Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
File: 33jsawuWmqIijxJe2qQZus278ls.mft (raw, json)
Hash identifier: gBpH7VSW0YpgDguaG90TKP2IzPAkaEB1+vLWlHKGt6g=
Subject key identifier: D2:E7:A1:C8:C9:5D:FC:E7:DC:80:9D:D2:CE:2E:6E:2E:FC:0F:A2:7C
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial: 0196022DEC82D1337025E030129A310C8738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
Manifest number: 14D5
Signing time: Fri 04 Apr 2025 19:01:26 +0000
Manifest this update: Fri 04 Apr 2025 19:01:26 +0000
Manifest next update: Sat 05 Apr 2025 19:01:26 +0000
Files and hashes: 1: 33jsawuWmqIijxJe2qQZus278ls.crl (hash: VGQl615AWaQeJpiwncsyPjnZ/N+57wv/LGSysmdDl3A=)
2: 3fEpeO8KRpblUKytupeE9QmRO10.roa (hash: J/sgD9Gkv93PRSGDC5y1FBEaffbfuEvNlwwRc1f17bc=)
3: IaFtNttSKZaCyjtsIDwe2puFZb8.roa (hash: 1NfM53YlIhgQ+Nv6uT/TNmq/fXmn5FfwUXrSWjD1Rm8=)
4: ynxlTzW2Z7OOg39MYnktecMbQ34.roa (hash: /1enFWpBnhSEiy75MLooqHcnc9RoQMKxSSL0rlifuAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:02:2d:ec:82:d1:33:70:25:e0:30:12:9a:31:0c:87:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Validity
Not Before: Apr 4 19:01:26 2025 GMT
Not After : Apr 5 19:01:26 2025 GMT
Subject: CN=d2e7a1c8c95dfce7dc809dd2ce2e6e2efc0fa27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:50:97:b3:6b:4f:5e:80:2e:b6:a9:2a:25:49:
0a:72:c2:17:04:2f:a8:c6:e0:33:0a:57:fb:1e:bf:
0c:4e:37:59:d1:d0:26:70:24:78:06:90:44:a9:9b:
97:4c:b3:34:08:e9:e0:1d:84:55:8d:1e:a1:4d:5c:
40:3d:73:8b:fc:94:bf:59:55:18:48:61:95:f4:3c:
86:85:1a:1b:04:0a:81:cf:fa:5b:88:61:2e:9f:b2:
6b:bd:17:d6:df:3e:7d:3b:55:24:0f:4d:31:1e:a5:
54:f1:ac:4d:d4:37:86:6d:44:f0:33:f6:11:31:f5:
ec:22:32:94:9b:c3:f3:c8:1f:88:9c:bf:92:3b:43:
21:1a:e0:c1:f3:b5:3f:99:72:4d:1a:64:13:22:b9:
76:20:40:39:ec:81:de:72:29:3c:94:02:32:4f:43:
ef:6c:9c:3b:d8:d0:e8:0e:b4:17:af:00:29:4f:07:
23:ca:b1:e1:8f:ea:77:0d:29:72:41:2e:8f:f3:18:
3c:0a:2d:27:a6:c1:3d:aa:f1:fa:3d:ff:1f:e2:f7:
36:f0:30:2f:f1:40:f4:ba:96:59:0b:f7:63:b9:21:
65:7b:c1:cb:51:40:f7:b5:c7:42:c8:82:96:9e:49:
f9:df:71:ab:37:a3:3b:8e:fa:8a:22:fa:00:76:20:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E7:A1:C8:C9:5D:FC:E7:DC:80:9D:D2:CE:2E:6E:2E:FC:0F:A2:7C
X509v3 Authority Key Identifier:
keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:45:07:ca:0b:8e:a9:29:9c:2d:a6:f8:38:39:e4:55:d7:f1:
a1:f8:d2:c1:0a:b8:82:80:4a:9f:f0:0b:b8:14:30:57:c3:40:
a6:76:af:1a:53:f7:8a:98:e3:e8:62:19:a2:6c:ec:2a:ca:4b:
3b:af:82:c4:91:14:e5:ad:a3:e3:9a:94:bf:d8:0e:98:98:c9:
a8:0a:ca:6e:35:f0:5c:74:42:1c:40:64:6c:d0:26:f8:9a:2b:
e3:db:c4:b6:3e:4b:9f:76:d2:c6:ed:a9:94:d0:94:f7:45:f9:
77:97:64:76:fe:88:65:5e:ac:55:5b:cf:60:1c:9d:72:67:87:
81:1b:39:34:7b:d3:b9:80:d2:f4:72:73:a4:d5:ac:b6:42:58:
97:2f:18:9d:cb:bc:48:38:7a:2d:49:b5:fb:5e:29:e4:76:ee:
c1:af:fa:2f:2f:f6:b2:13:1f:d3:3d:87:9f:90:ec:07:bb:3c:
ce:bb:fa:5d:77:3e:16:16:a4:ec:18:60:7b:08:d5:81:5e:87:
1d:6a:67:78:32:9e:4b:7a:d5:89:96:0f:b0:63:2b:5e:86:69:
f0:a0:ae:27:85:69:07:6f:36:16:c1:eb:af:62:90:e6:29:74:
8c:30:a2:1a:40:a3:cc:e8:37:f5:dd:d6:f9:29:a6:91:a5:1d:
41:20:19:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:56 2025 by rpki-client