Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: yISpPo4quaXBj5EHrLr3gETAVKW1n386+WETL0tYyGs=
Subject key identifier: 6C:3D:DF:44:EA:D9:04:1F:54:83:EC:94:41:30:21:6F:19:7E:52:54
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 019615EB68F5032436D167EE0D2CB010A72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 14E4
Signing time: Tue 08 Apr 2025 15:01:11 +0000
Manifest this update: Tue 08 Apr 2025 15:01:11 +0000
Manifest next update: Wed 09 Apr 2025 15:01:11 +0000
Files and hashes: 1: Dk824yYieLhb3lnVQMoI_RB7E3g.roa (hash: 8CE4AzqmIW8OvhBrwxxjFMn8prAKH8KtnXAsx4//qm0=)
2: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: fRN7dLTO8IIbtepO/Co4WwskjQIJvPSTeTn475+cWwQ=)
3: i_nP-RMEFWNsq8wmPatyh47z1H4.roa (hash: LMMjHpph11n+9N5yAaKIxDwK0rOXqWLUsY4TjiEcrdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:eb:68:f5:03:24:36:d1:67:ee:0d:2c:b0:10:a7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Apr 8 15:01:11 2025 GMT
Not After : Apr 9 15:01:11 2025 GMT
Subject: CN=6c3ddf44ead9041f5483ec944130216f197e5254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:46:64:cd:3f:f7:1b:96:90:91:df:68:f7:67:
82:de:9d:fa:59:8b:b4:c7:ed:22:a2:15:33:57:68:
42:ff:ca:3f:3b:7e:33:78:65:c9:91:4b:f1:5d:e1:
d9:f7:68:0e:ed:0c:04:3d:ff:6c:b9:94:71:b8:2a:
29:ec:a7:01:87:c5:06:ab:74:df:90:a7:c4:91:7e:
72:bf:df:e9:62:14:2c:1f:ba:2d:8d:76:0d:6f:ac:
f0:e9:bd:c5:23:fe:9c:0a:ee:1b:ea:4d:e3:a5:52:
91:c3:a8:65:28:6b:24:bd:03:9b:62:ed:ba:45:b2:
bc:4f:27:3a:82:5d:f9:b2:9d:74:73:64:a2:cb:2a:
c5:c3:00:ba:55:f4:3c:bb:e1:80:9a:54:96:00:13:
83:97:08:15:51:19:be:3c:9f:b0:4c:24:21:d3:90:
32:65:67:08:cd:fd:21:b5:92:30:6e:bb:f1:f4:67:
4f:0f:54:ea:21:98:bd:c5:26:b9:1a:d0:26:51:a2:
4b:96:a5:1e:60:1e:a5:30:21:63:f4:69:67:c5:0a:
5f:9d:93:a3:97:01:14:b1:e4:f3:24:3f:58:b0:b2:
f4:84:f7:71:4f:5f:be:b4:8d:55:f2:d1:be:ba:2d:
59:dc:4f:c8:64:fa:4b:35:d0:66:96:f1:bc:63:25:
5a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3D:DF:44:EA:D9:04:1F:54:83:EC:94:41:30:21:6F:19:7E:52:54
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:18:ea:8a:0d:66:0b:4d:73:42:23:1f:77:bf:f1:fd:df:83:
91:9a:f0:a1:60:0c:ff:42:96:37:4a:53:9a:fe:90:22:66:cf:
53:fb:92:7e:bc:f5:3d:e2:90:1a:a2:f7:24:29:25:24:68:4b:
39:14:33:eb:25:1b:d7:50:f1:4f:c5:4c:ef:1e:0d:f9:33:ab:
b3:16:e6:b7:c4:aa:ff:4e:d6:7b:aa:e9:bf:fe:7c:76:09:30:
f4:21:33:49:6b:95:3e:19:39:d1:b9:2b:c4:32:3b:32:3d:78:
2c:e8:50:ff:67:43:1d:2e:33:bc:55:18:d4:3d:c9:b5:d5:bc:
68:ba:93:1f:04:9e:89:82:5d:be:24:33:34:8e:b3:c7:0a:a9:
00:31:91:d7:f9:61:d5:d1:9e:ee:d8:ba:82:1b:87:33:55:91:
87:ca:e1:f0:49:12:22:c0:c9:3c:35:89:48:ba:89:60:94:75:
99:83:58:b8:92:37:18:46:88:bf:5d:a6:20:28:b2:16:19:49:
86:6a:d4:01:f2:e0:bb:40:f7:d1:cf:ff:5b:68:35:dc:e5:15:
ee:28:ff:0d:d5:be:fb:71:9f:4c:87:33:8b:42:ce:46:b4:8b:
a1:fd:09:75:ee:3f:26:d7:af:5e:0d:e9:b4:1f:a3:5a:12:97:
0f:2a:c0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:53:54 2025 by rpki-client