Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
File: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft (raw, json)
Hash identifier: BDOldialwiiKOPoMIf4VZsUqEg9TDSdJkCITsZwilnc=
Subject key identifier: 47:14:01:77:29:BB:FA:8F:B7:41:CA:16:E4:32:CF:36:43:2B:EC:32
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 0195903D36002BBAC7FFFD314F2F05E4735A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
Manifest number: 1497
Signing time: Thu 13 Mar 2025 16:01:25 +0000
Manifest this update: Thu 13 Mar 2025 16:01:25 +0000
Manifest next update: Fri 14 Mar 2025 16:01:25 +0000
Files and hashes: 1: 1-TOVnm2gd04tI-uLivEABR6Pazo.roa (hash: QVp2c0LkMSwloi3MOMCG1fyuxaPczwJ3tn0nHSxmhjE=)
2: HgA_tKLG5N3ASR5gcHl20EupVRE.roa (hash: DRYtmqvkH/s26hespCVF8HpGzgqR1cL88tvUFROmz9s=)
3: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl (hash: DSXgB8s0wFzfRAx6oY50tfq+P5SrZ5YY32CNN2au08k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:36:00:2b:ba:c7:ff:fd:31:4f:2f:05:e4:73:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: Mar 13 16:01:25 2025 GMT
Not After : Mar 14 16:01:25 2025 GMT
Subject: CN=4714017729bbfa8fb741ca16e432cf36432bec32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:08:54:02:dc:b6:ab:2f:8e:6c:84:2f:52:
7e:0f:73:07:6b:94:34:ed:a0:8f:a7:01:3f:2a:2c:
e7:cd:71:e4:2b:9a:6b:dc:12:94:89:db:cd:47:60:
b1:16:fb:a0:c3:1c:12:1c:9b:1e:91:04:3c:29:99:
9d:31:c9:30:d4:df:90:6b:67:a9:ce:01:04:11:a4:
1c:5e:ab:49:48:11:99:60:5d:1f:89:e5:e6:5b:23:
08:46:be:cc:5b:50:6a:61:6b:32:92:5f:8a:9a:31:
15:46:74:fe:20:1e:af:1a:7c:5d:a7:09:2a:ee:99:
23:c6:0b:b2:5f:64:c5:62:9d:fe:64:96:b6:c2:96:
e9:10:80:6b:ea:ee:b7:00:04:21:3f:a2:65:2b:30:
3f:cb:d7:5f:7c:53:78:22:42:c2:37:1b:9e:5b:9e:
b1:3c:e4:d3:c7:05:8d:b1:e5:48:de:e7:2c:e6:61:
19:5a:f3:3a:8a:1f:0e:52:45:dd:69:2f:f3:77:50:
9d:4f:b7:67:f6:2e:0e:a2:d9:e2:4f:21:c6:48:6f:
b3:80:fe:ca:47:d9:20:8c:58:ba:0a:97:75:be:3c:
5f:47:e9:ea:e5:35:ae:96:f8:5b:9a:3a:29:9c:68:
25:60:8c:80:9b:79:bd:cb:fe:3c:91:9a:c9:65:6b:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:14:01:77:29:BB:FA:8F:B7:41:CA:16:E4:32:CF:36:43:2B:EC:32
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:66:11:81:a7:bf:d0:58:c9:40:31:e3:b7:10:12:b0:98:30:
10:9e:d1:29:0c:15:c1:9c:dc:3e:6c:da:ff:d2:44:b1:79:e5:
21:72:ef:de:b5:0d:02:ab:b9:df:ac:33:8a:fb:f4:21:23:bb:
62:07:99:73:9f:64:ad:09:98:f6:4b:c5:ce:f9:40:8c:49:44:
d5:c4:6d:7f:28:b0:9d:25:79:c5:7b:77:4e:4a:d8:ef:79:03:
7b:70:aa:15:c9:9c:99:16:5b:e4:25:a4:37:d7:88:40:ce:9a:
ed:78:b8:26:27:ae:63:ca:f6:32:a2:b5:05:a6:30:58:63:01:
13:e7:a8:f6:7e:65:8a:c6:40:a4:87:88:d3:98:89:e7:31:fa:
21:0d:6f:c4:a8:60:cb:e0:dc:b9:e7:91:c0:e5:56:91:a1:65:
84:be:5b:0a:75:34:14:be:30:73:5a:c5:db:7e:5a:f6:57:75:
68:33:09:b9:6b:63:2c:43:1c:83:30:a2:f0:6b:d0:86:b7:52:
c5:fa:2c:3d:6b:ff:ec:b7:88:88:31:64:e8:c2:e2:f5:b5:f6:
c1:78:f0:15:fa:30:ae:27:87:92:39:d5:a5:7c:61:68:e7:f2:
93:7b:b5:8f:71:0a:df:ad:ef:61:1a:13:07:0a:d8:a2:18:65:
a8:74:ad:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:50:25 2025 by rpki-client