Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: dQyWM4G0XxMbP2+RmRmG5iqQFgY/cxCpqagdC55iSJc=
Subject key identifier: 73:A1:E2:76:B4:19:B4:0F:B4:F5:0B:73:73:20:FC:69:F1:24:06:7C
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 01965492BC2CA04A998A39DB20BE6A42FF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 0693
Signing time: Sun 20 Apr 2025 19:00:24 +0000
Manifest this update: Sun 20 Apr 2025 19:00:24 +0000
Manifest next update: Mon 21 Apr 2025 19:00:24 +0000
Files and hashes: 1: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: THDiyM0oKmMzQni/hYcHmSfjfV93hYBtCQCKS/8+4Qc=)
2: zQKrXmW9bWHdUqBWvY33a8SbMCE.roa (hash: HT0Uv7b54sK7sP7mnHeROBQjHCb1P8YG6jJ1hRPnfL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:bc:2c:a0:4a:99:8a:39:db:20:be:6a:42:ff:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Apr 20 19:00:24 2025 GMT
Not After : Apr 21 19:00:24 2025 GMT
Subject: CN=73a1e276b419b40fb4f50b737320fc69f124067c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:4c:bd:c0:17:6f:9f:66:e8:9d:ff:da:46:
f4:36:82:c5:fd:da:45:a5:2a:af:38:74:33:1e:8f:
46:97:f8:fe:bd:27:24:81:bb:4d:77:da:77:39:22:
6a:a5:5a:31:76:1b:0d:ad:4e:13:6f:2c:09:17:6e:
58:a9:cc:8b:b3:8b:63:83:08:89:66:21:db:55:92:
9e:4d:7a:4f:89:8f:93:62:a6:89:e5:5e:5e:5a:e6:
17:73:b0:7c:ca:c7:17:a1:ea:e0:b6:25:44:87:43:
b3:63:99:23:11:55:1e:48:91:a6:30:44:95:a5:d5:
a3:6c:6a:55:76:b4:bd:2e:df:6c:0a:13:b2:00:a0:
63:80:87:c1:e0:e6:b3:cd:14:f2:0e:c1:20:7a:5f:
60:80:75:b2:ac:94:a1:e0:94:9a:52:b3:a9:6d:9e:
f3:fa:0a:04:11:c3:d1:57:e1:0a:19:a1:e1:74:33:
9c:a0:11:ee:6c:08:e1:e1:b8:ce:12:b6:ca:8c:13:
26:7c:8f:1d:e4:18:29:1d:52:38:50:41:cd:d6:b3:
c7:ca:da:1c:e8:a4:c8:83:9f:d9:56:00:33:10:b9:
af:b4:cf:74:e4:e4:ad:56:dc:72:3d:33:22:d4:81:
24:c4:ef:4a:6b:0f:c7:cb:73:33:89:e2:50:04:05:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A1:E2:76:B4:19:B4:0F:B4:F5:0B:73:73:20:FC:69:F1:24:06:7C
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:63:3f:0d:9f:2e:a3:93:ee:0b:ba:f2:08:a8:10:e0:cd:3c:
39:10:1c:7e:d6:26:e4:27:10:0b:18:6f:be:b5:e3:de:09:63:
4d:4f:5d:3e:a4:e4:bc:4f:e2:4e:7c:8b:9b:06:88:d7:71:cb:
f2:56:3d:05:9d:2c:d6:f7:b1:5b:e9:75:8d:fe:11:59:df:d7:
de:38:2a:de:67:c0:ed:40:80:dc:b3:19:d6:60:bc:f4:f6:c7:
c6:8f:a8:2c:9d:83:35:21:02:01:55:73:ff:11:4e:a7:c6:e4:
a8:c9:bd:ba:e0:3f:80:81:33:e3:ea:fb:b8:2b:13:5c:0f:60:
08:09:70:89:b5:41:d1:e5:e2:df:18:2e:fc:05:a7:ef:cd:c1:
87:f9:f2:d5:32:02:06:0a:9d:9f:d0:18:8c:ad:f2:3d:cb:42:
f9:07:47:6c:78:c5:a4:1e:33:66:be:df:ad:e6:7e:a6:61:45:
fe:b3:4b:ea:b8:34:8b:4c:fd:b5:19:48:83:5e:19:ec:c3:17:
cf:13:2c:16:80:94:2b:7e:97:69:4d:43:37:60:12:c2:06:7e:
7e:f2:45:c3:6f:29:77:a5:b7:aa:02:17:c9:9e:c0:5c:1d:22:
ec:f8:b7:ee:4a:04:bd:9f:14:01:c1:ad:66:f9:0c:28:52:30:
c9:33:35:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:49:00 2025 by rpki-client