Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
File: DpXDrONm20G83CVsXVs75JCk92E.mft (raw, json)
Hash identifier: iaACgEzwjhoHcwKPf9QVq/eTIZ9yF0Efh4ac1xqdsHs=
Subject key identifier: 95:51:80:B5:A4:E5:E1:4C:B5:27:7C:C3:7E:4B:5E:CB:71:3B:06:13
Authority key identifier: 0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
Certificate issuer: /CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Certificate serial: 0196556E6B063BBD989C79673F8AF29C9F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
Manifest number: 0956
Signing time: Sun 20 Apr 2025 23:00:21 +0000
Manifest this update: Sun 20 Apr 2025 23:00:21 +0000
Manifest next update: Mon 21 Apr 2025 23:00:21 +0000
Files and hashes: 1: 1ILl-_jBl8vTjilNwWyLb_6kN84.roa (hash: ecF4kJW8L9z29VWA5l2Xp4iuCOJ3lYvBbDFUMxXyKfo=)
2: DpXDrONm20G83CVsXVs75JCk92E.crl (hash: O97a6UEWEFga/lIJBa8BU76tTMcLmNs3wnm4p2RcEwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:6b:06:3b:bd:98:9c:79:67:3f:8a:f2:9c:9f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Validity
Not Before: Apr 20 23:00:21 2025 GMT
Not After : Apr 21 23:00:21 2025 GMT
Subject: CN=955180b5a4e5e14cb5277cc37e4b5ecb713b0613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:c1:24:3c:84:fa:a0:3a:1f:41:e3:ac:26:
93:4d:01:5b:38:56:b7:d6:a2:bb:1a:c7:a5:eb:7d:
0f:eb:39:18:f7:bb:80:00:83:0e:f6:16:e5:2e:65:
1d:38:1f:af:83:8c:79:e9:c9:37:7f:ee:02:d7:d7:
5e:37:31:00:42:38:25:ee:05:83:6f:aa:cc:99:da:
9e:48:03:bd:1f:c9:10:c5:c0:56:e2:8d:34:00:f3:
5e:cb:59:02:8c:e8:74:50:41:3c:f2:cc:df:e1:bb:
27:c8:f0:47:2a:8e:64:95:d6:a5:8b:ca:a9:af:36:
22:2c:99:0a:b4:53:83:1b:36:8d:fa:f5:c6:94:e6:
62:e9:28:52:ef:60:40:04:a7:be:92:52:e6:a8:39:
5e:10:03:b0:87:71:58:74:a7:2b:02:af:4b:e0:9e:
fc:a9:90:8e:c5:0f:f5:ee:2c:4e:ac:d0:6e:bd:cd:
b9:58:e7:3f:ce:7a:61:50:60:b1:a1:0b:c3:11:07:
23:b6:b7:bf:b7:ea:9e:e5:b0:6c:68:1d:68:cd:20:
9b:f0:13:0d:40:8f:67:7a:f7:d4:8b:a5:da:15:cb:
7f:42:7e:88:ce:d7:3b:f7:54:1d:27:1f:5e:8f:60:
cd:ce:5f:ac:80:00:4e:f7:a7:29:58:36:56:54:f6:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:51:80:B5:A4:E5:E1:4C:B5:27:7C:C3:7E:4B:5E:CB:71:3B:06:13
X509v3 Authority Key Identifier:
keyid:0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:40:e4:9b:ad:f5:d2:a9:16:f1:96:08:e3:a4:60:08:c6:be:
ec:d7:9e:f4:00:a7:45:dd:21:b6:8f:e3:6a:64:4f:4b:cd:a6:
8a:43:9e:a2:6c:36:6e:fe:99:ac:83:52:c4:b2:36:56:2d:84:
cc:f6:0e:66:1a:dc:e2:8e:a2:c8:d7:87:28:ee:b8:7d:2a:39:
c2:83:31:4f:a0:9c:05:30:65:a9:78:9c:8c:2e:b1:20:b9:e1:
0b:a5:f2:98:f5:5a:e5:7b:4c:cb:10:c9:0d:00:84:4e:10:c9:
86:e0:62:01:c9:3d:50:72:fe:c6:c9:fa:89:95:6e:61:81:60:
0b:59:f2:85:53:70:12:7c:69:dc:06:36:f0:25:cf:8e:28:92:
12:da:98:6a:c9:62:24:44:e8:00:8e:e6:50:7d:5a:48:a0:f8:
32:2f:b9:6b:a4:2a:70:31:35:fa:82:9d:cb:e6:38:92:ec:75:
19:17:ff:b6:ba:33:14:08:6e:e2:d7:f4:67:c0:d4:9e:0f:9d:
76:58:3c:bc:28:01:75:88:e7:34:4c:77:36:7d:95:32:af:c5:
2f:43:47:f1:0c:92:41:fb:f9:e9:94:e6:a6:e3:b8:16:42:30:
ad:0e:d9:4a:50:b3:e7:f2:75:df:32:aa:ba:bc:1b:e7:6a:a7:
61:c6:d5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:49 2025 by rpki-client