Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: Yj44Vehb4uw1dS5y8JgTOUvd4Xb8cFOg9yo/RP5IurY=
Subject key identifier: 3E:BA:25:DA:4E:A4:A2:2F:33:6E:12:9A:C8:FC:69:E8:06:DE:CA:55
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 019655009008731161F5C9BF6113A3B47B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 0BB9
Signing time: Sun 20 Apr 2025 21:00:22 +0000
Manifest this update: Sun 20 Apr 2025 21:00:22 +0000
Manifest next update: Mon 21 Apr 2025 21:00:22 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: 0MDUpfGjLHBZsSs/VK9LBe0T435frwIWtpYGEuERCBY=)
2: KKoVkt36UzhB8KBbFPImmZW73vA.roa (hash: GhpkIl47GYlGJw2nWrVttpHKLmkRE0ZfoRg/RpNRI/I=)
3: fMybGYR-8tzcLwLk9F7xQBZ6-N4.roa (hash: Y2XsWw7qdiuLK4RPieRUDih+9enRniyBYvTmKwdcDsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:90:08:73:11:61:f5:c9:bf:61:13:a3:b4:7b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Apr 20 21:00:22 2025 GMT
Not After : Apr 21 21:00:22 2025 GMT
Subject: CN=3eba25da4ea4a22f336e129ac8fc69e806deca55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:1e:21:ac:0f:be:6b:8d:4d:9e:ae:e9:c1:
2b:9b:bf:51:12:ff:d9:3a:35:23:8b:03:3f:08:84:
13:0c:2a:66:34:99:00:1c:bc:07:52:ca:97:9e:1d:
c5:17:7f:bf:5d:a9:59:93:40:c4:e1:c5:ec:ba:22:
8a:3e:aa:6f:2c:40:81:bb:6b:51:2e:34:69:25:2e:
69:92:ea:4e:a0:87:b2:34:ac:b7:ae:0c:89:47:82:
c4:42:af:4b:6f:7d:87:e4:a7:26:b3:b0:6c:08:06:
5d:d2:9c:e0:92:11:03:b8:dc:b0:36:d2:5c:55:cd:
bf:56:c5:c3:c5:b8:f9:05:91:6f:86:1d:77:fc:bd:
c5:75:b6:53:69:76:5f:d4:cf:de:7d:7d:af:eb:e4:
6f:30:fd:83:41:85:63:15:73:8f:10:f8:c3:0b:45:
e1:b6:0a:e8:f7:3e:26:9c:00:e4:c0:1b:90:fd:69:
ab:e5:43:7a:a9:5c:d5:aa:9a:9e:8b:ac:ef:33:37:
30:7d:a2:2f:bb:53:f4:5a:64:e1:cf:05:50:97:00:
51:11:48:1b:5b:3b:a2:4a:3b:c6:d0:f3:e4:da:6e:
3d:30:33:90:97:69:d5:46:0c:f3:21:d2:2f:8b:88:
c1:1f:67:8f:43:58:b3:a9:75:49:52:fe:b4:3b:bb:
24:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BA:25:DA:4E:A4:A2:2F:33:6E:12:9A:C8:FC:69:E8:06:DE:CA:55
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4a:4b:f4:5b:7f:9f:1d:7c:28:f9:64:de:32:5f:55:f8:15:
60:9c:d9:1b:ba:01:56:52:12:f2:4a:3e:41:57:ef:cf:28:83:
d6:84:fc:36:87:6b:8e:d2:0c:55:17:93:1f:a7:4b:03:c0:05:
d2:a5:91:d5:d9:f7:71:26:56:d9:dc:d5:60:94:9d:74:a2:15:
0e:94:38:b2:29:b1:19:30:e1:0c:3c:a3:46:38:47:9f:94:b4:
fa:55:eb:91:7a:e1:ea:54:13:af:f6:9c:45:44:8d:d7:12:c5:
6a:d5:8d:1c:bc:f4:04:9f:bf:63:b6:b4:50:45:a8:96:48:6d:
30:60:ee:b8:a8:f3:f5:2c:55:76:1f:f6:47:20:ce:27:40:a6:
a3:15:eb:6f:b6:80:55:61:fe:6d:0f:d1:e0:94:89:0f:ae:42:
00:ca:7b:ea:d7:84:42:14:89:1c:90:8e:ad:49:34:d3:df:ae:
41:c6:2c:f9:ef:56:94:67:a5:ec:bf:c9:d0:66:40:28:f5:c8:
18:35:63:3c:cf:07:5a:45:f5:87:7d:91:ae:2c:83:f6:29:85:
6c:76:bf:53:8c:6f:82:5f:a3:64:f8:8a:20:60:8e:b8:bb:29:
10:07:f7:4d:d6:4f:aa:53:cf:fb:66:61:8f:e7:39:3e:ac:5f:
57:87:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:31 2025 by rpki-client