Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File: d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier: vSL+aJRNkLsJL8BBHSIZrw48rL4PHaQJR9iWHXlgE1o=
Subject key identifier: 2B:5F:91:DB:5F:9B:3C:6C:CD:09:46:68:7D:03:6A:F3:7E:8F:C4:5A
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial: 01965A26F5214168B64841E4E5336C0AC793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number: 0556
Signing time: Mon 21 Apr 2025 21:00:24 +0000
Manifest this update: Mon 21 Apr 2025 21:00:24 +0000
Manifest next update: Tue 22 Apr 2025 21:00:24 +0000
Files and hashes: 1: Fio9S4kkM_6MY_PyvY4nnlbZSX0.roa (hash: MLkm/zb7dfsD7k0W1D+pAVDUongRrbvCkAFDtBq/FSI=)
2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: W+dZx1AOTUN4qqrVyI3kjjGPspTIxCPGeLZVpx+rDdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:f5:21:41:68:b6:48:41:e4:e5:33:6c:0a:c7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Validity
Not Before: Apr 21 21:00:24 2025 GMT
Not After : Apr 22 21:00:24 2025 GMT
Subject: CN=2b5f91db5f9b3c6ccd0946687d036af37e8fc45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:49:6a:f1:1f:19:2d:83:b1:2e:dd:a9:b8:
70:68:1c:a1:a0:c7:6c:54:16:d3:b8:54:4e:d5:72:
78:e9:e9:fb:ce:17:1f:62:e4:54:d9:62:64:d7:06:
4c:72:74:56:e0:15:97:ed:4e:25:18:8d:1d:34:3b:
1d:f5:bb:f8:8a:23:cc:a4:b4:87:ba:cd:b2:c6:28:
9f:35:25:94:0b:a0:f7:77:39:b8:1b:bd:71:11:f2:
f4:db:53:47:80:10:82:4b:0e:f8:cb:78:f7:53:df:
a4:ab:9c:1e:2e:fc:d2:5e:cd:f4:ae:15:b8:a1:3d:
e6:b5:63:27:05:10:3d:ca:2d:40:48:8f:47:1e:9c:
56:92:b3:a0:55:90:b7:9b:d4:14:2c:39:7e:d8:bb:
f6:31:06:20:17:9e:f5:22:38:76:7e:26:31:93:30:
a2:81:64:5a:27:bf:fe:0f:41:21:65:8b:92:6c:ca:
6f:fa:6a:6e:2a:cf:68:86:0b:ea:d4:3a:5c:fb:fc:
87:c2:4d:49:de:d5:0c:3a:8f:42:3f:da:27:29:78:
ec:33:0c:6e:77:67:ae:a4:a7:d3:08:5d:53:8c:e2:
fa:11:37:e5:94:c8:be:78:dc:ca:5d:0a:95:83:61:
ab:9d:89:87:08:22:41:52:24:ba:4c:d0:ad:f0:dd:
fc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5F:91:DB:5F:9B:3C:6C:CD:09:46:68:7D:03:6A:F3:7E:8F:C4:5A
X509v3 Authority Key Identifier:
keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:42:87:a4:04:8e:ce:4f:9d:91:77:b0:e4:f1:24:2c:7e:b5:
16:41:13:9e:7e:06:60:c1:b1:71:63:e9:28:65:4d:25:48:5b:
65:1b:75:39:b2:ef:39:d1:dc:c4:ac:86:9a:e4:d7:af:38:1a:
55:5b:1b:1c:89:5e:45:72:8f:f9:7a:68:81:5a:39:47:39:3b:
46:9d:0b:a2:61:24:c9:60:27:77:1f:c1:76:67:cb:04:8b:5f:
ac:11:dd:9a:b8:31:6d:44:11:05:46:94:f1:51:b1:72:7a:ef:
3d:a5:8b:b4:92:dd:fb:b5:c4:6c:55:86:37:c4:44:b7:d1:fa:
43:e3:74:b4:f1:0d:09:8e:59:0c:c8:41:02:71:e0:98:65:d3:
9d:39:97:33:dd:69:a4:85:34:1a:68:fe:50:ab:89:8c:58:04:
4d:60:5e:aa:e7:40:6c:0b:ae:90:fa:76:aa:a9:c9:b1:ef:48:
7a:a1:9d:14:d1:f5:79:a0:17:99:3b:8d:f8:d8:5d:6e:51:bb:
e0:ee:a8:7d:10:24:9b:d6:c0:7f:17:61:a3:f0:d1:0b:76:6c:
bd:97:43:dd:17:8c:12:dd:ef:56:ff:25:b0:0f:78:c5:25:cc:
5f:d1:de:35:08:16:47:b4:04:f5:0c:b9:a6:69:db:cf:3b:60:
96:b0:aa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:30 2025 by rpki-client