Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
File: d1XNi-ceKectlpDHzUCHtfJhFvA.mft (raw, json)
Hash identifier: 6Yb97QcDJHFnFDd+es/5sfwA1N2r1uMc/Ay+UuLl6pA=
Subject key identifier: 58:12:9B:58:17:8D:86:3A:18:EB:2B:97:C1:24:9B:C8:0E:12:B0:B9
Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
Certificate issuer: /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Certificate serial: 0196127CA1CA8F13BABE5FE367C4B546AFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
Manifest number: 0502
Signing time: Mon 07 Apr 2025 23:01:19 +0000
Manifest this update: Mon 07 Apr 2025 23:01:19 +0000
Manifest next update: Tue 08 Apr 2025 23:01:19 +0000
Files and hashes: 1: B36LiC0OjqZ3wtH6qzPHL39SDVM.roa (hash: lC3icrS9H534ILHm12EWgHNj+HzhQRDu9zX1M9oOdqc=)
2: d1XNi-ceKectlpDHzUCHtfJhFvA.crl (hash: V3Dc807FzR2LvxsrtnMvz3RpkwTxD7QfypC/Sl/RX4g=)
3: e38yhLWXEVmqzpexT39CAVvzz0Q.roa (hash: BPXva5k8oXj/MP9PbA9GSzPiSKc5f6Z2a5jmXbL4TDQ=)
4: orSDHxnHGA47DQXY7GCuv1ViUKY.roa (hash: LnjrGG6bbrDuTNmUNlD7ds05Ph4J1TnAuWMrinaUcFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:7c:a1:ca:8f:13:ba:be:5f:e3:67:c4:b5:46:af:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Validity
Not Before: Apr 7 23:01:19 2025 GMT
Not After : Apr 8 23:01:19 2025 GMT
Subject: CN=58129b58178d863a18eb2b97c1249bc80e12b0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:b0:0f:03:e8:c4:90:49:98:dc:c1:0e:e5:
bd:bc:d6:3b:e8:75:c0:d1:09:d1:d3:5f:cd:ef:8d:
4e:e0:c3:50:d3:57:c8:85:22:d3:77:8d:db:83:b2:
0d:a8:0d:7d:ff:e3:08:65:a8:1a:99:85:79:8f:0b:
21:21:4e:a1:39:93:eb:d7:fa:f8:e1:61:e4:89:af:
28:c8:15:d2:3d:31:98:6d:a0:f1:0a:81:97:57:2c:
ac:73:81:86:e7:e3:ad:81:cf:69:e8:68:0b:8d:34:
37:e4:98:7e:c8:56:02:fd:e9:ee:5a:c5:76:07:6e:
81:78:2b:bf:b5:47:cb:19:ec:88:10:63:0a:a5:d3:
ad:06:bb:66:b4:81:5c:e0:6d:49:8e:a5:0d:21:ba:
cf:d7:47:eb:06:dc:c5:ca:ca:9f:9a:09:d0:77:0a:
4c:d3:e5:7d:d3:b8:ff:d7:9b:4e:f3:38:4a:2e:1f:
3c:a3:a5:80:23:1b:da:10:b8:15:41:87:9b:e3:77:
18:68:6e:76:8a:bc:2d:4f:a5:c4:ec:f5:7e:4c:96:
1e:a8:78:16:21:f9:db:68:a2:db:66:48:8f:7f:67:
db:33:5f:55:99:7d:e7:72:10:74:25:01:80:15:48:
50:4c:52:d8:82:4f:7f:42:36:66:aa:38:3b:5c:f7:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:12:9B:58:17:8D:86:3A:18:EB:2B:97:C1:24:9B:C8:0E:12:B0:B9
X509v3 Authority Key Identifier:
keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:0d:18:35:d2:b8:1b:51:c7:d9:07:c5:03:c0:5b:62:ee:63:
f7:1b:5b:66:59:50:41:b5:50:9b:e0:59:1b:4b:72:12:fc:6f:
3b:3f:98:17:d5:90:e0:8d:6f:a9:37:7f:b4:62:3d:9c:1a:35:
92:16:78:a5:24:33:2b:74:20:69:56:bf:e5:2b:1b:aa:39:6f:
e3:97:f1:f7:94:7b:93:5e:06:1a:00:ad:bb:cb:1c:4a:b0:51:
27:fe:3d:33:ee:3e:a8:a4:98:f5:c2:a7:3f:9b:2b:a0:26:40:
17:6a:94:13:38:9e:ec:26:e7:02:8d:6d:d1:6c:92:59:8c:18:
6f:cf:6e:5b:7f:1c:78:f4:ee:ad:9b:c1:8d:5f:0f:e1:4b:db:
ef:12:4f:62:1f:39:0e:67:2f:1d:25:de:b2:85:b9:46:60:19:
6f:ee:28:4a:0b:da:41:f3:08:e7:04:6b:a2:93:5c:6d:96:c8:
cb:5a:a1:4c:40:af:e8:f0:b7:88:c2:10:82:cf:fd:17:7c:93:
56:39:e2:f9:c4:ae:4e:59:45:1f:5b:ff:a8:95:93:e4:ac:04:
2a:91:4b:a9:2b:21:f7:c2:12:68:f6:7b:0f:27:57:70:9f:34:
03:42:f7:67:20:e1:2d:31:51:4a:95:a1:20:82:e1:e1:84:dd:
5d:1a:f5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:24 2025 by rpki-client