Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
File: DhcO6FnpH0lz3kpXKxutLzpdGCU.mft (raw, json)
Hash identifier: yV66Ur7lrdmU3wTqj2zFH50icxn3PLPGfDiXkMd3dr4=
Subject key identifier: 44:07:01:31:8E:75:E1:B1:84:22:41:41:3F:72:24:42:4A:8C:86:0E
Authority key identifier: 0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25
Certificate issuer: /CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
Certificate serial: 01964C6C151E43DAD00051DAED2890C8FB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 05:01:13 +0000
Manifest this update: Sat 19 Apr 2025 05:01:13 +0000
Manifest next update: Sun 20 Apr 2025 05:01:13 +0000
Files and hashes: 1: DhcO6FnpH0lz3kpXKxutLzpdGCU.crl (hash: AbMlmVVkmhxtnqq7EtHthONRAwSc+K0X76K9PvS61Og=)
2: ULOFbzP3h9-3w0H4Yx7Si28ClYo.roa (hash: d25VIffAJQDV7vgvStWkaS/C+7kyYqCn7zctEo0yqWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6c:15:1e:43:da:d0:00:51:da:ed:28:90:c8:fb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
Validity
Not Before: Apr 19 05:01:13 2025 GMT
Not After : Apr 20 05:01:13 2025 GMT
Subject: CN=440701318e75e1b1842241413f7224424a8c860e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:dc:15:a2:f2:fa:89:98:ed:75:73:eb:2d:
9d:98:57:ca:25:5c:1a:51:6b:e2:97:85:00:03:03:
9d:b7:87:dd:25:f4:44:8b:8e:30:27:df:5e:9d:de:
f5:79:ca:9a:00:3e:2b:c7:12:86:e0:92:4b:99:6c:
1a:e1:7d:17:1c:60:a7:18:e7:2b:3c:91:a1:d1:10:
cf:57:77:00:76:42:f7:3c:eb:8c:6a:f6:d5:b9:32:
f0:05:4b:b0:0d:5d:52:5b:6b:53:eb:16:47:31:ee:
31:a5:6d:bd:66:16:86:16:6c:f0:b1:1d:13:53:3d:
15:60:74:e7:27:ee:37:d5:9d:af:1c:bf:5a:5a:e9:
67:e0:7e:b7:f3:56:29:e4:63:65:ca:60:16:33:c8:
64:0a:3e:45:42:d6:a0:36:48:4e:e9:f8:14:1d:23:
49:88:87:67:cd:9a:8d:58:66:5d:19:80:e4:3e:4a:
ae:6c:27:07:6d:7a:98:c2:1a:45:3a:9b:df:c9:f4:
1b:20:bc:c1:df:fa:06:9e:af:bb:94:3c:ee:56:0b:
81:86:4a:fd:e0:1b:7c:80:b6:a6:f8:cc:e4:51:2b:
9c:f6:e7:3f:8a:db:6c:8d:dd:37:06:85:4d:cf:75:
1a:5e:50:95:03:8d:ab:d7:4b:76:24:e6:bc:f5:ac:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:07:01:31:8E:75:E1:B1:84:22:41:41:3F:72:24:42:4A:8C:86:0E
X509v3 Authority Key Identifier:
keyid:0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b0:5f:bd:a0:d5:72:f5:e4:9c:c3:ed:2d:75:c2:26:e3:9d:
bf:6e:37:ac:82:4e:89:13:bc:b0:40:94:ca:8b:10:64:c4:fe:
d7:ba:5f:7e:a8:50:0e:a5:5b:d3:49:0d:a3:c5:49:45:4e:e2:
ed:f7:14:8d:84:00:cc:9c:17:22:8a:b6:6d:bf:29:d9:05:55:
d7:d1:fd:41:df:da:24:e4:70:a9:bc:e6:4a:54:8b:1d:2d:d8:
b4:71:b8:d1:39:5e:1b:1b:55:6d:82:e8:6d:e5:3a:05:5e:16:
5b:d4:46:0a:d5:ac:ca:99:c4:12:a1:dd:ad:a1:55:aa:6a:ca:
15:1b:52:ad:c4:0f:02:bc:17:68:e2:d2:b9:67:16:f6:72:ff:
51:e6:b9:a7:6b:38:ad:86:46:f0:b4:6e:13:f1:d9:80:34:94:
1b:a8:47:4f:a4:a2:10:3d:c2:38:bb:c6:9c:59:c9:6c:a3:db:
f2:7d:05:32:ab:31:84:d3:83:bb:ec:ef:bf:d7:93:77:b3:64:
84:ef:7c:3d:20:44:fd:7e:45:df:15:01:6e:2d:e8:d2:e8:15:
32:d3:36:f5:e8:10:da:ce:37:99:f6:18:a6:12:f2:3e:e8:b8:
8c:21:85:1d:4c:eb:b3:9c:aa:0e:22:6d:d9:60:fb:cd:f9:9e:
ba:cb:6a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:32:43 2025 by rpki-client