Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
File: d2pYTSefAHBmo4tesPGOe-22FOs.mft (raw, json)
Hash identifier: KcyNBxAlCa4CCiCYOGLSAIqhJ7t+ACle1vpcVMoWFVM=
Subject key identifier: F9:17:C4:95:89:88:69:FF:82:BF:3C:21:92:59:43:AA:B6:BB:42:49
Authority key identifier: 77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
Certificate issuer: /CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Certificate serial: 019579B4D9A880309E5A967C6198BB8C08E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
Manifest number: 148E
Signing time: Sun 09 Mar 2025 07:00:50 +0000
Manifest this update: Sun 09 Mar 2025 07:00:50 +0000
Manifest next update: Mon 10 Mar 2025 07:00:50 +0000
Files and hashes: 1: WUTyK7BrRNi0uHZK_0QCE_Vt8SE.roa (hash: 4x8uT/6JZLvMnikfzpcnGLUs5znzoRWzxY13Odgg+MI=)
2: d2pYTSefAHBmo4tesPGOe-22FOs.crl (hash: /BePqy2ch5TM/UJ9Db3ahD1+dz0W/VB6VI3gy7Mzr5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:b4:d9:a8:80:30:9e:5a:96:7c:61:98:bb:8c:08:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Validity
Not Before: Mar 9 07:00:50 2025 GMT
Not After : Mar 10 07:00:50 2025 GMT
Subject: CN=f917c495898869ff82bf3c21925943aab6bb4249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:a6:f8:1b:25:96:fb:5c:a3:52:e7:68:21:
68:18:be:f6:7d:80:af:b5:30:17:2b:0d:39:6b:22:
0f:f0:08:85:77:e6:cf:97:15:be:f0:33:b5:f9:a0:
26:24:f5:9f:48:4f:38:b2:30:88:60:1e:8f:0d:36:
af:5a:a6:9c:de:08:42:22:24:fc:cc:e2:ad:c0:fe:
4c:58:40:dc:e2:7c:65:02:a7:52:ae:67:c4:b6:cb:
a8:9f:90:be:66:55:22:6a:8c:46:72:69:e6:ea:11:
11:80:aa:51:ff:a8:fc:96:78:0e:63:1b:4e:b1:be:
b2:ef:7e:af:3f:ee:69:56:8b:23:ce:29:5e:4d:fc:
aa:46:17:f1:94:3b:73:b5:17:3d:d5:69:2c:89:5a:
ff:c8:cd:05:3a:a8:66:f9:22:32:3f:e6:ef:16:75:
d6:a6:cc:5e:78:1f:7d:1e:9b:e1:39:a4:d7:34:2a:
f7:e4:c9:ca:84:08:ff:7b:36:37:52:a4:aa:68:25:
5b:c6:a5:00:af:31:9c:4a:78:24:74:ce:90:a0:77:
a2:ec:9e:74:86:83:62:9e:68:05:66:9e:92:7d:06:
73:d1:3f:13:8d:be:91:68:84:85:f2:01:a6:1e:07:
d8:e5:ef:ef:18:98:0b:cd:2b:ba:b9:98:bf:e9:5d:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:17:C4:95:89:88:69:FF:82:BF:3C:21:92:59:43:AA:B6:BB:42:49
X509v3 Authority Key Identifier:
keyid:77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a7:d1:8d:90:fe:89:f7:e5:92:96:86:89:36:20:de:b0:da:
86:f3:48:f9:67:b7:4e:74:99:ab:5b:cf:1c:88:a4:54:a9:a7:
f4:54:23:0a:d6:c4:41:5f:5a:f6:e6:ca:e8:f4:52:28:63:d0:
54:78:26:eb:a0:68:e4:a3:95:d3:17:ef:e3:d6:6b:f5:44:d9:
cb:5a:3f:05:17:9d:3c:b8:f4:b8:6a:8c:cf:03:96:85:e4:23:
da:20:6d:ec:03:80:05:89:b5:6b:de:c5:18:93:74:1a:b6:4c:
fd:8f:df:2b:ff:be:69:56:eb:66:b1:5f:d0:80:4a:7d:7a:75:
40:44:93:9f:19:df:2f:2a:80:c3:e6:bc:e6:58:44:74:8d:10:
bb:0a:96:14:6c:e1:4b:53:07:4d:ad:da:b1:21:ae:57:6e:5c:
57:48:51:9a:9b:fe:f6:40:2b:03:4b:b0:5e:98:40:17:06:cb:
db:56:c7:c2:db:fe:0c:c6:97:8b:be:2f:5a:01:a1:7a:5f:15:
20:f9:21:0f:26:84:3c:e5:70:28:c4:8a:9c:e9:ba:df:09:03:
42:6a:c6:6d:ae:f4:73:54:3f:6d:ee:5e:8c:6f:30:22:54:bf:
bc:dd:5d:b6:61:1e:dc:43:1f:a5:81:68:61:3d:92:00:d2:97:
82:fa:11:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:18:12 2025 by rpki-client