Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
File: d73XXy78JE-GoyGxUOYpNqFAKds.mft (raw, json)
Hash identifier: MS/3YpNxWFBkaQfSM5Yf5VHzkBL7gWX7DUOqVpTEwzc=
Subject key identifier: DF:A0:DD:9D:E3:C7:85:BB:E5:F3:61:8C:AF:DB:18:22:13:13:F3:BD
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Certificate issuer: /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial: 01965BDE896F2BA1A2215C903F354CB5AADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
Manifest number: 1501
Signing time: Tue 22 Apr 2025 05:00:32 +0000
Manifest this update: Tue 22 Apr 2025 05:00:32 +0000
Manifest next update: Wed 23 Apr 2025 05:00:32 +0000
Files and hashes: 1: GAo7ZduAV60PzhY9o_GDH21ot64.roa (hash: L65aKQ/diSXQMwJ1Sh2UT0BCtlwKc371uG33rtI8OVw=)
2: YnJ26bGDXX1huMvr8EfEnzAcB78.roa (hash: k0PljRyemCupKRxSVAifU5D7QGL/CooV0WFr/NbUXsk=)
3: d73XXy78JE-GoyGxUOYpNqFAKds.crl (hash: SY3jN3rU1QUq4tjn/z4PdZ8KHpaignZ3lQ9tTjZxTZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:89:6f:2b:a1:a2:21:5c:90:3f:35:4c:b5:aa:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
Validity
Not Before: Apr 22 05:00:32 2025 GMT
Not After : Apr 23 05:00:32 2025 GMT
Subject: CN=dfa0dd9de3c785bbe5f3618cafdb18221313f3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:76:14:f7:b2:fc:bf:a2:64:c5:17:5f:cc:
ef:64:69:b9:fb:4d:fd:c1:9d:5b:3f:04:5f:70:ff:
eb:14:99:dd:ce:5d:83:f9:bc:bc:7e:30:98:23:2c:
0a:83:eb:99:6a:be:d5:4f:8f:7e:10:4b:8b:f6:78:
21:0d:39:23:0b:08:b1:bc:c7:26:cd:b9:55:80:0f:
08:4c:55:ca:03:9e:d2:c9:e5:85:ef:62:3f:10:e5:
71:1a:42:20:bf:41:c7:f7:d7:66:7f:0a:53:51:48:
54:17:4e:4a:0f:9c:a6:61:e7:59:41:37:21:77:c8:
db:4b:8c:c7:31:10:5b:ca:f8:10:0a:2c:3c:a4:aa:
93:a8:18:15:19:32:6d:20:8d:39:a3:a5:bb:25:97:
da:95:f1:4a:4c:a2:8e:09:7d:e0:eb:b6:6c:31:3d:
27:99:24:ec:f9:d6:28:b0:b0:7a:94:72:9d:f0:ee:
1d:c8:e9:4c:e8:5c:e5:06:8c:50:7c:89:b1:eb:07:
9b:81:17:77:24:c1:28:f4:39:88:87:c2:3b:91:c6:
44:59:31:b2:b7:7a:e0:20:c7:40:85:ff:8b:99:4d:
8e:7b:c3:f9:e2:17:33:08:55:cc:0a:26:bd:ca:4d:
b6:af:4a:3e:2c:cb:de:64:6e:f6:35:64:00:5f:ef:
40:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A0:DD:9D:E3:C7:85:BB:E5:F3:61:8C:AF:DB:18:22:13:13:F3:BD
X509v3 Authority Key Identifier:
keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:82:f1:e8:00:06:ac:df:03:fd:9c:a5:f2:da:f6:f3:71:ff:
d0:05:0c:39:32:25:94:48:28:9d:86:03:28:7d:c4:f2:9a:4a:
9a:0b:fb:09:68:81:8b:75:e0:cb:02:66:a3:d3:32:bb:50:55:
30:d0:a2:a1:b1:dd:cc:bb:31:7a:64:ce:13:0f:c7:a6:fe:1b:
6c:8e:6e:84:e9:92:3e:a9:65:8b:93:36:41:5d:37:bf:4b:98:
45:7d:03:d3:d5:20:d9:f9:3f:83:62:29:1a:c8:1a:4a:28:54:
9d:d3:f3:53:e2:d0:b2:ee:eb:b8:bc:b2:06:bc:ea:b7:8d:d1:
b6:03:40:f8:4b:c2:23:6e:b4:62:81:2a:39:b3:60:0b:98:a4:
f8:a0:bf:4b:43:b4:98:e5:4e:e5:26:28:73:1c:d1:6a:c3:1b:
c4:85:3f:51:cf:71:4d:a5:53:41:19:73:4f:b7:6c:86:2e:3b:
ee:8e:83:d9:ec:64:10:f0:ae:df:ba:03:b0:74:b0:03:6f:33:
c4:34:0a:45:fd:96:fc:76:f6:13:08:4a:c4:c4:be:9f:3a:b3:
36:32:07:3e:d9:b0:4e:66:5a:3c:fd:31:e1:b4:09:af:44:4f:
a1:90:9e:99:30:0c:e2:fe:05:db:c6:d7:1b:26:53:f4:ed:97:
6d:18:8d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:44 2025 by rpki-client