Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
File: DgXmzqSzk0XOKQLJeh26vLRtKjs.mft (raw, json)
Hash identifier: +hqLpUsYfKDMMN67ljXxmwE1zfYLv+U7G5H6toDcZP4=
Subject key identifier: 02:7A:21:BC:F5:4F:8E:33:E5:14:04:F8:0E:DB:E7:7E:3A:D8:C5:E8
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Certificate issuer: /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial: 0196545C6ED641A6B9C219CE498FDF4F4840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
Manifest number: 148E
Signing time: Sun 20 Apr 2025 18:01:05 +0000
Manifest this update: Sun 20 Apr 2025 18:01:05 +0000
Manifest next update: Mon 21 Apr 2025 18:01:05 +0000
Files and hashes: 1: DgXmzqSzk0XOKQLJeh26vLRtKjs.crl (hash: ezvm9is5yCjNWMhTCjlpo6A6d+kaLiw3MFSMrVGKrYA=)
2: ShuJCzTETjuD4IZyp5iTy1w6Ut8.roa (hash: fk95k0odtKaBXDPO6LkbFL/8lMCWYiJ12TM7p4C2lgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:6e:d6:41:a6:b9:c2:19:ce:49:8f:df:4f:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Validity
Not Before: Apr 20 18:01:05 2025 GMT
Not After : Apr 21 18:01:05 2025 GMT
Subject: CN=027a21bcf54f8e33e51404f80edbe77e3ad8c5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:0b:3e:4a:d5:6f:e4:db:85:78:cf:46:d7:
0f:e6:fa:a7:a7:82:2a:6c:b8:48:10:d5:17:c9:b0:
02:b3:5b:3d:fd:f8:36:42:c1:a4:8a:0a:d1:f4:bb:
8a:ee:00:70:d9:fa:fb:de:47:91:2f:42:3c:5b:38:
bb:be:19:1c:e7:3d:35:83:3f:f3:95:04:6d:d9:f1:
7b:76:15:bb:8e:ef:d6:a1:1d:15:bf:c6:f5:63:12:
91:cd:76:9c:bd:c8:a8:d9:d5:dd:87:29:a7:8d:56:
c6:b8:86:7f:e3:19:f8:dd:85:f3:01:02:e8:3e:a0:
dc:41:31:ce:dc:96:f4:41:04:33:3b:3b:85:0d:59:
8c:f1:6d:85:9a:07:20:8b:00:d4:18:ad:7c:ee:16:
aa:43:cd:95:db:02:12:b4:3c:d1:a6:29:92:68:c6:
de:40:ea:0b:a9:76:be:8b:6f:00:89:74:50:a6:9b:
82:e8:b4:53:d5:84:4b:d6:11:8f:e8:fe:9f:e0:81:
e0:35:bb:1f:75:cb:e2:7d:4c:7e:9f:7b:97:9f:57:
87:1f:d5:40:08:b2:54:b8:5e:d5:4b:1b:8f:9f:a2:
a9:d9:e9:bb:af:7a:b3:63:c6:ad:ae:ba:48:78:2c:
66:47:a9:33:7f:63:0f:2f:fb:9a:77:ea:0e:42:9b:
60:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7A:21:BC:F5:4F:8E:33:E5:14:04:F8:0E:DB:E7:7E:3A:D8:C5:E8
X509v3 Authority Key Identifier:
keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a3:d1:69:45:5e:0b:4f:56:b1:82:a1:bd:93:0b:bc:f3:4d:
f3:76:82:01:dc:77:1d:17:5a:b8:3d:2e:cf:de:86:6a:f8:40:
bf:a2:2b:26:ca:14:b0:2c:b0:8a:13:f4:ab:7e:06:0c:7e:61:
29:91:28:14:2e:56:64:8c:0d:73:8f:a3:d9:d4:2a:f0:34:9f:
bb:f8:1d:32:62:54:75:72:81:16:59:d4:1c:37:a1:eb:fe:45:
bc:8b:4a:03:3c:aa:c3:31:11:63:a1:db:3d:cc:3f:6d:16:24:
73:47:1c:f9:50:03:69:25:f5:ce:d1:1a:78:49:08:5b:ab:d1:
1e:c7:5f:1d:0a:42:a9:aa:d2:4b:74:4a:b6:e8:d8:b6:0c:f8:
7d:8e:02:3a:83:bf:c6:aa:26:60:18:52:b0:db:da:d7:3f:79:
33:8f:a9:50:a3:c3:65:19:cd:d5:6c:0e:ed:07:1c:0b:b0:dc:
6d:8c:a3:71:9b:35:5a:a0:ec:4f:ad:7c:96:51:0f:81:61:41:
f3:07:30:ae:2a:21:e6:c7:59:39:74:f8:f0:f1:4f:fb:d8:54:
7a:1c:6f:0f:58:9e:bd:d3:88:55:c1:a8:0d:e9:4c:e8:c1:2b:
3c:46:bb:4c:8d:d1:bc:dc:9c:5c:32:37:88:88:1a:dd:e7:a8:
9b:fb:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:29:41 2025 by rpki-client