Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File: dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier: 8zzto7O4FvH1ilRcasCZgDjs7CBoawADZggg11rk7fk=
Subject key identifier: C6:D3:8E:5C:E2:D0:BE:49:1E:99:72:CC:F2:FA:C4:F2:E9:80:56:15
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer: /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial: 01962BCEC1EF80CA92BFC8DBAC600F66C0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number: 08CE
Signing time: Sat 12 Apr 2025 21:01:32 +0000
Manifest this update: Sat 12 Apr 2025 21:01:32 +0000
Manifest next update: Sun 13 Apr 2025 21:01:32 +0000
Files and hashes: 1: K2WTfNgGTgwLI8daJh2SwttMQ5w.roa (hash: kg2DGvsW5/IaD92YzOAMjHp8f1xtHOO7qcNliTfoKss=)
2: Ppnz_gWGkTgslud1nbRvdKIkQ7U.roa (hash: pUR0ufw079uWlFJjSqIiEUz3vris4ZJFN/dXSNPf1bk=)
3: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: gpSzLB0xXCcphIBNFqOiKEEmBDy6kOjmTnaemqpsnz0=)
4: gYinuUkN5-ijpn1rqGGqGii0p6g.roa (hash: lpzZyTHLuJfHa94o7AaeZ6AmXeDKqlRwU9KcssuE8rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:ce:c1:ef:80:ca:92:bf:c8:db:ac:60:0f:66:c0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
Validity
Not Before: Apr 12 21:01:32 2025 GMT
Not After : Apr 13 21:01:32 2025 GMT
Subject: CN=c6d38e5ce2d0be491e9972ccf2fac4f2e9805615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:94:c3:c8:bf:12:c2:fd:1c:f0:a4:65:2b:
bc:a2:48:08:14:a3:7c:17:5f:80:9d:91:a4:1c:1a:
12:78:d3:45:ac:70:3d:e9:cd:c4:ad:22:3c:f6:15:
b1:35:2f:02:44:78:6d:1f:05:3d:42:cf:99:a2:91:
3e:92:03:67:6c:be:8c:8d:38:42:01:dd:00:76:9c:
3e:e4:50:fd:e4:e6:1e:7a:d7:31:2b:92:9c:71:b0:
49:70:3b:8f:d9:fc:f4:1c:14:47:63:58:3e:50:cd:
bf:de:63:7f:58:fb:cf:44:25:1a:c9:84:0c:79:30:
ea:73:5f:c9:92:bc:1c:7a:4e:90:c7:20:38:ec:df:
02:7d:ca:b6:29:43:41:41:24:76:e8:9e:ff:27:ca:
5c:a4:e7:1d:67:16:55:83:5c:4f:6e:1e:0e:f2:03:
83:a0:88:3d:7d:38:3b:21:99:7f:89:18:ae:56:f9:
61:0e:3e:15:01:ae:96:20:f4:28:39:0b:1e:84:e5:
c2:55:f9:24:f0:e7:51:1b:a2:6f:5b:9a:08:b4:ae:
62:dc:1e:8f:32:38:b6:0a:13:a7:b2:a7:1b:7c:6c:
ec:d2:b7:e1:26:29:17:0e:20:03:fa:d7:ea:d1:e6:
18:e8:d1:d3:d4:8b:be:ae:09:73:a7:7c:70:e4:3e:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D3:8E:5C:E2:D0:BE:49:1E:99:72:CC:F2:FA:C4:F2:E9:80:56:15
X509v3 Authority Key Identifier:
keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d3:5c:b3:6d:e9:3a:f0:21:f7:bb:55:d8:bd:4b:7f:1a:17:
5d:cf:92:76:60:fe:21:ae:c7:1b:b6:b8:59:35:8a:87:1e:13:
31:12:fd:cc:1d:a0:89:e1:73:38:20:4f:f0:45:e2:79:64:c2:
08:83:7e:a2:cf:71:cd:b9:af:95:26:a0:53:fa:9e:fe:e6:88:
1c:e9:47:14:9c:fd:f5:52:49:4e:21:f3:91:65:da:82:58:50:
97:6e:f5:61:b2:04:d5:de:be:66:2b:c6:b3:fc:e5:5d:60:f0:
dc:cf:e1:dd:12:70:5e:af:d6:21:35:b7:b5:2c:09:c7:f0:d0:
55:1b:61:ec:53:94:2d:2e:82:ce:a5:23:49:0a:06:25:cc:51:
db:26:ec:f0:45:ec:69:3c:1d:1e:59:6f:73:db:21:4e:33:e3:
53:7e:2a:69:9b:9d:5d:be:cc:4c:d3:60:59:b8:1e:07:6f:3b:
54:d3:47:38:89:50:17:b3:d4:59:af:7e:70:56:89:26:eb:2d:
f9:45:9b:2e:77:d1:12:3d:ab:fe:da:af:43:da:8b:0f:aa:9c:
9d:b9:1c:17:b0:de:6b:68:3d:23:d3:6b:d9:13:76:76:79:fa:
33:86:3e:20:86:f8:01:c3:db:81:c9:67:09:41:22:3d:1a:80:
1c:ef:f2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:51:47 2025 by rpki-client