Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File: dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier: 0QyD3djq/TY6Rt2c+T4qdBI/HeqRCpxD/JWHyDL+0uk=
Subject key identifier: C8:3E:D7:30:FF:F0:F0:7E:58:11:C2:9A:7D:DC:9B:EA:DF:35:DB:1F
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial: 01958B1659DD6F644CC40A959A02382E76F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number: 1499
Signing time: Wed 12 Mar 2025 16:00:52 +0000
Manifest this update: Wed 12 Mar 2025 16:00:52 +0000
Manifest next update: Thu 13 Mar 2025 16:00:52 +0000
Files and hashes: 1: IW5MetDCMFGxu8rYzXXJLVfrEXs.roa (hash: PxElhxN0CgJUaapMy8lUadMMiJVr1RsLDM1uTzXhZNY=)
2: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: Dvp+Hts0CETD6GMLKu2VFqtXddd1M+0azTL7s0lcGjw=)
3: yzk3REVSGQxP3rEVAZsJQRpTPkM.roa (hash: dAn/JyxTOrxcNXrruPk6InrufFAxEVKtC99woebiErY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:59:dd:6f:64:4c:c4:0a:95:9a:02:38:2e:76:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Validity
Not Before: Mar 12 16:00:52 2025 GMT
Not After : Mar 13 16:00:52 2025 GMT
Subject: CN=c83ed730fff0f07e5811c29a7ddc9beadf35db1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:3e:f5:2a:3b:d6:ac:cf:28:d0:a3:e2:7c:
b9:78:68:1e:84:0a:54:f8:c9:c4:23:5f:5f:e3:a1:
de:aa:c3:08:ae:e0:8b:fd:76:67:f4:db:92:4b:39:
55:de:f8:fc:4b:d1:e9:76:1d:dc:c6:3b:a8:5f:23:
91:a7:fa:6d:8d:6f:49:ba:f4:a8:f5:f4:f9:53:9d:
20:54:ad:7a:00:4d:51:5c:2b:a8:96:89:23:bd:41:
35:a6:ef:e4:55:6b:c4:8a:a0:cd:ba:6e:7d:b6:6b:
a8:71:c1:ea:78:b8:8e:6a:b8:61:db:05:ff:b8:66:
5a:91:c7:5c:57:db:71:7b:53:df:24:c7:16:37:6d:
18:71:fd:b1:46:a0:84:ab:fa:95:f2:75:e1:17:23:
49:b7:6a:b8:d6:e4:23:06:ee:d5:21:1c:e2:6c:36:
46:e5:7c:2a:f6:a4:63:36:e0:9b:55:ff:e9:99:63:
be:9b:04:da:48:d6:f0:9e:c9:22:21:1a:b6:3e:4b:
0f:b9:15:7f:7c:c1:a6:ef:cc:b6:bd:07:2c:02:ae:
3c:69:2c:4a:9e:08:c0:db:4b:f0:4d:eb:a7:6c:4d:
7f:b4:a0:bf:62:1d:83:7b:42:a8:49:9c:ff:b4:2f:
e3:bf:f9:d6:de:27:ba:27:ea:a6:72:a2:18:e9:62:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3E:D7:30:FF:F0:F0:7E:58:11:C2:9A:7D:DC:9B:EA:DF:35:DB:1F
X509v3 Authority Key Identifier:
keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:16:c1:b9:79:72:69:2e:cf:8a:e4:3c:69:b7:65:ac:b4:d9:
d7:dd:92:5d:d1:e8:58:03:39:8c:4f:be:1b:a2:e0:4f:28:fb:
3c:85:2c:9a:9e:38:6a:54:9d:53:31:08:6a:51:e3:98:93:80:
96:bb:61:12:2a:af:87:ad:5a:bd:52:65:b7:7c:b7:94:b1:d1:
f6:46:7d:c8:3d:6b:69:78:30:02:95:0c:32:f9:84:84:d9:03:
4f:11:aa:49:b5:ec:1b:b4:1f:f3:11:6d:03:f6:a5:3f:81:0c:
fe:5a:b7:0b:de:8d:c6:aa:72:9b:a8:79:7f:c0:bc:e5:36:8c:
8c:7f:c6:00:26:0a:0d:d6:4d:7b:3c:e6:d7:7e:da:81:cf:7b:
61:ce:b2:e4:e3:ed:d7:8c:03:a7:d9:db:8a:62:44:9c:0f:68:
21:d5:64:91:a9:52:34:ff:50:d9:8b:0f:d9:52:13:eb:08:e0:
f7:9b:3a:56:43:76:a3:3c:a1:c0:61:41:ad:01:75:b5:5f:15:
d0:39:dd:d6:83:e7:95:be:4f:89:f9:12:d5:2a:cb:5a:3a:7a:
7a:f1:3f:38:6d:20:4a:b1:c1:2a:96:32:17:de:08:79:84:bc:
27:bf:55:78:a2:2f:49:18:73:ce:a2:6a:59:b7:eb:be:ad:ce:
f0:64:24:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:26 2025 by rpki-client