Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: RSWdAaNnYfx1OhMiU3igjxazydboZtfa27u4TsEUAuM=
Subject key identifier: 4E:DC:2F:01:60:65:BB:5A:D5:B4:AB:6A:18:96:65:62:DF:B0:7E:12
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 019655A5C4B91FB72A31F8224045369DDC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 1176
Signing time: Mon 21 Apr 2025 00:00:49 +0000
Manifest this update: Mon 21 Apr 2025 00:00:49 +0000
Manifest next update: Tue 22 Apr 2025 00:00:49 +0000
Files and hashes: 1: 1g3YzsLZ5QOCf6qi-eFi1LVqHQ8.roa (hash: +wFJ5tj+lSmxnwgEedsXBX4o8rthXQtXpU++hvEpCkM=)
2: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: 072bZ+y7IlOVkja0ipVIAKG9gtJtQIf5oTpHeU+Ef84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:c4:b9:1f:b7:2a:31:f8:22:40:45:36:9d:dc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: Apr 21 00:00:49 2025 GMT
Not After : Apr 22 00:00:49 2025 GMT
Subject: CN=4edc2f016065bb5ad5b4ab6a18966562dfb07e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:08:4c:e0:3c:0d:5f:4c:88:5d:e4:46:d7:13:
97:5e:8f:f8:ce:b7:17:79:a5:ea:b6:26:f3:c4:45:
8b:84:c9:69:71:c8:ec:65:b2:55:11:32:6e:1c:8c:
7a:be:33:bb:9c:35:e5:7f:82:dc:d6:43:05:49:ca:
8d:85:71:5a:a8:ea:ca:88:f1:f8:34:88:56:48:04:
aa:fd:00:6d:0e:b6:6c:74:25:e6:68:bf:ce:12:82:
e5:ec:13:da:5f:fb:8b:e2:bf:b4:db:0c:56:3e:e3:
ae:6b:9d:bc:96:7f:a5:44:59:eb:49:a9:b0:90:8b:
18:61:e0:4f:b5:0e:f4:28:38:be:ec:84:24:6e:20:
be:4a:86:4a:3b:4c:b0:dd:61:ee:59:37:50:8f:6e:
ea:8f:21:64:57:bd:52:bd:79:b9:9a:d4:dc:65:57:
02:8b:ba:05:b3:e8:69:8c:ca:90:c8:06:1c:c0:6a:
56:ca:63:72:a7:39:97:54:3e:ee:ba:f5:f3:c1:1e:
13:77:0a:9a:1e:05:d7:bb:73:33:b9:8b:2d:83:fa:
7e:b6:a5:81:0c:b2:66:02:f2:53:47:7b:f9:ed:5d:
c1:b6:e4:c3:a1:f9:38:0b:6a:79:bd:17:70:5d:a5:
a5:46:73:6a:f8:03:7f:1b:05:cb:a9:fb:c8:b9:5a:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DC:2F:01:60:65:BB:5A:D5:B4:AB:6A:18:96:65:62:DF:B0:7E:12
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:61:f4:94:55:f7:e6:2e:be:93:f5:6e:93:e2:e1:1c:3a:93:
eb:dc:77:7f:03:8b:d2:69:00:db:fe:55:50:43:5f:d0:19:1d:
20:87:a4:73:39:d8:f1:0a:64:6b:a2:ab:c9:11:2a:b7:cf:bb:
9a:23:fc:bc:ab:c4:41:7b:41:ad:88:2d:33:65:85:c5:8c:98:
87:ae:18:1b:83:8a:f8:df:7b:2e:3a:a1:89:3c:d7:87:d2:e9:
ad:34:13:b3:72:cf:3d:3d:4e:91:fb:ec:39:6a:7d:de:e6:a7:
e1:22:cb:42:66:59:1b:a7:ef:92:40:ec:4e:bc:9c:f1:01:a2:
89:50:8d:1a:c2:be:e4:11:93:f2:f1:06:97:65:11:78:ca:b9:
7f:c8:f8:6e:d1:84:e7:38:b1:2b:87:e1:83:91:31:06:03:7c:
99:c9:a3:73:54:fd:86:a1:f4:56:1d:e6:0d:c1:c1:8d:9f:c3:
51:14:8e:a7:b5:fb:00:5d:64:8a:e4:8b:47:47:90:f2:49:6f:
78:00:a3:f4:73:70:df:49:2c:39:35:10:ce:49:71:23:b5:2c:
63:ea:74:03:70:90:55:81:a6:18:cc:62:4d:ae:9f:e6:30:d4:
ac:6b:a0:71:51:fe:c3:bb:ca:48:86:26:a3:08:37:e7:9b:e6:
c4:8e:97:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:36 2025 by rpki-client