Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
File: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json)
Hash identifier: eHXV9HJlSBccCORITbw7pfsdkKJie9Od3B/klBCeje8=
Subject key identifier: D8:E7:C0:A1:89:DA:AD:9C:CB:41:CB:5C:BD:93:BB:CD:E0:C2:77:A2
Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
Certificate issuer: /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Certificate serial: 019655A5450D8E7719315399C918D16D94AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
Manifest number: 0349
Signing time: Mon 21 Apr 2025 00:00:16 +0000
Manifest this update: Mon 21 Apr 2025 00:00:16 +0000
Manifest next update: Tue 22 Apr 2025 00:00:16 +0000
Files and hashes: 1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: r+g6qT8XkR2mbY1Qsi1Ncb6KOa4lfM8vykk2GFW/NP4=)
2: YO9Rv4O7mqZvQ72FaV8J_c91SqM.roa (hash: 2QIlFXVhcWVwoyEM0B/+slqeXVtc2ygy29IyQzPmBpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:45:0d:8e:77:19:31:53:99:c9:18:d1:6d:94:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Validity
Not Before: Apr 21 00:00:16 2025 GMT
Not After : Apr 22 00:00:16 2025 GMT
Subject: CN=d8e7c0a189daad9ccb41cb5cbd93bbcde0c277a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:d6:2a:6e:13:25:f4:e2:d7:9c:ea:26:1c:
55:17:0a:18:61:41:b3:92:ca:2c:07:cb:14:9f:1c:
b7:cf:da:d7:72:5e:52:47:92:6c:03:5c:7f:97:dd:
f1:00:eb:da:0e:47:80:24:3b:97:3d:1f:48:76:8c:
3c:16:53:b6:0c:a6:f9:a0:01:d7:9b:ed:41:97:15:
7f:d2:8e:22:14:e6:25:21:8e:af:38:87:e2:99:be:
a6:a7:e6:44:32:41:6c:2c:40:21:15:b1:25:7f:33:
cb:cf:e5:c9:3a:41:fb:89:18:97:04:0a:2c:15:62:
3a:a9:14:10:78:a8:41:1c:df:3a:b7:da:a4:84:f4:
ef:2b:83:a1:ce:75:4c:51:22:6a:b4:14:f0:6a:05:
33:9d:0a:1c:37:35:ba:5f:e9:37:ca:b3:fa:d2:7f:
1f:81:d2:9a:72:e6:76:61:e6:06:c4:6b:c2:af:6f:
17:5a:db:40:4f:2e:1b:a8:74:b3:ef:37:c0:c6:fd:
ef:84:aa:df:44:a4:56:ca:0c:98:bd:84:8a:41:cd:
23:48:42:b0:77:75:9e:34:73:96:e6:58:1d:33:d6:
e3:24:f5:9e:57:eb:c5:1c:39:d2:ff:b1:08:e8:2f:
de:38:33:e9:54:35:1a:31:25:0b:84:63:2c:8e:f8:
ff:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E7:C0:A1:89:DA:AD:9C:CB:41:CB:5C:BD:93:BB:CD:E0:C2:77:A2
X509v3 Authority Key Identifier:
keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f4:7f:b5:ad:68:40:87:8d:97:43:e8:4b:4e:71:a7:d0:c8:
74:1c:cf:d8:27:ea:64:9a:ff:e1:f3:0a:1e:0d:b2:d9:68:11:
38:d7:70:d5:00:0b:54:ac:25:ae:e7:73:4b:83:60:a8:e0:91:
9e:94:1e:b6:52:5b:bd:d7:67:e9:84:48:4d:3e:d4:fc:87:4f:
d0:e9:74:97:6b:4b:e5:d4:f2:75:b1:61:e8:37:a7:d5:6b:83:
42:d9:3a:15:24:ce:39:5c:66:ce:e6:77:f7:92:67:83:77:cf:
df:e2:7d:f8:65:75:47:14:67:ec:4c:bd:4c:39:24:88:03:5a:
f7:2e:d8:d6:62:11:17:f2:1b:bb:eb:7e:a3:59:25:73:1c:f7:
16:9b:5a:e0:bc:af:dc:c3:87:41:02:35:2f:dd:e2:4b:21:c9:
e7:b1:7b:32:33:2e:c0:01:d5:19:31:28:b6:57:06:99:4d:1a:
97:c9:5f:01:1c:39:a2:3a:41:d7:4f:58:56:1f:f5:3f:b0:1c:
e8:68:28:f1:80:a6:d7:01:bf:22:79:37:ef:b1:db:15:ce:b0:
6c:28:e0:d1:47:3e:12:2a:2f:ec:51:a0:2b:cf:7d:4c:2a:38:
50:6c:18:55:73:58:f0:5d:ad:63:19:81:f4:01:14:cd:c2:e7:
73:61:68:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:25 2025 by rpki-client