Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File: du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier: 6WzRiTxdo7/r8zF+K5kRqdRtI1lPyrzTt6rHgD6nHF4=
Subject key identifier: 72:5C:05:4F:AD:AF:61:8A:42:A6:AE:51:AA:CA:B0:72:5C:9A:A8:15
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 019659143D7AEFB83C23C483F85D5D3E8524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number: 0473
Signing time: Mon 21 Apr 2025 16:00:20 +0000
Manifest this update: Mon 21 Apr 2025 16:00:20 +0000
Manifest next update: Tue 22 Apr 2025 16:00:20 +0000
Files and hashes: 1: Duy0w8egSd6_tWOhbaPt5UeYgF0.roa (hash: 85ocILxngCmwXS32iOfp1qK7+ygQ+Dz/qqJJB6oRnIE=)
2: J4VjN9NGRUAj6-HvTcD4a4pRvuI.roa (hash: BPJJa1BdBThf5/6mJP59LpQAGjz4XfDNQ5fBL115gk0=)
3: _fP9Z6Qv2kJn-Wq44o76SeffPHk.roa (hash: 4imK77f8nPoaw3AiGFAa7c39oqo+0JEgUABlegcK0lE=)
4: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: 90RBI/JY/WlWO427g51BEeWAx1H6lCsmwwZG4jKCgTM=)
5: l65724QI29Rvj8Dehw-WDE4zXrs.roa (hash: GIynNXgCpE42jnQGxrKvLDY9GYzVvsdz2aApBnrj/3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:3d:7a:ef:b8:3c:23:c4:83:f8:5d:5d:3e:85:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Apr 21 16:00:20 2025 GMT
Not After : Apr 22 16:00:20 2025 GMT
Subject: CN=725c054fadaf618a42a6ae51aacab0725c9aa815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:a4:1a:79:a1:e4:19:d8:de:bf:c1:e1:4c:
d3:93:1a:b8:2b:c3:d2:a9:66:8b:b6:8a:0f:3e:be:
44:c7:a3:4d:a1:2b:55:5a:19:52:89:87:50:c4:f2:
b1:0c:90:2d:63:3d:10:b8:03:e0:45:94:c6:af:22:
6b:8d:25:8d:ac:86:7a:18:4c:9d:79:47:e1:fb:90:
d8:2e:ee:73:e5:f4:d5:5a:bf:6a:7d:79:47:af:97:
69:49:8f:85:d9:54:e5:0a:15:49:d1:b4:d4:90:03:
fe:a9:a4:fe:fa:01:6c:ab:97:44:cd:b4:81:c6:88:
d6:2c:d0:a3:7c:43:ee:61:22:d7:d0:8b:f4:aa:49:
26:ce:e3:e9:38:aa:e3:fc:60:9b:b8:72:82:8e:e8:
65:c9:aa:44:8f:82:ec:0e:64:8d:9f:3e:bc:08:8b:
75:e4:3c:7f:54:66:b3:11:39:c6:41:10:be:12:01:
0f:99:c6:a9:e8:f3:c9:70:01:02:ea:aa:54:fe:ca:
18:b2:06:9b:78:cd:f3:42:1b:aa:95:8b:1e:4c:27:
84:75:b4:84:a3:e4:d3:e8:5f:f6:54:bf:91:74:06:
9f:2d:30:88:a3:d0:3f:28:42:5b:a9:fb:6d:9d:3e:
86:fc:2c:24:0e:e9:94:82:81:3c:7a:73:b0:95:55:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5C:05:4F:AD:AF:61:8A:42:A6:AE:51:AA:CA:B0:72:5C:9A:A8:15
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:dd:93:31:34:d3:b3:c6:76:9a:49:2a:cd:5c:81:f9:4f:8f:
97:96:33:23:28:33:d7:56:ad:bc:91:a7:1c:a5:21:69:01:57:
59:cd:83:f5:ae:8d:1d:b0:11:56:11:49:4c:34:05:a9:98:bf:
03:0b:c9:38:5a:10:2a:f0:73:ba:2c:2a:0f:7b:ce:70:6c:89:
a7:33:ad:3e:83:d1:41:4b:80:d2:34:27:cc:4b:c6:2f:79:68:
d9:4f:d9:06:34:71:dd:33:f0:9d:4e:75:21:67:22:69:9a:c6:
8a:fc:40:48:3b:14:97:ac:3f:bc:b2:76:fa:0b:38:30:17:68:
a6:35:b1:34:6d:a9:90:b5:37:ee:27:3c:2d:5c:43:55:01:b5:
0d:55:2d:f4:7b:2d:69:1a:70:04:ea:d5:c1:9e:8a:d1:e6:6c:
34:10:3a:39:f5:85:e6:58:e2:c4:f3:47:fe:15:1d:5e:d1:2f:
0c:88:67:4e:e0:da:cb:ea:99:36:db:f7:9d:84:6d:f2:18:6f:
33:c2:2d:d8:0c:70:7f:37:d3:6e:38:89:27:04:fb:59:d4:54:
60:84:55:69:39:47:76:62:7d:d4:ac:48:e4:68:4c:42:97:c7:
e2:83:33:cb:44:37:b4:f4:4a:4c:7e:6d:3c:45:0f:de:dc:4f:
ce:9b:b0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:01:38 2025 by rpki-client