Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: d6YMyR9jXO0aLkUbWUibmaeQF7kpHTHAkZFfLdOn1mY=
Subject key identifier: 5B:D1:10:3C:1D:DC:25:D3:59:74:01:04:8C:3C:8C:E2:3D:A7:5C:11
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 01963EAFD687E17F8BF320A38A0972F4DCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 0BC1
Signing time: Wed 16 Apr 2025 13:00:33 +0000
Manifest this update: Wed 16 Apr 2025 13:00:33 +0000
Manifest next update: Thu 17 Apr 2025 13:00:33 +0000
Files and hashes: 1: 4V_ibiqr3ToA5yeO7eCC_kmdHfY.roa (hash: iaaPPpRPgVRp2VBYf0amI7H0JrYQ2W8NdUPmUpkX7Ug=)
2: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: 6QJn4njX9KXVx+O7ynMXFXpNA1k4DV9jVFV8958Dk4M=)
3: jcgG2k-DMvgq0AsuFmjBxm0-O-Q.roa (hash: SEfA+iWkgEeN5RJiBiU8Z6qVRU+/NBl881HzOl2we+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:d6:87:e1:7f:8b:f3:20:a3:8a:09:72:f4:dc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Apr 16 13:00:33 2025 GMT
Not After : Apr 17 13:00:33 2025 GMT
Subject: CN=5bd1103c1ddc25d3597401048c3c8ce23da75c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:09:83:e5:d9:63:78:97:bf:16:33:79:06:
67:aa:99:b2:be:3e:f2:a8:96:bb:af:8e:b8:85:90:
14:7b:c1:0d:7d:6e:64:02:bd:57:9c:16:9a:c5:34:
88:2e:e1:58:f7:d8:08:7e:73:61:75:87:4e:26:8e:
17:1e:27:fc:7c:51:45:32:ba:f4:5f:ae:c0:c2:93:
15:b0:ca:69:8a:4b:53:7c:d5:d5:72:d8:ff:1d:bb:
7a:55:01:2c:71:59:ea:41:36:6b:89:58:66:84:65:
32:b9:5b:d6:27:84:6a:3c:c9:60:d8:ea:2c:bc:f1:
ae:b7:53:d7:78:2c:44:97:4f:dd:3d:94:44:28:85:
7a:24:5a:05:84:5c:a1:d9:92:85:04:cd:f0:70:03:
98:ce:b7:a2:6e:75:57:87:5c:9e:d1:4e:8d:f8:60:
48:58:d8:cd:18:78:c6:52:00:0d:66:72:04:69:0d:
5f:64:4a:80:0e:35:c3:3c:64:10:11:c8:85:f0:e7:
25:a0:05:73:2c:29:f7:cf:ba:49:7b:77:ec:43:c0:
41:47:e3:e8:da:47:d0:27:97:c8:04:6c:cb:b9:dd:
f6:7d:67:cf:70:cf:6a:65:dd:f8:a6:b4:81:eb:da:
c8:87:4d:a0:8e:f4:ea:75:aa:e2:7f:06:6d:fa:4b:
4e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D1:10:3C:1D:DC:25:D3:59:74:01:04:8C:3C:8C:E2:3D:A7:5C:11
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f4:20:7c:d7:72:41:a4:42:7f:dc:ea:5e:a1:99:86:bd:5e:
1d:3e:26:c1:d1:fa:85:ec:2f:96:8d:4f:3e:06:6f:5b:95:dc:
fd:fa:ee:89:df:d4:02:46:d1:0e:db:82:90:3c:88:a9:22:88:
46:ff:75:69:bf:c2:53:0f:72:4b:bc:19:65:e7:1d:33:4f:df:
1f:ac:79:f4:86:ed:cb:81:52:42:94:53:fa:58:6a:d2:d9:08:
98:99:98:f1:49:cd:5d:c5:de:12:8b:f1:bf:69:0e:b3:55:f2:
52:cc:b9:b6:20:a1:d4:26:80:56:96:f8:33:eb:01:4f:82:81:
af:3a:cd:fe:83:db:b1:23:26:da:04:e4:6d:0f:52:cc:76:54:
62:58:61:7e:a7:f5:23:e2:4a:5e:b4:88:55:3a:3c:c0:f4:9c:
c9:8d:c1:02:4b:35:f7:d1:95:c4:aa:56:a2:d7:42:ce:16:a3:
47:2a:a5:6a:95:d2:3b:a0:5e:03:13:83:93:81:aa:ba:8a:f2:
96:97:59:15:20:86:00:56:09:1a:1f:12:92:ef:ab:a2:69:39:
7a:47:fb:0e:fd:c5:97:8d:ab:db:3b:de:43:55:20:cf:32:65:
9a:02:f6:06:93:33:42:ab:2e:7a:af:bf:07:65:28:16:b7:54:
58:57:61:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:22:11 2025 by rpki-client