Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: QyQu1LO2FRDclEM8bWL1CIKOcYrlJwMTiKQ6SC9OtIg=
Subject key identifier: 4B:B0:01:14:EC:15:A8:AD:B9:00:EA:6A:FB:4C:B0:B5:28:36:B8:8D
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 0196451FB086A116980B32466E086C103D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 1192
Signing time: Thu 17 Apr 2025 19:00:26 +0000
Manifest this update: Thu 17 Apr 2025 19:00:26 +0000
Manifest next update: Fri 18 Apr 2025 19:00:26 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: i4m1uOz8likOm0c7hGBTuLXPq9rKOWguxHFrZkI30gI=)
2: 7PD1wIgjrZ9T9-fQhjLFUrZGUJE.roa (hash: 8HGos2aeHkG0saEvUQyEseTwmsTJnTnE4JuY9jxzUVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:b0:86:a1:16:98:0b:32:46:6e:08:6c:10:3d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: Apr 17 19:00:26 2025 GMT
Not After : Apr 18 19:00:26 2025 GMT
Subject: CN=4bb00114ec15a8adb900ea6afb4cb0b52836b88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:83:66:8c:2f:fe:54:b9:80:35:7d:f1:fb:ea:
e7:4c:7d:49:ed:c5:aa:ad:dc:25:f3:70:f4:eb:60:
79:b4:d7:fc:2c:ad:cc:6c:dc:7c:44:ac:ce:ec:44:
e3:02:20:c4:b7:22:6d:ee:17:5c:00:bc:2a:4d:8c:
1c:e8:41:02:14:b9:e8:15:42:a5:37:ae:74:56:ab:
d6:0d:a1:bb:70:0b:64:1c:4e:d1:67:6c:d4:83:ec:
4e:db:9e:02:fc:33:3a:17:fb:ce:59:e8:0a:cf:04:
65:62:5c:2e:6d:8a:14:6d:61:e1:c0:f5:42:38:59:
55:bb:57:73:0f:5a:cd:dd:26:77:be:09:77:42:f2:
08:95:ec:31:9b:03:f4:06:34:09:c4:18:f3:d8:ca:
2b:9e:41:a2:82:ec:2e:e6:64:33:24:5b:83:8a:17:
59:be:e2:17:65:60:77:63:8d:71:6b:9d:1b:c6:15:
9e:ab:7e:1f:81:3b:3f:72:d7:6f:1d:2e:86:9e:45:
08:56:d3:fc:6c:99:f8:bf:d6:29:26:db:13:83:87:
76:8e:f7:da:d8:61:bd:f3:38:b4:bf:17:9b:be:c1:
87:b7:1c:eb:06:61:8b:45:ad:17:f8:38:ab:d6:3f:
8a:0e:42:c8:8e:0a:b3:0f:41:6c:51:46:7b:78:2b:
25:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B0:01:14:EC:15:A8:AD:B9:00:EA:6A:FB:4C:B0:B5:28:36:B8:8D
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2a:5a:be:12:c1:f1:81:95:63:51:d3:96:c3:4a:10:41:d2:
fb:9a:79:eb:61:ff:18:4d:bb:8b:2c:7a:b9:29:3b:14:5a:66:
2c:05:21:b7:77:b1:bc:fd:02:02:2d:24:c2:db:1d:72:46:da:
fe:5e:4d:36:a3:3b:d1:c1:a9:c8:12:eb:0f:5e:7d:15:cd:c5:
1c:84:e0:08:9c:1f:3f:a3:42:71:0a:1e:d1:b9:90:c3:dd:46:
0e:dc:7d:c9:91:97:56:f4:1d:c2:c6:47:3b:7b:ac:b8:e0:a5:
38:28:ea:1e:c0:25:25:d1:a2:fc:a8:cc:23:36:0d:47:bc:51:
a0:a7:ed:10:a7:82:3b:d6:00:05:55:29:d5:61:ed:c0:3b:01:
71:1e:a1:87:52:d1:a8:7d:25:4d:88:d7:95:20:df:7d:dc:92:
0e:9b:d1:d1:8c:c3:53:26:5c:d6:65:cf:f0:01:aa:c8:74:9c:
f4:a0:f1:62:a7:db:b8:2f:3e:d8:19:c8:c2:3e:4c:2b:92:ec:
86:e8:08:6d:bb:83:66:16:11:14:6a:4f:45:47:98:91:4d:3c:
14:ad:e3:d6:f1:59:2a:b0:67:92:ec:b7:e3:a4:28:ff:86:e1:
1e:a1:ab:4c:79:9e:fd:ae:d0:40:9d:38:f1:23:ad:d6:24:26:
c7:26:b3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:35:18 2025 by rpki-client