
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
File: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json)
Hash identifier: DYgF+LtRIFgQ7frRRmFX7I3hQRiISVKq5bKc+PFRWkI=
Subject key identifier: 4E:50:D2:C5:4B:8C:B5:E1:03:12:D8:A5:98:D4:AB:2F:BC:1F:91:AC
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial: 0196594B2B51877DBFB9E7B178ED959328AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 17:00:20 +0000
Manifest this update: Mon 21 Apr 2025 17:00:20 +0000
Manifest next update: Tue 22 Apr 2025 17:00:20 +0000
Files and hashes: 1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: vM/319KWX/4zEIzUYBWNklkoWUWD7Sa7WHL3c5vDQCE=)
2: S7t4ADi8YkG9eg6uqtMyBWESHWg.roa (hash: +5rpi63CqZGmWer4CfdRSdaUI1TBrV5YYVTKX63mbAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:2b:51:87:7d:bf:b9:e7:b1:78:ed:95:93:28:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
Validity
Not Before: Apr 21 17:00:20 2025 GMT
Not After : Apr 22 17:00:20 2025 GMT
Subject: CN=4e50d2c54b8cb5e10312d8a598d4ab2fbc1f91ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:58:05:f8:c9:da:fc:3f:14:56:c7:ff:14:
fb:e3:22:bb:b0:eb:1b:c6:5a:ae:c3:e1:94:c8:f2:
d1:8e:7f:a2:6b:cc:91:9b:3e:ce:9f:26:29:af:d9:
dd:20:b3:1c:a8:48:17:e5:55:58:47:62:c3:d9:e1:
ed:16:01:b4:8e:4c:72:90:bf:2d:53:ea:c3:78:3d:
2f:cc:04:5a:6b:e2:00:89:2c:6b:08:75:29:c0:60:
b1:e0:91:a8:80:11:37:b9:51:9e:34:3f:ba:a9:35:
c3:67:34:9b:79:f5:62:43:7d:18:b3:66:48:d0:cc:
05:30:25:26:19:51:b9:46:5a:42:eb:39:28:35:2b:
a6:92:a9:f0:7a:5b:89:0c:75:b7:6e:40:6b:ce:1f:
3e:c6:9c:ba:09:1f:8f:96:9d:34:04:f6:06:80:e9:
45:40:72:3e:78:39:96:32:e0:34:f2:f5:52:8a:95:
c3:11:a3:90:52:5c:4b:dd:1e:b5:69:ee:50:93:18:
de:84:f2:97:54:92:f4:f3:7c:1f:a8:30:71:cf:35:
fa:96:21:79:07:16:79:c3:d3:3b:c0:ae:23:40:2b:
b4:1f:72:2e:f8:6d:d1:1c:9e:b8:84:40:0d:58:1b:
f9:a6:bc:d1:59:b3:05:eb:6d:54:be:2e:cc:8a:59:
b2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:50:D2:C5:4B:8C:B5:E1:03:12:D8:A5:98:D4:AB:2F:BC:1F:91:AC
X509v3 Authority Key Identifier:
keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:55:06:e1:c7:3f:1d:30:36:b8:87:21:d1:b7:ed:f9:6b:55:
fc:9e:03:79:40:8b:69:05:8e:fe:ad:68:98:76:65:aa:03:fe:
d8:a2:47:00:ef:a0:22:1c:4e:70:33:ba:3d:f5:83:72:5b:fc:
92:3e:e5:01:2d:d9:4d:af:cd:22:6a:cc:6f:e9:fd:d6:55:48:
af:84:c6:f4:ef:7d:70:09:20:c8:b4:83:4c:47:99:8d:80:9a:
d6:cb:9d:07:a7:57:44:c2:37:cc:59:a3:be:b8:ca:c3:fb:aa:
48:3a:e3:6e:14:ba:f7:4c:cc:c3:f5:e9:d2:6a:ac:2b:3f:a0:
4e:07:f9:12:b0:b4:ce:41:d4:2a:6d:e9:fe:d2:d6:c8:87:37:
4e:69:bc:c7:8e:b0:39:ea:08:e2:a3:c3:ba:bd:a6:2d:f7:7a:
5b:c9:8a:a3:c9:d8:10:1c:ea:e0:5b:1a:38:86:fc:15:52:85:
e3:1f:3a:bf:9b:22:b0:07:5f:63:82:89:74:0d:19:f4:31:ea:
dc:2b:82:2b:4a:09:78:fd:f5:65:2a:2e:0a:17:cc:45:23:b2:
2c:06:1e:ac:f2:a4:5d:4e:c8:97:40:71:e8:99:00:5a:dd:25:
1a:55:3f:9b:57:0f:3b:98:e7:7d:ab:b2:c8:91:46:c2:73:5c:
77:01:ff:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:29:45 2025 by rpki-client