Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: KtoovCs/wBjex1Kg9cdWn3rZ6eu3XIAKelNLSXa/q7s=
Subject key identifier: 3C:DD:4C:7E:23:3F:83:BD:BC:C0:9E:A8:E6:F2:4B:B2:5B:91:86:6A
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 01966028F663BC624C30A70B10E18BA47CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 01E6
Signing time: Wed 23 Apr 2025 01:00:19 +0000
Manifest this update: Wed 23 Apr 2025 01:00:19 +0000
Manifest next update: Thu 24 Apr 2025 01:00:19 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: M3m6Q3WRrjGTOwAOQp4/eG6XMF/ddFTNpTYG1aT8jN4=)
2: NOYTh7ZlTxAFEDHg6RZrbrrgktU.roa (hash: tsOnlXCMm1Zkvk7dgvDTsJOertYGX+iBxLbtlWab/tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:28:f6:63:bc:62:4c:30:a7:0b:10:e1:8b:a4:7c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Apr 23 01:00:19 2025 GMT
Not After : Apr 24 01:00:19 2025 GMT
Subject: CN=3cdd4c7e233f83bdbcc09ea8e6f24bb25b91866a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:17:7d:bb:39:31:e7:a0:89:20:b3:31:73:
4a:2c:c5:a5:55:fa:6d:c2:3e:1e:9e:48:06:cc:b5:
0c:45:ab:0b:f3:2e:12:ad:70:dd:42:f0:0a:67:47:
76:f4:98:ce:b3:66:45:83:0e:21:56:1c:91:dc:de:
00:0d:df:2f:5a:f1:c9:f7:df:6a:9e:08:9f:14:bf:
ed:98:d9:06:70:ad:19:a0:6b:76:45:4a:80:54:a7:
ac:0e:86:66:11:c9:eb:05:5a:30:82:27:af:8e:58:
61:c7:e6:11:28:de:63:b2:76:f3:20:b1:c0:ce:48:
30:aa:43:90:53:24:b7:19:d2:70:f8:b5:c9:cf:23:
c2:97:70:49:b7:86:8e:75:27:1c:fc:26:67:c1:e3:
c9:bb:46:69:28:f7:f6:e4:92:2f:a4:4b:dd:78:4e:
4c:f9:b4:c8:53:f3:55:15:9b:e7:9c:80:56:e3:98:
1a:47:12:c2:e8:6a:02:be:a3:66:39:76:cd:26:25:
e0:9e:b2:5b:eb:23:f9:3f:7e:21:0b:53:1e:e3:3b:
cb:3f:69:6b:84:6a:5c:f0:85:a4:49:04:09:dd:7d:
46:82:fa:6e:a3:68:62:25:0b:46:19:e3:1f:1e:c3:
66:ce:97:31:68:72:46:dd:21:1e:55:39:cd:b9:9a:
07:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DD:4C:7E:23:3F:83:BD:BC:C0:9E:A8:E6:F2:4B:B2:5B:91:86:6A
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2f:82:1a:b0:cd:3d:fd:ce:b0:74:7c:1b:00:58:71:0e:b8:
e2:ad:63:ca:36:ad:59:80:b7:f8:26:49:70:01:49:bd:9d:05:
85:66:de:a5:a9:99:e1:6b:3a:30:b3:4c:d2:1b:4e:f7:37:bc:
22:76:4a:7a:f4:74:c6:3e:16:3b:2b:45:c7:4d:9e:5d:d4:6d:
f8:32:46:7a:a3:17:04:cc:d4:aa:c7:0b:01:d8:a4:65:4c:1b:
cf:fd:69:82:8d:b2:d1:82:2c:fc:b4:4e:31:d5:7c:7e:c0:14:
84:4d:bc:69:98:15:aa:c4:94:54:0f:5d:80:fb:ff:13:04:c3:
47:36:2f:9a:ee:de:2b:3b:a9:93:8b:1a:0c:37:53:10:3b:30:
76:3f:2c:16:82:1e:2f:05:28:e9:4d:41:59:17:ba:0a:57:a1:
59:0d:c9:45:5b:b6:e5:97:24:ae:c5:74:d8:12:20:ac:7a:eb:
c9:bd:a8:ba:5f:a0:e6:cd:c1:36:e6:73:f8:da:de:06:15:a5:
49:c8:1d:39:fc:60:d5:ae:d5:23:e5:b8:72:c3:bf:78:90:1d:
4b:0d:0b:4d:6d:0c:08:7c:94:13:f7:d8:01:85:55:e8:13:29:
cc:23:c6:79:78:a0:e3:d6:a3:dc:75:d7:71:83:31:0e:e4:bd:
9e:6d:14:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:13:59 2025 by rpki-client