Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: h1ZylLo+pLeT5eUoMfbzkliJmW1H4vj+Gqt4/Xr8Ors=
Subject key identifier: C1:59:CF:66:7E:B7:70:D8:A2:CF:20:77:3F:57:2D:77:7A:C7:BA:1B
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 0196120F7BDCE16DA7C21D77D9A3D8027B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 0347
Signing time: Mon 07 Apr 2025 21:02:06 +0000
Manifest this update: Mon 07 Apr 2025 21:02:06 +0000
Manifest next update: Tue 08 Apr 2025 21:02:06 +0000
Files and hashes: 1: 59Mn6Fq_ztW3ZpObO3_epXiDhpk.roa (hash: cp+rR6j5Vo4FlHwAzBmhQ3KTx+zcyZnQHkQLzqefDBI=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: yS47KCr+09KvMO4D9l3RdjO8+asnX0AZr+phzpnUkcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0f:7b:dc:e1:6d:a7:c2:1d:77:d9:a3:d8:02:7b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Apr 7 21:02:06 2025 GMT
Not After : Apr 8 21:02:06 2025 GMT
Subject: CN=c159cf667eb770d8a2cf20773f572d777ac7ba1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:6c:be:b1:fc:11:b7:40:e5:1c:cd:c4:b8:
3f:03:0f:0f:0d:f7:3c:07:92:48:59:90:e9:62:b1:
cb:20:71:8a:85:5c:75:0a:4c:72:28:2f:d2:78:c6:
6c:ac:36:03:7f:cd:4f:32:84:c2:d3:9a:81:09:14:
4a:15:63:74:74:a8:46:92:2e:b4:fa:a8:6e:c0:4f:
7e:11:fe:d6:a1:59:e8:a2:ec:3a:e2:36:c8:92:3d:
58:36:ed:02:7d:1a:2d:c4:74:93:ac:9c:33:37:e1:
5a:9b:da:6e:09:9e:1a:1c:73:96:27:e7:69:fc:19:
db:8d:24:58:2d:47:b7:0c:1a:a3:0c:2b:3b:64:75:
1c:3a:8c:cd:e4:44:da:74:95:90:92:8b:59:8b:97:
8b:fe:90:c5:44:d3:16:44:11:08:b4:73:f6:26:91:
48:08:39:96:5f:e8:48:da:ac:f8:01:40:81:88:b8:
97:72:0e:f9:55:00:32:e5:7c:73:85:ad:5a:2f:0d:
b3:d7:f0:0e:55:c6:e5:16:62:83:6e:84:9f:52:e5:
5d:1e:a9:62:7c:93:a9:1f:4d:60:bb:8f:72:e9:52:
c4:7b:d2:bc:e5:6a:e4:00:f3:99:69:27:91:48:7e:
7c:17:d0:3c:f7:82:59:07:9a:99:d7:57:fa:f1:6e:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:59:CF:66:7E:B7:70:D8:A2:CF:20:77:3F:57:2D:77:7A:C7:BA:1B
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2c:02:dd:f0:c6:44:7d:8d:61:c0:6b:4a:05:ed:cf:9d:cb:
67:9e:f5:91:71:ad:6e:8c:f0:3f:35:f7:15:8a:d0:0c:fe:d8:
ec:db:f8:5f:57:47:e5:48:9d:f1:bf:ac:24:4c:d5:37:ff:48:
3f:cc:9b:78:46:51:02:01:20:1c:c2:3c:7a:d2:ff:f0:54:8c:
0b:0a:d4:06:5b:fd:cd:aa:2f:0f:96:e6:fa:0a:21:b6:50:0e:
61:6f:c4:f8:56:99:29:ab:57:66:9b:dd:48:d4:f9:ed:72:51:
9e:a3:08:44:f6:2f:b6:78:fe:3c:89:e1:c0:81:45:29:12:4c:
fd:f2:99:9b:ef:97:c4:08:60:87:f5:f4:ff:f1:2e:d2:ed:83:
d3:13:64:b5:a1:20:73:85:0d:7f:71:bf:97:4d:40:07:9a:8a:
70:64:5f:b0:1e:4c:c5:e1:56:ce:57:38:76:33:fc:d9:97:ff:
1a:0c:96:3c:27:9b:ad:c6:48:7c:42:e3:b7:9f:56:e4:6d:1a:
33:2f:28:66:a3:0c:91:f5:62:dd:c7:52:f3:4c:36:0a:68:33:
b1:3c:82:44:d8:8d:9b:d8:f2:21:f7:af:e8:33:75:fd:c0:4f:
84:23:d6:4d:2d:f6:25:02:4e:73:d0:fe:d0:c7:ae:16:b4:67:
04:4c:1e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:04:38 2025 by rpki-client