Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
File: DVX6KmKDfbmv5EI-TBGelJmyG0M.mft (raw, json)
Hash identifier: z6RAHQJ1L9yo45BeCqylS3LEPh0nQTCLVR2xVy9V4+4=
Subject key identifier: 78:D9:F7:0A:7E:BE:1B:59:9D:EC:A0:FD:5C:EF:0F:73:DF:63:E5:62
Authority key identifier: 0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
Certificate issuer: /CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Certificate serial: 01964C6BEC29A7569BA7B76C2D1589A18375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
Manifest number: 0664
Signing time: Sat 19 Apr 2025 05:01:03 +0000
Manifest this update: Sat 19 Apr 2025 05:01:03 +0000
Manifest next update: Sun 20 Apr 2025 05:01:03 +0000
Files and hashes: 1: DVX6KmKDfbmv5EI-TBGelJmyG0M.crl (hash: CftCC/WDcoxAxsAfRgRoraMRgDECoWTmF+0/NIHDzJI=)
2: GXOLHwEFu0p7gKJgkJ5kY6IvzIE.roa (hash: pAl+GrJaPPBbeJpVI3BoizE0NzXiXcJyNH8QYeo2rB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:ec:29:a7:56:9b:a7:b7:6c:2d:15:89:a1:83:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Validity
Not Before: Apr 19 05:01:03 2025 GMT
Not After : Apr 20 05:01:03 2025 GMT
Subject: CN=78d9f70a7ebe1b599deca0fd5cef0f73df63e562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:c1:8e:f8:c7:7d:13:e4:5a:26:ff:f7:db:
fe:29:3e:67:89:26:f5:d9:0d:28:f0:ac:38:de:a1:
18:b9:ef:c7:d5:22:03:d5:35:e2:35:27:29:87:d1:
4c:91:cd:46:52:b0:0e:a0:99:f4:9a:90:f9:8a:c7:
cc:b2:1d:99:69:d1:07:f1:ea:5b:b0:00:69:67:91:
c2:0a:fb:35:91:30:b4:d0:7e:72:bd:27:97:b6:50:
b5:7e:e8:f1:51:19:a1:2a:c6:31:d2:85:c4:61:1e:
38:cc:28:b9:b8:b3:cc:06:11:b2:b1:ef:f4:1c:6b:
b6:3e:0f:97:74:2e:94:34:cc:0e:55:3a:70:78:67:
2a:dd:65:0f:a1:af:b1:82:63:7e:0b:86:49:4d:50:
ca:4f:78:fb:9f:27:fc:e1:49:f7:d5:22:98:d7:f2:
3d:f1:d2:a9:02:0b:a4:bd:97:28:6e:c8:35:3b:dc:
89:e7:fe:d8:c5:77:21:9c:fb:1f:97:0d:2c:24:66:
6a:d6:9c:0f:14:ab:58:b0:fd:90:82:19:8d:ba:b4:
dc:d9:65:f3:fc:5b:65:1a:28:62:6b:7e:e6:65:5b:
5f:64:06:f8:87:8b:f6:87:aa:80:5d:a0:46:eb:9e:
d4:be:ff:30:a6:e2:1a:88:c3:a7:50:fa:2b:35:31:
92:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D9:F7:0A:7E:BE:1B:59:9D:EC:A0:FD:5C:EF:0F:73:DF:63:E5:62
X509v3 Authority Key Identifier:
keyid:0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:04:ea:4d:a3:66:88:24:18:a5:fa:53:a8:ff:5b:e0:17:63:
8f:0a:37:27:9b:fb:31:5a:1d:0f:93:60:5c:83:96:52:63:15:
40:cf:24:1c:f2:6b:0c:80:fb:69:80:7e:a0:03:3c:e1:f5:99:
b6:6f:9a:0e:6b:bb:83:f7:45:45:b7:66:e8:f1:b3:bd:b8:c3:
65:86:cb:4c:1f:5f:21:f9:c9:5c:e1:30:da:5d:f6:93:28:4b:
a5:31:f3:bb:0e:d7:f2:cf:71:84:71:4c:53:cf:96:e6:48:b4:
4a:aa:7f:be:bf:1b:73:bb:e2:70:9e:87:17:24:df:5e:fb:25:
6d:d5:7f:e9:33:8c:ea:c4:c1:41:86:ad:87:07:c1:34:90:03:
01:1e:dd:fb:af:dc:14:10:37:9e:c3:8c:ed:76:2a:41:20:9f:
82:ff:2c:eb:2f:12:8f:f2:44:67:f3:e3:36:ee:b5:65:d4:a7:
1c:f7:8c:65:f1:bb:20:83:e8:31:bd:e1:ff:5b:ab:36:6c:41:
e6:93:ae:6c:87:6b:2e:4c:47:df:e4:e5:5c:e1:ff:4d:27:08:
a4:2a:2d:93:af:a1:c7:82:06:de:fe:80:02:b2:d6:50:39:5b:
75:27:39:31:89:0f:a1:3f:7a:d3:72:64:1c:ea:8e:ed:87:e2:
57:c1:99:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:41:14 2025 by rpki-client