Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json)
Hash identifier: o1sHNv9zd8lqu94T58g5+mU0fadldrmvp9T4XFhWKUw=
Subject key identifier: FB:72:7A:B2:6E:B9:71:8E:0D:E7:C0:3D:3C:8F:A4:D4:04:E1:FB:13
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 01964A7D35360AFD3A7CE102F33161FDA897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
Manifest number: 0CF1
Signing time: Fri 18 Apr 2025 20:00:41 +0000
Manifest this update: Fri 18 Apr 2025 20:00:41 +0000
Manifest next update: Sat 19 Apr 2025 20:00:41 +0000
Files and hashes: 1: S9cGjm1_FE5PT4vUzDVGwHhUU8I.roa (hash: 69AJiJKNUyPoiJ1x84aJesWdv5amXDXDdulHmdz9t+I=)
2: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: cRulLtdGhW6nPDs5+D+3skj7BvrfxjmlDp1nJV1p9OY=)
3: joe5pZwVwibh0SdF2PsA-ibLXSs.roa (hash: kolEql5tzzaraNXgVLIhDCRD/4roZFIN0wmtLXS0EH4=)
4: xnRx0OSK9TIMFxn1VL8fIU-kDPQ.roa (hash: l/e913myQSQUa6e/Y2iqnvi7HmfqzgcIokF4oa8whYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:35:36:0a:fd:3a:7c:e1:02:f3:31:61:fd:a8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Apr 18 20:00:41 2025 GMT
Not After : Apr 19 20:00:41 2025 GMT
Subject: CN=fb727ab26eb9718e0de7c03d3c8fa4d404e1fb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:0b:89:b6:38:ba:90:fb:70:07:5f:9b:99:
c2:02:e0:65:18:a9:aa:89:f5:82:2e:94:ff:b3:cd:
c0:dd:9c:11:f8:ec:dd:79:3a:fb:3e:c9:a2:af:62:
b2:be:03:9a:3b:cd:8d:21:d5:fc:d0:b6:94:63:16:
d3:e0:e7:08:9f:69:53:34:37:ef:f9:26:18:f0:38:
45:2a:d2:f4:c4:03:f9:ca:e2:8f:7c:78:4b:3a:98:
89:95:fe:e7:dd:fb:41:f4:7c:d5:63:ac:f5:9f:dc:
e5:71:f9:1f:c0:60:eb:e0:a0:fc:d3:f2:fe:8f:08:
9b:bf:7d:fe:4a:b5:ba:d3:59:a5:fc:09:32:55:d4:
35:6d:cc:60:53:98:e7:bd:34:40:7d:a2:7d:de:75:
fd:1b:a3:47:b1:61:3a:78:0d:f4:98:ff:e6:ac:d7:
3f:46:fc:de:16:37:b2:d2:3a:87:85:e0:5e:1f:33:
a1:57:c1:b4:26:26:7a:bc:82:90:dc:00:67:ad:22:
85:7c:24:bd:a9:23:bc:f0:d2:45:f1:15:55:99:6d:
cd:29:b0:36:81:38:b9:e4:6b:e9:f2:ec:35:fa:4a:
11:e7:7d:7d:37:a8:15:b8:f3:f0:ff:1b:8a:6f:59:
84:00:d2:55:37:be:cf:c5:25:76:67:59:5b:71:df:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:72:7A:B2:6E:B9:71:8E:0D:E7:C0:3D:3C:8F:A4:D4:04:E1:FB:13
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:18:f8:7e:20:8d:67:09:53:4e:c7:82:53:0e:aa:6f:63:de:
e1:d1:c7:66:db:d7:0a:f8:eb:a2:ec:f3:83:4b:6c:ea:a5:83:
d3:68:5d:ae:3c:20:6e:d8:ed:b7:cb:2a:1b:96:36:06:fc:e9:
73:78:7e:6b:29:76:41:01:79:55:9e:90:a0:8d:3b:2d:36:c7:
d3:29:ec:a3:e0:3b:60:1f:7b:25:b1:32:b5:ad:e5:47:1c:a7:
83:93:43:51:88:fa:6c:63:70:14:f4:60:66:76:cc:16:40:19:
17:68:dc:e4:42:4b:63:30:d9:78:0a:eb:ea:63:b7:f1:1d:c0:
7a:87:c1:01:cf:bc:5e:27:c9:72:96:6a:f5:f1:23:ff:fd:e5:
95:a1:1c:b3:98:d3:5f:3a:a2:64:fd:50:9a:a9:7f:73:2e:36:
37:ff:b9:6f:d4:eb:d7:50:20:6c:4e:43:6c:81:15:6a:3f:81:
50:d4:ca:c7:0b:b8:19:9d:51:a9:5a:c6:19:ed:4f:14:22:e9:
43:0e:ab:63:03:df:1f:7c:c0:e2:85:31:3e:fb:1b:d9:fb:3e:
fe:6e:13:0d:2a:82:46:e5:f1:3f:57:3f:b2:05:bf:01:f5:eb:
42:3c:e3:da:f9:16:b1:a7:01:87:35:79:c7:26:49:e7:80:b4:
74:a2:23:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:40:54 2025 by rpki-client