d:4e:1a:97:54:03:d0:bf:33:46:56:2c:3c:ae:af:
bb:cf:f0:b9:36:3a:e2:65:d3:fa:8f:2d:e6:bc:17:09:3e:3e:
82:de:a3:40:32:1a:0e:4a:05:57:df:9b:a4:4b:02:fe:3c:ba:
2c:dd:54:a4:90:ba:5b:b6:9f:74:89:72:70:15:a9:41:0c:23:
7c:ce:83:08:5a:21:b4:b5:b4:ae:56:8d:d0:ae:75:dd:c8:b3:
b3:55:0e:2b:03:ec:11:1a:a2:9d:dc:22:3b:01:ff:2f:9d:26:
e3:01:26:cc:9b:b2:63:44:f4:5b:31:bc:27:3a:35:1f:73:b4:
60:ae:4f:cf:14:2e:f3:e2:56:c3:ee:96:d9:e6:f6:23:45:51:
46:61:03:b3:68:32:90:c8:e5:00:08:c0:f1:ce:6a:21:80:19:
24:ff:06:17:de:93:84:d2:28:63:f6:99:24:51:f2:0f:74:b7:
81:b0:d6:90:ac:1d:7b:d1:aa:a1:15:93:41:c1:d0:b6:7c:3d:
e9:77:81:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:23 2025 by rpki-client