Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
File: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft (raw, json)
Hash identifier: us4Pt1ur94FQpZKHbOQ7KUetsZKnI7g2d/SMuGU+WaU=
Subject key identifier: 57:CC:7F:03:BB:89:F4:20:5D:A4:2C:4D:4E:25:96:BB:9D:58:34:02
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 019654C9768BD1F8B0B4731B7867A8E90862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
Manifest number: 1512
Signing time: Sun 20 Apr 2025 20:00:11 +0000
Manifest this update: Sun 20 Apr 2025 20:00:11 +0000
Manifest next update: Mon 21 Apr 2025 20:00:11 +0000
Files and hashes: 1: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl (hash: kQ4VPQXYdHUbEgUwqgMpZ+Ti0pS+lyq8Oae80v3LtZA=)
2: hn0oOL_Phy31I2IYdCocfuCMl4Y.roa (hash: pL8SqciTf3yJI1mNpTYcxXjCVmcDvB9gR79xz18ukNA=)
3: n4Gl-s-Z4-ZJ7aZsYXedLjfUwYs.roa (hash: 2ovoFydr5EnhNhzcx+FRnrZsnjvX8pqDu1VDKcopbtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:76:8b:d1:f8:b0:b4:73:1b:78:67:a8:e9:08:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: Apr 20 20:00:11 2025 GMT
Not After : Apr 21 20:00:11 2025 GMT
Subject: CN=57cc7f03bb89f4205da42c4d4e2596bb9d583402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cb:06:05:43:b2:d1:b5:63:c7:93:79:3e:69:
93:4b:43:45:4c:ce:e5:a4:b0:65:cb:31:81:7a:05:
3c:ba:39:18:bb:80:21:89:f6:f3:1a:09:5b:c1:f2:
b4:db:cc:4a:8f:96:48:bb:90:e0:98:48:b1:60:49:
bd:bd:a1:63:b3:73:ac:6b:bc:38:65:5b:1d:28:0d:
e7:03:8d:46:f8:04:22:e0:70:f9:0b:d8:87:37:79:
a3:e8:84:16:19:84:78:a7:42:52:71:14:b8:25:4e:
13:ab:09:87:3e:5c:57:0f:4b:8a:04:f8:46:4f:51:
79:ce:4d:41:17:68:f0:ef:33:b4:95:70:4f:7e:fb:
05:a2:95:ad:ff:08:06:d4:79:24:0e:e2:f7:36:8a:
75:62:9d:dd:0f:5b:90:f9:46:d7:95:ef:f1:be:3d:
10:3d:f5:f5:a7:a7:94:05:08:2a:87:4c:92:cf:26:
9a:c1:02:19:7c:1c:58:39:9e:cc:aa:27:28:40:3c:
a5:9e:26:d5:47:ad:45:66:22:d4:5d:de:3e:7a:34:
7b:c1:3a:68:cf:8a:eb:c5:6e:b2:a9:aa:72:c8:c7:
06:76:c2:b2:41:8a:1e:ad:d2:1e:de:f9:8c:21:0e:
aa:d7:06:b0:3f:d5:85:53:22:79:b7:4a:0f:e6:1e:
19:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CC:7F:03:BB:89:F4:20:5D:A4:2C:4D:4E:25:96:BB:9D:58:34:02
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:de:fd:b9:86:88:69:a7:93:e6:f1:fa:44:63:fe:77:6a:b5:
10:a5:5d:f9:38:17:37:75:cf:63:fd:55:f4:26:72:b2:39:95:
59:34:46:93:31:61:8e:72:05:7a:05:b2:cf:bd:b8:a6:02:a0:
51:63:16:32:d0:c0:29:ca:60:4e:8e:0f:a4:83:e8:06:a3:ce:
e8:cd:20:9d:12:f9:fe:3b:a0:3c:82:86:09:69:ae:15:d8:af:
b6:c3:d3:59:91:ef:4c:2c:1e:40:7e:d4:69:9b:f1:d1:ca:b7:
6b:f0:76:de:c5:10:58:61:b5:62:9b:be:de:40:96:83:2c:79:
c2:32:9a:9f:4d:c6:76:be:dd:e9:97:b5:45:28:2d:ad:d4:38:
2f:de:7c:a6:39:ff:aa:c5:bd:74:7b:f1:6c:6c:1c:5b:60:e1:
f2:c9:f7:b9:04:70:55:d2:70:ee:59:62:81:4b:d3:c0:00:f8:
01:d7:a8:81:ec:56:6e:0d:f1:c8:ac:79:82:7b:96:45:03:8c:
1f:38:af:ca:30:d1:57:95:a8:c7:20:e8:f5:f2:d8:b8:95:91:
3b:9c:da:67:ed:5d:48:a1:14:30:0b:dd:7e:89:37:00:13:07:
36:eb:fe:90:49:94:7a:26:16:53:45:f4:92:78:37:fe:34:05:
5b:2b:45:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:58 2025 by rpki-client