Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
File: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft (raw, json)
Hash identifier: KJwo7QDXPshfsqVkWTZ5s4zu3GMZTqqHUsDtT7pYvM0=
Subject key identifier: 8E:C6:CB:68:6D:09:67:35:A8:1A:EE:AF:32:49:E2:43:CC:CF:D3:7E
Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Certificate serial: 01965537FA1CE91BD5111886982FE4FDE769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
Manifest number: 1504
Signing time: Sun 20 Apr 2025 22:00:53 +0000
Manifest this update: Sun 20 Apr 2025 22:00:53 +0000
Manifest next update: Mon 21 Apr 2025 22:00:53 +0000
Files and hashes: 1: AGpWRsY_xlGvwtNQWAnABWymQ8A.roa (hash: pZbxN4jH7CXcAGUCPIracQWWJ5Fx7UpJPwtV6JB2GN4=)
2: BCBgNqu47uxxNNiHpeHJ8N3bbPk.roa (hash: YwTUOz8aV/A2kQXL80C7PIKK4Uk0yf33ChXiFW3offA=)
3: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl (hash: OOsfR6Io/XAe8fJLPWLVYfmoQ60B1eeQr+xt2f+U3eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:fa:1c:e9:1b:d5:11:18:86:98:2f:e4:fd:e7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Validity
Not Before: Apr 20 22:00:53 2025 GMT
Not After : Apr 21 22:00:53 2025 GMT
Subject: CN=8ec6cb686d096735a81aeeaf3249e243cccfd37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:ca:28:dc:29:37:12:ac:5b:25:c2:ff:7a:
59:17:3b:63:02:76:1b:6e:30:e5:62:6e:4c:9b:3b:
9b:91:2a:a7:e1:e0:fb:bf:f8:b0:8c:b9:6c:39:a3:
71:5b:26:21:ca:cd:36:e9:eb:42:b3:ed:6c:d1:01:
22:35:6a:ee:8d:0f:c3:56:09:d2:11:e6:cc:15:33:
ad:68:8d:f4:90:bb:b6:72:b1:f7:fc:90:34:6a:0b:
1a:27:8c:f4:dd:ae:66:b6:e4:5a:50:ff:ff:03:0e:
e4:c4:6b:c1:e7:72:56:cb:fc:fd:8b:a0:bf:1f:08:
87:a9:d3:a7:12:60:7b:f0:7b:bc:3a:bb:07:19:1b:
74:18:0f:a4:44:db:2b:c8:60:86:2c:2c:4a:f3:e3:
42:1c:1e:9b:97:36:f4:b1:9f:aa:4a:6b:3a:0d:1b:
52:4d:21:1d:fa:7c:e1:59:28:c8:3e:49:e5:18:40:
c4:93:3c:56:fa:52:1a:d1:b8:4a:23:c5:38:4c:9c:
38:c7:b5:5e:c0:f8:71:2c:60:57:09:fb:11:8d:98:
65:8a:74:7e:59:c7:46:2e:7a:17:62:2d:7b:eb:70:
ab:46:99:ab:39:7b:49:c4:bd:05:93:e7:7e:bc:0a:
3d:2e:c5:d1:22:b2:86:1a:38:b3:30:88:eb:df:ef:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C6:CB:68:6D:09:67:35:A8:1A:EE:AF:32:49:E2:43:CC:CF:D3:7E
X509v3 Authority Key Identifier:
keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:95:70:a1:f9:26:74:eb:e3:67:5f:fd:43:98:bf:f0:ec:06:
61:86:44:72:cb:e0:c8:df:c8:38:ca:84:d2:05:f5:ae:53:48:
ed:00:e7:6d:56:a6:68:68:13:ba:a7:6d:df:ae:f8:d2:ea:c3:
5d:74:98:70:28:e8:65:1b:8d:a2:f3:df:81:97:6f:9a:98:21:
b9:3c:17:22:01:61:68:3b:ea:10:d0:c9:16:40:06:e1:3f:95:
29:f8:e2:f2:3a:a1:2a:e8:b4:ce:0c:8f:8c:8a:56:68:f6:03:
59:69:9f:31:35:d5:39:bf:51:88:f6:41:f0:e4:fc:7a:bd:2c:
a4:8e:a4:ad:f5:30:ec:01:a0:6d:d0:9e:3a:c4:0a:f5:06:bf:
67:d3:be:8c:18:ee:e0:ee:5a:ed:cf:d0:3c:5f:5e:77:00:dc:
a0:87:49:0d:92:86:68:e6:ef:5d:46:b4:b6:92:33:74:05:ff:
1c:99:42:6b:88:cb:54:8b:58:42:e6:66:5d:06:e8:26:58:0c:
87:73:99:8f:33:d0:56:ab:fb:c9:3d:0e:1f:da:77:6d:94:23:
b1:ce:dd:e4:22:23:24:5c:8b:32:91:b2:27:09:e4:7e:28:d9:
64:23:2b:63:c1:ea:3f:5c:72:83:90:26:d2:2d:4b:5c:ae:fe:
3b:b2:ac:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:52 2025 by rpki-client