Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
File: DLXT6N3PUkwgwyOH7TED1MvypWo.mft (raw, json)
Hash identifier: tHjibj2i5l/J1MWN7KP0/EQVcrVETMNWAMkcz0IKyqg=
Subject key identifier: B4:69:D0:34:18:9D:E6:69:C9:CB:6A:66:68:5F:C2:BD:F4:91:6C:78
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial: 01965D96821A3C50BE7AC995E74F37838126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
Manifest number: 1507
Signing time: Tue 22 Apr 2025 13:01:06 +0000
Manifest this update: Tue 22 Apr 2025 13:01:06 +0000
Manifest next update: Wed 23 Apr 2025 13:01:06 +0000
Files and hashes: 1: DLXT6N3PUkwgwyOH7TED1MvypWo.crl (hash: oxyFPakrlTAfI/0AN2qARH/AoEJ2JjX+u1KmlrInunY=)
2: NmPkoiKmzvfxr2tE8qV8-CIZnCo.roa (hash: RU6vCeDfFthQ1YTFt3fi6pe99JectXQZEPhaEuKEkus=)
3: gIGqiCK0bC1pGcI5YkcQP3gBY1g.roa (hash: AYt4mi1gsvIajU9NsR145mbQ/0eGQGt615cxYTa3ACY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:96:82:1a:3c:50:be:7a:c9:95:e7:4f:37:83:81:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Validity
Not Before: Apr 22 13:01:06 2025 GMT
Not After : Apr 23 13:01:06 2025 GMT
Subject: CN=b469d034189de669c9cb6a66685fc2bdf4916c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:00:6b:41:91:99:55:62:e5:75:6d:97:14:b0:
bc:8a:3e:38:38:d2:62:d3:12:49:c1:56:37:7f:4e:
7f:fc:2c:7a:57:15:20:4f:e9:86:f7:d6:a0:ef:38:
39:3e:55:47:e9:cb:ec:7d:d3:a9:1e:1e:19:4a:52:
34:c2:ec:0b:5a:43:4a:90:b7:9f:d2:3d:7f:6c:9b:
9e:ba:fb:d6:26:ef:64:c0:ca:45:b9:95:b4:fd:8c:
8a:6f:03:dd:0b:e0:c5:6e:29:b1:86:95:66:a9:d2:
82:55:c2:67:4a:e2:7b:5f:56:81:96:23:79:66:68:
32:7c:7e:89:d2:22:68:43:a4:bf:34:e3:f0:99:b1:
64:99:45:06:e1:3c:1c:45:92:18:2b:36:15:84:e2:
38:a4:e5:c4:94:43:31:c4:e8:b8:f3:9c:fd:24:a3:
90:4b:79:7e:0b:c5:cd:19:a2:8f:52:1e:d2:2a:b8:
45:23:90:5d:aa:bf:bb:a2:f1:1a:40:36:f6:2c:d1:
73:22:13:ed:73:04:36:fd:30:25:e3:8f:b3:02:61:
3d:fe:f7:42:42:46:67:0f:0d:9a:09:65:32:31:82:
cf:7d:78:f0:e5:ed:c7:32:9b:fb:39:ef:07:35:24:
9c:62:46:cf:c6:42:ee:f7:be:5a:96:de:22:55:9a:
9d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:69:D0:34:18:9D:E6:69:C9:CB:6A:66:68:5F:C2:BD:F4:91:6C:78
X509v3 Authority Key Identifier:
keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a5:21:5f:ab:f6:d0:ed:0b:d2:24:8f:0a:8b:42:f6:f1:ca:
74:32:23:ed:0c:2c:09:cd:17:5c:12:ab:55:20:26:4b:3d:10:
e7:01:9d:c8:61:bf:cc:5c:ab:37:89:0d:d9:1d:8b:b9:51:c6:
a8:87:f8:0d:95:19:b1:70:29:7e:81:dd:e1:0a:3c:e2:36:ce:
09:b0:7d:97:fe:78:b3:60:08:c6:38:8e:ac:7d:fa:30:c9:54:
6f:03:fc:d8:53:8e:14:93:77:4a:10:e2:45:0d:17:31:01:aa:
ff:79:5f:ec:fc:9f:c2:fc:8a:da:8b:7f:7e:a9:22:71:68:c9:
ec:67:63:a1:9c:13:f9:ee:7e:d5:35:fa:07:e3:2a:30:b0:27:
a5:02:60:f0:19:9f:2c:82:8d:b6:8c:bf:ad:eb:db:19:9a:69:
32:ae:1d:fb:04:c4:f9:33:5a:b8:22:06:95:9e:b2:1c:02:75:
ec:b8:de:20:24:13:ce:c4:04:24:40:1f:4f:f3:c2:6d:c0:0a:
5a:31:d1:6c:12:45:d7:56:f5:a6:54:85:2d:6d:f9:c3:f5:1e:
9e:54:e7:1d:78:8c:25:1e:01:9e:92:0b:e5:eb:12:9c:91:b7:
de:e9:e7:a2:ef:67:b3:69:e0:20:78:28:6c:59:9b:36:b9:5a:
b0:86:f9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:54:19 2025 by rpki-client