Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier: Pl/EJ7kTeP6WQurM3WhWiHRk/68s/XQ3oSI6OJpHBOs=
Subject key identifier: 75:0F:5D:FA:02:5D:5F:38:65:34:73:70:9B:51:FF:58:F8:A5:DD:65
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 0195903CBD15829B69141FD77361707774CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number: 0969
Signing time: Thu 13 Mar 2025 16:00:54 +0000
Manifest this update: Thu 13 Mar 2025 16:00:54 +0000
Manifest next update: Fri 14 Mar 2025 16:00:54 +0000
Files and hashes: 1: 4T7ohvim9PbetIc4Qlo9d9QA59Y.roa (hash: mTKqtI5PGB6Qq88qvBp2p7P3TnbGVtFteHmcAmCxgPg=)
2: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: 5SENcQYJX0XoVS2FFYpXFSQD5QkoUTQY4buR4UQJLmI=)
3: hoeiky0Yvquu-vh4T1lTnZlhbwc.roa (hash: TG3DycSrjgCYww4lJAKepUSf5xECf8vQNK+sCZjEIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3c:bd:15:82:9b:69:14:1f:d7:73:61:70:77:74:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: Mar 13 16:00:54 2025 GMT
Not After : Mar 14 16:00:54 2025 GMT
Subject: CN=750f5dfa025d5f38653473709b51ff58f8a5dd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:59:6e:6b:3f:2a:76:28:e4:6d:8e:09:a9:
52:4d:65:02:8e:0a:2d:39:9c:ee:6d:dd:d1:22:c5:
df:ef:33:c7:6f:67:42:6c:4e:e5:d1:dc:ea:3f:bf:
3e:86:77:d5:49:23:db:a7:16:0e:49:82:bd:78:de:
2d:b6:c9:a3:6e:57:60:7a:e0:3a:59:90:b3:fb:c7:
c8:0a:aa:a1:3a:3f:e8:eb:6e:e1:23:6c:eb:a8:2b:
5c:68:28:d9:2a:fb:2a:26:4c:0b:09:75:11:03:b5:
a2:ba:ef:8f:6c:a3:7a:9e:bc:e2:a6:06:e3:69:e9:
13:35:f5:9a:fb:9a:c5:8a:10:2f:d8:ab:da:27:0d:
ea:b0:32:25:5b:74:cf:16:18:09:c7:e3:12:1a:23:
f0:b7:6c:cd:0d:21:f5:7d:da:32:3b:4a:5e:31:9d:
73:9e:ae:a4:d2:51:d8:cb:da:5b:cd:fd:4d:33:ad:
b5:33:b6:f5:83:e6:e8:00:95:aa:cc:05:66:91:fc:
e9:6b:33:62:0d:dc:8d:ac:5b:04:41:9d:da:46:90:
22:a2:3d:14:25:76:20:c3:7b:fd:09:2f:ef:85:52:
cb:f6:cb:d6:5a:78:dd:d4:06:c9:83:3a:46:f5:02:
6b:66:51:bf:02:52:fa:6f:18:dc:94:ab:f0:b0:13:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0F:5D:FA:02:5D:5F:38:65:34:73:70:9B:51:FF:58:F8:A5:DD:65
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4e:12:40:22:8e:69:e9:3e:eb:04:8d:03:fd:fe:0e:bb:05:
1a:63:6c:ab:d6:23:3a:cd:f3:9a:db:c8:d5:75:f2:8d:be:fe:
c9:e7:d3:39:8d:a8:ff:a6:84:3a:8c:62:19:35:69:a4:3a:af:
d7:76:16:f7:e2:a4:32:b6:72:61:dc:0f:82:5f:e9:b3:d7:93:
88:85:a7:2e:61:ef:45:c2:7c:f6:c9:30:0b:f3:cb:4e:93:1c:
1f:b4:0c:66:18:99:28:40:c8:ff:c0:51:49:0c:ee:10:67:65:
b6:78:14:47:cd:9c:27:f1:d4:1c:45:5f:d8:00:cb:d5:05:ec:
eb:08:b4:92:92:47:8b:fe:8f:43:d5:f0:97:ff:7c:51:4f:6d:
61:6f:be:3a:ed:3d:8b:6a:7d:e4:94:83:01:12:2a:ad:62:53:
37:6d:76:51:82:fe:01:17:0b:a6:d1:46:a9:d8:90:0e:c1:71:
fe:fa:e1:44:be:4c:38:65:5e:c1:a7:31:9d:21:03:8e:99:7e:
d0:73:22:c2:ce:4f:ef:68:51:fc:3e:44:9f:a5:6d:9a:de:69:
65:45:4e:49:b8:33:1e:32:e9:35:77:a0:0b:a5:1f:54:6e:ee:
66:8b:78:0c:8d:df:db:f3:86:e7:4f:c5:26:cc:fc:a9:01:0c:
0c:a9:cc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:24 2025 by rpki-client