Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft (raw, json)
Hash identifier: GNhRXd4V3ZV94SgUiI+p7Dcw8mw5FFMjSY+ZxPuLNQQ=
Subject key identifier: E5:D9:51:EF:FF:20:7D:A8:30:28:BA:DD:86:85:9E:36:3E:D4:05:7C
Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Certificate serial: 019652DB241356B9E184C806AC305B4ECEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
Manifest number: 0C60
Signing time: Sun 20 Apr 2025 11:00:15 +0000
Manifest this update: Sun 20 Apr 2025 11:00:15 +0000
Manifest next update: Mon 21 Apr 2025 11:00:15 +0000
Files and hashes: 1: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl (hash: x8OdkShDCednfiEhlu8JG61p/v/g6N1ZETaLOirBMzs=)
2: zo9Y2aPXtg0v5rw18Mi_WOQc36Y.roa (hash: v9STSvD6P0pmUA0gxCp1HPZofea00hykboqUh1BCCCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:24:13:56:b9:e1:84:c8:06:ac:30:5b:4e:ce:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Validity
Not Before: Apr 20 11:00:15 2025 GMT
Not After : Apr 21 11:00:15 2025 GMT
Subject: CN=e5d951efff207da83028badd86859e363ed4057c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:de:62:70:bc:20:d6:8a:db:7a:9b:ee:1b:
f4:30:c9:ba:4c:ce:85:40:1a:9b:ee:31:34:e7:60:
80:fc:48:20:17:4e:70:1c:ac:0a:ab:0b:aa:66:81:
fb:f1:23:7a:77:43:78:dc:25:5a:23:d9:53:60:fc:
ff:82:4e:70:aa:b5:8c:5e:49:97:f0:f2:0e:92:ec:
02:8d:2e:83:6e:22:dd:94:a2:27:12:cd:c2:07:3b:
1a:c6:32:e9:1f:99:65:72:d0:06:1e:8b:31:a5:36:
85:93:ff:a9:9c:0e:4a:7f:1d:29:4e:7c:3c:7b:53:
22:70:67:34:1b:a4:a0:5b:72:ac:05:ad:38:d8:53:
32:f4:b1:0f:5a:a3:66:ed:ac:be:aa:6c:6f:79:f6:
85:b3:87:15:22:43:fc:b9:a5:52:34:12:08:12:d0:
3d:95:12:28:4b:34:94:7b:d6:19:8b:17:b1:17:98:
92:1e:1b:3c:4d:ac:65:1f:f7:8d:e4:08:03:b1:90:
9d:3f:33:92:6c:08:9a:b1:df:7a:13:c1:ce:da:7a:
72:ce:37:6e:b8:67:d0:71:fe:ce:93:3e:74:af:88:
af:29:aa:7d:e3:9d:6b:9e:df:cd:09:59:ca:2e:cb:
0a:e3:bf:60:fa:08:c7:ea:6e:1f:a5:09:aa:10:45:
d1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D9:51:EF:FF:20:7D:A8:30:28:BA:DD:86:85:9E:36:3E:D4:05:7C
X509v3 Authority Key Identifier:
keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:95:fe:8f:d9:0e:dc:51:f4:c1:05:8c:47:1d:12:de:45:64:
5e:89:73:b6:92:78:44:a9:03:ad:38:6e:4a:77:3d:31:f2:50:
56:ce:b3:db:b0:ad:21:95:98:7e:1e:92:da:21:ba:e4:02:54:
e3:c1:69:a3:6e:c9:a1:91:e7:7b:ef:6e:17:10:70:51:91:f3:
37:f7:d3:61:57:75:3c:2e:b1:b2:b9:37:bb:9e:02:99:47:b4:
3c:07:8d:1b:57:57:2c:c7:e0:f9:e7:9a:e9:27:34:c5:f8:51:
b5:2c:9f:50:90:e1:54:0e:0a:e5:41:9f:14:3e:78:f3:bd:4c:
2f:4c:8b:51:2f:d5:f3:cd:c5:0e:9c:23:aa:e6:39:59:c9:d5:
d1:77:17:85:96:34:5e:6b:e8:a8:5f:d3:11:be:cb:ca:4f:d5:
e6:47:f7:27:91:18:1b:75:c8:23:51:c3:fd:c9:b0:6b:98:cf:
4a:5d:56:f5:4e:53:9a:8a:42:8f:6b:5f:33:0d:5c:ca:1a:c9:
be:37:ca:07:1b:0f:21:0f:3d:36:2a:08:89:36:ff:44:1a:97:
47:69:39:9f:7a:72:e6:93:b4:5c:15:7d:2d:91:56:e9:1c:1a:
01:14:c2:dd:73:fc:27:c6:1f:79:eb:94:b9:c1:fd:75:87:0a:
d3:d0:ce:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:05:33 2025 by rpki-client