Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json)
Hash identifier: D3gkf5bW/jX0eUi5l+wGiKtOPOr52tYp8yAVqacatpc=
Subject key identifier: B6:0B:52:FD:AB:42:89:65:07:0B:98:0D:57:13:45:29:8D:E7:C4:70
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial: 019656EF27488D93BCBE3C1323CFCDA977C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
Manifest number: 0960
Signing time: Mon 21 Apr 2025 06:00:35 +0000
Manifest this update: Mon 21 Apr 2025 06:00:35 +0000
Manifest next update: Tue 22 Apr 2025 06:00:35 +0000
Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: +U5lcHK+OIdX/bRLbKWwSLY//cuefeMb2dnbOcfIGVk=)
2: oeUHXPRVWNrr1QJirrKSZQy6zrU.roa (hash: SxbvFYL3nEPIvag7xzWrtYfbRcEggJtZoR9CvV7aWPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:27:48:8d:93:bc:be:3c:13:23:cf:cd:a9:77:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
Validity
Not Before: Apr 21 06:00:35 2025 GMT
Not After : Apr 22 06:00:35 2025 GMT
Subject: CN=b60b52fdab428965070b980d571345298de7c470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:ef:53:6c:d3:05:31:9b:92:65:d2:08:67:
dd:f8:b7:46:99:ea:1d:82:fd:ef:c4:31:50:c1:a8:
da:99:12:41:99:09:3e:44:35:5b:11:ed:af:bd:94:
40:ca:70:c4:f3:80:31:02:25:2a:92:de:eb:96:5d:
f2:46:c5:45:91:21:95:99:e2:59:6e:ff:0f:77:1a:
07:a1:58:f6:0b:c1:8d:14:85:0a:31:8b:e3:6f:fa:
11:ee:44:f0:b4:a7:33:71:ac:b5:78:25:9e:1a:ee:
45:cc:ed:71:5a:62:e2:d7:42:02:42:83:33:59:d2:
dd:f1:93:6a:fc:91:cb:ac:e1:7d:a8:66:9e:9e:93:
17:8d:0f:bc:38:79:a4:d7:54:e8:e3:2f:05:d3:f4:
6d:46:c4:2f:f5:eb:1b:f9:d4:fa:1b:ec:1c:20:bc:
07:36:14:04:a7:b2:a3:ee:a0:dd:36:81:2c:99:90:
4e:b6:13:0e:70:be:7e:35:fb:9b:d0:c5:40:25:c3:
7d:8d:c8:e5:54:85:08:47:0d:8b:51:9f:b5:34:31:
2d:54:90:cc:b1:d4:92:58:a7:7d:6f:2e:f1:e8:26:
e2:46:ac:4d:d7:f8:9d:1b:3d:f7:37:b0:70:c7:70:
40:e4:a0:6a:23:45:ed:35:26:10:b9:fb:b7:53:1a:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0B:52:FD:AB:42:89:65:07:0B:98:0D:57:13:45:29:8D:E7:C4:70
X509v3 Authority Key Identifier:
keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fc:dd:dc:9f:92:4d:35:58:f3:e8:f5:d4:8e:f1:d6:55:05:
dd:29:83:16:74:13:ab:b3:5c:1e:e4:ba:7c:90:77:ba:63:8f:
66:6d:96:50:f9:c0:73:1f:fa:fc:18:60:3b:8a:b6:2e:01:07:
ab:66:3d:75:5a:68:13:09:09:ac:fd:9c:08:cd:a3:84:45:71:
e6:12:c9:66:49:66:04:7c:83:4b:f8:13:cd:25:cd:c6:39:2d:
26:c2:92:05:22:0e:70:3f:cc:54:51:6d:7d:53:8a:67:0f:50:
3b:8e:c2:8c:91:42:f4:39:b1:dd:74:b9:69:eb:44:29:0c:34:
12:72:fa:72:1f:e5:f6:73:06:fc:fb:28:be:3e:6d:11:4f:b6:
0f:44:e6:78:cd:1d:da:de:b1:b9:64:50:c0:4e:31:35:8c:78:
c2:3b:0c:21:fd:43:cd:8f:69:89:29:55:64:e5:dd:7a:8e:32:
cb:d8:36:b7:18:46:fe:54:76:48:8a:3e:ff:53:ea:2a:22:a0:
36:2a:7f:53:f5:ed:ad:27:a3:ae:6a:d5:e0:79:61:24:dd:4c:
bf:58:85:03:26:02:e8:62:35:41:c2:a9:7f:c0:bc:93:28:51:
ef:91:6b:98:3d:8b:87:e5:5f:fa:57:f0:f2:0b:26:91:f2:38:
ed:46:33:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:28 2025 by rpki-client