Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: rBY8vhcKbWxyYHikQlNvV1cVli844ssXzEFHWDbEfPU=
Subject key identifier: 5E:98:A3:EA:70:F3:C6:D5:AE:B4:01:5A:76:34:5C:DF:6F:66:AF:09
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 01964DEBD16A188C01131D6349C20CCDD070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 111B
Signing time: Sat 19 Apr 2025 12:00:22 +0000
Manifest this update: Sat 19 Apr 2025 12:00:22 +0000
Manifest next update: Sun 20 Apr 2025 12:00:22 +0000
Files and hashes: 1: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: OELmSy1jFQd0WUWWZlQz26s31XEWEMJyLJjbPZ6YdBM=)
2: GU3WIEeqeryj-R-zsa0cMuUQBHM.roa (hash: P0OhDT05+JAj4QXmTS/0O2Bzhb6RhdbVqJWFN0gOpmE=)
3: cIkzHkYil73CUQBJR_lXOc-rvck.roa (hash: rY7DgjrJWLfJoJzDxWf7uBXP1TGyTLjuDroDK6Z0PGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:d1:6a:18:8c:01:13:1d:63:49:c2:0c:cd:d0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Apr 19 12:00:22 2025 GMT
Not After : Apr 20 12:00:22 2025 GMT
Subject: CN=5e98a3ea70f3c6d5aeb4015a76345cdf6f66af09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:fd:01:a1:ae:3b:5d:d7:14:65:5e:3b:d2:
6f:45:ee:d3:ff:7e:e9:ea:7b:b6:89:64:5d:e3:76:
53:09:1c:43:52:09:75:24:ed:27:68:45:7a:f2:c6:
4b:ef:17:01:fb:54:00:10:ef:cc:ab:6d:f6:49:42:
fa:a2:ef:56:eb:42:e1:08:c8:09:47:0a:42:d1:67:
dc:11:e9:4b:fa:60:54:47:76:16:cf:16:c0:99:40:
6d:bf:a0:c2:b8:0d:c5:a9:a7:e5:70:a2:76:6b:82:
5e:5c:44:e2:c5:1f:23:46:3b:89:91:c7:27:77:73:
2e:42:ce:09:a5:43:e1:c8:54:e9:cb:c0:ea:fd:20:
b3:71:56:ee:12:23:54:b5:5c:77:6d:fc:1f:cc:98:
db:96:37:7d:6d:15:d0:9b:bf:da:b5:32:69:d9:f0:
91:ac:2e:d7:82:d1:00:11:da:bb:7b:84:ec:05:d0:
69:b9:e0:3a:02:d9:61:ad:9d:c8:7f:97:69:5d:51:
22:24:75:97:6e:77:d1:70:e8:da:a6:44:20:e4:78:
0f:84:e0:00:c2:30:37:44:e5:8c:2b:38:b4:39:9b:
19:29:0e:13:7f:60:98:4e:dc:56:77:3f:cf:c1:96:
56:1d:fe:a4:96:39:2c:92:44:9b:48:82:e5:be:c4:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:98:A3:EA:70:F3:C6:D5:AE:B4:01:5A:76:34:5C:DF:6F:66:AF:09
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:75:82:01:b8:66:0c:65:9e:cb:7f:73:14:b5:7f:8a:d6:22:
cc:b7:1f:8d:57:a6:12:49:cd:78:f9:ab:79:01:ae:a1:6e:21:
77:6a:e8:af:28:db:a7:4b:36:28:54:49:fa:f3:78:0e:f6:03:
90:b7:c8:63:35:88:8d:f5:cd:0d:a2:7a:80:00:27:33:0e:f5:
f2:d8:ff:b4:ce:d0:24:46:27:35:e0:37:5a:01:a3:c1:1f:06:
d4:ef:0f:a3:93:92:f3:67:87:3f:87:b4:fb:4a:ac:7d:96:aa:
16:b8:70:f9:19:25:93:11:73:8c:f5:bf:5f:0f:7f:72:b4:9d:
e2:3c:cf:29:02:a5:ba:fc:0b:ae:ab:6e:ef:3c:be:8e:0f:7b:
43:84:63:c9:b4:53:6e:ac:22:48:da:36:4b:0d:c8:81:95:dc:
dc:d1:3d:92:89:76:bb:f7:62:24:60:c8:82:4e:5f:a7:16:35:
e5:f0:72:a1:3f:87:67:09:07:7b:cd:f6:97:45:50:42:8f:43:
7d:46:b2:48:12:75:b8:87:09:3b:0d:bd:12:92:c6:0e:12:6b:
5c:2f:7f:12:5e:c6:ec:e6:3d:d3:af:b8:dd:ae:d7:40:2b:b9:
1a:78:c5:e2:a4:63:16:53:88:43:48:9a:d7:a1:2c:8e:98:a0:
ed:06:45:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:03 2025 by rpki-client