Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
File: d-g56lm5dYJP1wigrXNVUAF8v3w.mft (raw, json)
Hash identifier: eS5qFoW5/2Oaf3YTahRiYsy1gqoDGAkI2L3aJq3I8YA=
Subject key identifier: D5:EA:97:2F:5C:F1:7B:34:E2:6E:4E:0A:CE:3E:E0:C9:3A:D2:EB:AA
Authority key identifier: 77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
Certificate issuer: /CN=77e839ea59b975824fd708a0ad735550017cbf7c
Certificate serial: 01963FC264D8758E056B8C9A59EEB1AD1C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
Manifest number: 1260
Signing time: Wed 16 Apr 2025 18:00:26 +0000
Manifest this update: Wed 16 Apr 2025 18:00:26 +0000
Manifest next update: Thu 17 Apr 2025 18:00:26 +0000
Files and hashes: 1: AdtLsSKpD88rZG8vPkZiD9QZ3II.roa (hash: r/TtnbjU6TzYG7n4J08Ln2zhCxACBBJlAa/WOkQ9bLA=)
2: ZZKHxuzT9f9uOTLxBtzMJ_ndYYE.roa (hash: w2L+9XVGxP7AjhXdVbAOAOleu3PnA4M7uTmUbZQNGw0=)
3: d-g56lm5dYJP1wigrXNVUAF8v3w.crl (hash: /Cvms0l5m/CksroVyW9Xm7xOnShUuSaQ+dTxD3znj/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:64:d8:75:8e:05:6b:8c:9a:59:ee:b1:ad:1c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e839ea59b975824fd708a0ad735550017cbf7c
Validity
Not Before: Apr 16 18:00:26 2025 GMT
Not After : Apr 17 18:00:26 2025 GMT
Subject: CN=d5ea972f5cf17b34e26e4e0ace3ee0c93ad2ebaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:72:61:08:4b:66:02:be:00:7d:77:ed:4b:
6f:0e:b2:36:e6:88:06:f2:5a:4f:fb:29:a4:5e:f7:
5d:ba:45:43:b6:78:03:06:0d:18:f2:47:05:18:ff:
e3:84:44:4a:a5:f0:79:0d:56:6f:ac:d6:b0:a9:a7:
19:02:4d:00:fd:83:89:db:fe:66:fe:96:28:dc:c4:
c2:f1:01:b5:10:7c:e6:42:e7:05:aa:cd:70:e4:aa:
f2:9f:ec:a0:b8:4b:92:9f:d4:39:4a:c8:49:92:d8:
fd:e0:4f:1c:e5:6c:74:03:f0:f4:a5:a6:22:ae:1b:
4d:61:3b:fc:5b:f3:c9:54:cb:c3:d4:dd:1c:20:d6:
3d:2b:89:d7:de:5b:9b:23:8d:6e:55:15:f0:e2:75:
22:55:9d:a5:b5:20:28:4b:40:d0:74:0a:da:a9:0f:
85:b8:b6:96:ab:3b:e4:1b:cc:81:c9:57:47:7f:71:
08:19:e0:6d:58:f9:4d:0e:92:e7:e4:cd:3b:98:f0:
f9:f0:6d:26:0d:54:04:70:7f:c0:77:83:a6:e4:57:
56:f9:f6:21:3f:34:46:27:23:48:7e:7b:04:03:31:
06:10:c7:f8:38:e4:53:80:8b:3b:13:55:fa:5f:32:
a8:40:36:73:39:20:6a:74:29:61:b5:90:e4:95:aa:
1b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EA:97:2F:5C:F1:7B:34:E2:6E:4E:0A:CE:3E:E0:C9:3A:D2:EB:AA
X509v3 Authority Key Identifier:
keyid:77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a5:ee:63:ae:40:0d:74:dd:ad:87:65:ad:28:0e:df:19:30:
a6:c6:8d:c7:84:ea:c5:bf:96:5a:4a:1d:ff:11:ac:aa:c4:79:
ed:a1:0d:11:1e:12:52:c4:a1:91:8a:81:9d:f5:fa:83:f9:0f:
48:f9:5f:ef:31:99:11:50:78:9c:49:d9:50:64:3d:7a:f2:96:
d9:bb:1c:fa:98:e5:b1:19:ed:db:7c:13:c6:ef:e3:1b:47:41:
dc:08:6f:c6:6e:1f:06:93:c6:c0:3f:54:d2:b0:fc:e9:9d:3a:
88:81:a7:9e:0b:41:2e:16:0f:dd:49:df:81:b0:c7:9c:c8:08:
33:d7:49:40:06:ba:ce:af:fb:73:ea:53:ac:a8:3e:de:e8:21:
ca:d5:7a:fc:df:11:73:c1:b5:c5:28:0a:c4:b4:0e:a0:d0:54:
33:d9:7d:14:f4:24:bf:3d:5e:34:21:75:da:c2:e2:a1:3a:0a:
35:a0:d0:7f:da:c4:0d:56:57:0b:60:9e:ea:0b:0e:21:c5:8a:
54:79:d2:4c:f1:b4:ef:cd:e3:55:5b:f9:49:7f:a9:f1:ae:3a:
1c:3a:33:36:ac:df:06:f9:7b:0c:f0:04:45:6f:3a:f1:03:84:
64:86:4f:ea:a4:3f:b9:6a:70:f5:64:a0:12:35:9d:45:d8:5f:
7b:57:c1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:03:49 2025 by rpki-client