Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
File: DkGjlotidBs200i-DSyRxdSxM6I.mft (raw, json)
Hash identifier: yO2XqrrhqZR2ESlGK/pePsuRqomgL+A0/doH3KQ9oQg=
Subject key identifier: 73:89:E7:3C:1C:81:81:0E:94:4F:AA:1E:DE:F1:C2:51:48:8E:6D:89
Authority key identifier: 0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
Certificate issuer: /CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Certificate serial: 01965E03E8D0A66DD4440CB61893072C5921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
Manifest number: 1503
Signing time: Tue 22 Apr 2025 15:00:36 +0000
Manifest this update: Tue 22 Apr 2025 15:00:36 +0000
Manifest next update: Wed 23 Apr 2025 15:00:36 +0000
Files and hashes: 1: DkGjlotidBs200i-DSyRxdSxM6I.crl (hash: 2I+sPRYqAX0BPziNB6gZYQcA6DbWxFIv5ihg8rE+2O4=)
2: nHnuu4F-Ic_WUkHgNlM9Go5lrwU.roa (hash: 5dkmrGwUAjAB3N+7M+2yibV5BDpF46oezVix+Yio7q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:03:e8:d0:a6:6d:d4:44:0c:b6:18:93:07:2c:59:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Validity
Not Before: Apr 22 15:00:36 2025 GMT
Not After : Apr 23 15:00:36 2025 GMT
Subject: CN=7389e73c1c81810e944faa1edef1c251488e6d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:82:4b:d2:73:29:ed:0a:aa:27:25:06:26:
05:80:7d:a5:f3:84:54:cb:b6:b2:1a:f3:2e:a6:38:
11:da:91:28:21:89:08:09:5e:3e:15:be:e6:2b:5d:
c0:9e:8b:d9:71:cd:f8:3b:4d:ef:68:1a:c1:16:99:
88:85:e7:1a:82:62:d7:15:62:02:dd:9e:5a:9f:a0:
d5:e0:b9:46:a8:57:b3:6a:1d:36:db:90:6b:8d:34:
93:6c:6d:16:3b:df:11:49:08:81:c6:71:e9:61:2d:
f5:08:ae:0a:04:3f:d0:17:a3:71:fe:af:3b:9c:86:
ca:b7:b1:32:e0:32:c5:cb:a1:cc:df:38:0c:fe:e3:
02:df:4a:7a:58:55:1f:fc:1a:d7:7d:70:ed:82:f2:
ab:7b:20:c8:11:d2:00:1b:c5:f3:b5:ff:2d:97:c1:
3e:4d:b8:85:ec:b3:21:41:e7:f3:8d:ce:6f:e7:95:
8c:ba:cc:0d:5e:8f:93:12:70:82:5e:7e:16:6a:3f:
ab:4e:35:10:05:20:5a:b1:09:0b:73:00:b2:e1:02:
2e:8b:bc:b1:0a:a2:d4:95:23:31:1d:27:4a:29:e3:
db:1a:1c:8f:15:69:7f:b3:b7:49:db:b2:e9:fe:f0:
2f:7f:cb:99:ab:34:1f:67:09:07:a6:bc:c0:76:24:
2f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:89:E7:3C:1C:81:81:0E:94:4F:AA:1E:DE:F1:C2:51:48:8E:6D:89
X509v3 Authority Key Identifier:
keyid:0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a1:c3:e6:bc:29:93:23:76:63:61:46:02:d4:bc:29:2c:52:
bb:d6:d7:6b:72:77:11:43:2d:ac:7d:81:84:9e:64:f2:a5:47:
a7:97:dd:ce:de:0b:4b:1f:a5:d4:53:4d:d9:1a:29:22:d9:ec:
87:24:02:0e:a5:41:7e:97:3e:9b:d3:62:8b:59:91:0e:35:9a:
9c:44:d8:05:db:87:d1:8c:72:8c:8a:db:c2:cb:64:13:8d:c6:
2e:61:f0:54:38:c4:b1:09:b8:26:32:87:e0:63:f2:1f:6f:2f:
2e:e6:03:e1:92:fb:23:53:da:12:cf:fa:bb:8c:95:09:18:02:
14:1f:47:35:63:a8:5e:5a:2d:83:f6:3f:ef:74:98:db:e4:50:
32:d6:54:6f:8d:e8:0c:e1:30:1e:ea:c5:bf:1b:31:35:ef:cc:
52:59:df:ec:a3:4c:b0:15:9d:d2:8d:2d:e1:e6:3b:62:d6:2b:
c8:a2:b0:07:c0:1a:23:3b:33:c5:35:77:d6:09:0b:d8:14:de:
28:66:82:c8:15:d8:4b:28:72:e0:e6:ce:d8:e1:3f:f3:72:a7:
d4:74:f9:f9:87:1f:9d:c1:a1:b2:58:3a:4c:fd:46:ea:62:7c:
54:3c:a7:73:c2:95:12:9b:16:0f:cf:af:c1:33:df:6f:bb:08:
6f:62:f6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:16:40 2025 by rpki-client