Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
File: D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json)
Hash identifier: bCz9Ilf36BBJWUA+At/+Y5bLldoNyzIjzIP2fb57OXI=
Subject key identifier: 65:72:B1:00:2E:7A:E7:3D:5F:E6:76:F3:82:15:56:C8:3A:B6:EB:7D
Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Certificate serial: 019655DCC2D2F249785198104A3B10EDFA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
Manifest number: 04AF
Signing time: Mon 21 Apr 2025 01:00:53 +0000
Manifest this update: Mon 21 Apr 2025 01:00:53 +0000
Manifest next update: Tue 22 Apr 2025 01:00:53 +0000
Files and hashes: 1: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: qHQjrgU6oI9j1Sz6ZgjnXy/xaNe43RzJrEExHGOLPa0=)
2: dpEQqFiEzcBminPXKwfV-PABopw.roa (hash: aNr5tdVzzBcZX6IXpoVPaBnNNk42qKTnrWG6P7E7Joo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:c2:d2:f2:49:78:51:98:10:4a:3b:10:ed:fa:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Validity
Not Before: Apr 21 01:00:53 2025 GMT
Not After : Apr 22 01:00:53 2025 GMT
Subject: CN=6572b1002e7ae73d5fe676f3821556c83ab6eb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:4a:ee:af:ae:c1:c1:7d:fc:37:89:d9:f2:
bf:59:9b:94:53:41:c0:78:97:2f:04:27:33:6e:a9:
57:9c:75:e7:ea:b7:36:ed:4d:f6:62:75:53:0b:ed:
05:16:8c:5a:c1:8a:84:d3:a0:ce:bb:52:ba:90:3d:
4b:59:88:69:ae:55:f2:f4:c4:a7:9d:f2:2b:b0:14:
0b:b7:0b:2d:cc:e2:ef:ed:88:90:c5:ac:1a:e4:96:
1d:ef:f1:92:2a:3d:73:ec:33:f8:78:41:19:b9:de:
8c:ed:61:35:6f:61:e9:6e:03:c3:d6:e6:91:12:c2:
34:b6:cd:3f:d0:a5:95:5e:a4:89:8a:87:69:5c:f4:
3f:68:90:12:36:96:9d:06:fb:24:18:94:d3:ac:ed:
0a:83:35:90:af:35:81:37:f1:a3:de:23:47:39:7f:
2b:b1:90:fa:d6:3d:87:bf:05:59:9f:d8:76:90:a9:
ea:b2:03:b7:ed:75:07:eb:a8:56:05:f2:5c:29:ce:
cf:4f:c4:58:e7:2b:39:18:25:70:d6:b7:44:de:2e:
5b:8f:f3:d0:53:82:11:83:75:e7:b0:eb:87:df:1a:
24:d5:fd:6c:31:e2:b8:6c:ca:ac:24:d7:ec:75:e1:
79:ed:e7:a5:85:b9:cc:7b:6d:51:ae:0f:73:49:6f:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:72:B1:00:2E:7A:E7:3D:5F:E6:76:F3:82:15:56:C8:3A:B6:EB:7D
X509v3 Authority Key Identifier:
keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0e:df:ca:50:25:9a:5a:a8:bd:61:ed:e3:90:15:e9:73:ca:
31:56:85:d3:10:bc:fc:bc:ad:b7:ee:ac:f0:56:b8:ec:7c:81:
25:4e:eb:54:0d:8d:fa:e0:e1:3c:dd:13:57:10:80:d2:27:8e:
c3:4f:98:03:e3:b9:90:d6:50:97:02:d5:1c:a0:7e:85:6f:e4:
46:58:5d:63:2c:f8:ea:6f:0f:1d:62:d7:1a:03:a7:1d:22:40:
fc:12:e6:bb:f9:1d:e0:89:86:88:81:f6:fa:60:bf:9a:6b:8c:
2a:25:3f:3b:af:52:17:53:8f:92:88:49:1d:b6:e2:3b:51:9e:
5e:d3:16:4d:4d:9f:e4:82:22:aa:ae:ab:a0:93:96:0a:1c:46:
61:a1:33:1e:43:af:ba:b7:69:65:84:87:a5:6b:90:61:f6:01:
41:4e:27:35:8e:4c:79:b1:00:f4:5d:21:46:93:c5:72:eb:a8:
8c:e4:e2:99:57:d9:07:c0:84:b7:fe:ed:25:6e:8e:a3:e8:16:
c7:a7:84:ea:fd:77:9f:77:95:77:d3:38:09:64:2a:eb:36:74:
3c:54:33:7a:bb:60:3c:ba:9b:a6:21:f9:c2:1c:99:c6:ef:4e:
2a:53:00:76:78:62:ad:ac:c3:ea:49:ad:cb:17:bd:f5:74:d9:
d2:b8:22:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:02:24 2025 by rpki-client