Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File: d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier: 4QMa0cyMPZnHwj7sE35IaC+1ajONWs0Rn45AnA15AYs=
Subject key identifier: F1:36:1E:0B:AC:BE:9E:0A:A1:73:9F:81:9E:F8:8B:72:14:73:EC:9B
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer: /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial: 019651240F523397936894A07332AF45EC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number: 0BE5
Signing time: Sun 20 Apr 2025 03:00:39 +0000
Manifest this update: Sun 20 Apr 2025 03:00:39 +0000
Manifest next update: Mon 21 Apr 2025 03:00:39 +0000
Files and hashes: 1: JS20272zzOd7lsvAhAy2fEVjeyI.roa (hash: cOcrvgmIxE66W+f+FGaVHK7zq1S4gdeOGb2xk9gX0lg=)
2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: PXn7176AFMk8KsUL799TdRsIU9Zdv4CBxsBNPx8tI3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:24:0f:52:33:97:93:68:94:a0:73:32:af:45:ec:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
Validity
Not Before: Apr 20 03:00:39 2025 GMT
Not After : Apr 21 03:00:39 2025 GMT
Subject: CN=f1361e0bacbe9e0aa1739f819ef88b721473ec9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:81:d2:ae:aa:96:a2:9f:c3:25:5d:79:08:
ad:8d:7c:3f:28:cc:d6:91:83:3e:1a:f2:37:68:7d:
9e:4f:97:af:26:1b:73:b7:5d:f4:10:28:1b:6e:75:
0b:b9:b9:8e:30:68:4c:63:8c:67:1b:36:8f:a1:0f:
3d:69:56:51:9f:93:6b:ae:41:6a:be:08:f3:3b:f9:
53:4d:31:ee:02:6d:69:28:96:c6:b3:ff:f4:0c:51:
9e:46:91:5a:d5:47:87:d9:cb:f6:be:1c:28:c5:ad:
49:7c:80:1d:38:56:f7:94:90:aa:fb:51:6b:b5:4c:
bd:e9:3f:17:01:ae:0c:a5:5f:3a:b9:f3:77:37:bb:
7a:e5:52:6b:c9:4b:6d:58:ea:91:64:c8:76:74:b1:
3c:d4:9d:3d:c2:94:ff:f5:97:1c:69:95:f6:36:0f:
59:72:0b:4c:01:3f:97:41:89:01:dd:fb:c1:19:da:
10:fa:43:65:6a:93:15:5a:8c:13:72:a1:62:78:4e:
be:11:9c:de:25:b7:92:7b:02:51:13:d6:7a:23:08:
27:17:d8:c8:29:9b:16:63:a9:71:11:ee:9d:dd:4f:
88:19:7f:c5:be:e3:ce:21:d3:ae:c5:93:04:7d:8b:
fb:6f:78:81:7a:bf:3e:aa:eb:67:fc:c6:4d:e8:ec:
17:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:36:1E:0B:AC:BE:9E:0A:A1:73:9F:81:9E:F8:8B:72:14:73:EC:9B
X509v3 Authority Key Identifier:
keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:51:6a:30:fb:22:1a:b8:2e:99:81:bf:98:0c:aa:ae:e1:59:
39:b7:53:d1:df:16:34:41:ad:42:48:fe:dc:9b:a0:76:cc:4b:
fc:92:e4:e3:6f:40:cb:3d:8d:70:ef:22:ea:22:bd:12:0a:2d:
40:5a:08:8e:17:4b:f9:00:9d:aa:de:3e:cb:d0:17:d3:d2:0e:
84:90:b1:0a:b8:e6:80:4e:3e:11:6d:62:4f:6a:62:68:d8:1c:
58:3f:c5:53:73:b4:78:94:f6:4f:11:9b:bf:5b:a1:2a:60:9e:
bf:1f:17:fc:0d:52:4e:9a:3f:be:39:a5:e8:14:fa:c5:6a:6b:
87:81:c0:d2:42:03:d8:b3:16:e4:b5:88:1b:ad:94:65:13:90:
98:46:a3:4e:86:d2:64:93:e3:f1:6b:4c:d9:89:3c:b4:94:46:
68:71:4b:7c:00:2c:fe:c4:ca:48:cc:4b:a9:3a:47:b2:d9:65:
3a:d8:3b:39:8e:b1:d2:67:f0:c1:4b:32:09:6f:62:7b:d5:2c:
5b:cb:3b:00:18:fd:1f:20:f2:d6:f1:14:ac:47:b3:35:49:22:
77:89:0b:4b:e5:36:99:0f:d7:17:34:0f:99:cb:d9:d0:6b:95:
fc:74:82:66:2b:41:68:b5:f0:e7:bd:62:3a:c8:b2:02:0f:b8:
b6:b3:9e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:56 2025 by rpki-client