Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier: A6aXxYr5/X42r1hNFEBYQG1Y799Gj3t2GeW184CoWCI=
Subject key identifier: 16:8B:D8:56:74:37:94:00:EE:6A:7B:75:38:13:DD:48:D0:C7:B9:5A
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 019644446492850244AA4C5C03B86BFB6767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number: 0328
Signing time: Thu 17 Apr 2025 15:00:54 +0000
Manifest this update: Thu 17 Apr 2025 15:00:54 +0000
Manifest next update: Fri 18 Apr 2025 15:00:54 +0000
Files and hashes: 1: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: HZMd2dU8mgItGdo0qXZRMnV9md1aayz8k2tjjDCqzco=)
2: DsQ3XuL18x6JXJPIAS7Bywor1FI.roa (hash: YgD4/obT5P1W7ZaQyQBLHDkI0d6d+gx0ix2vsYYOe7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:64:92:85:02:44:aa:4c:5c:03:b8:6b:fb:67:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: Apr 17 15:00:54 2025 GMT
Not After : Apr 18 15:00:54 2025 GMT
Subject: CN=168bd85674379400ee6a7b753813dd48d0c7b95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:ae:ca:29:99:6e:cc:19:87:a2:51:c8:a9:
7a:61:c5:d0:f6:32:ee:13:dd:5a:e9:7e:9e:e8:e0:
c1:4c:69:b0:9d:7e:7d:9c:7b:30:29:b3:3b:96:dc:
5c:51:e5:dd:ff:67:4b:99:c1:49:70:95:4b:86:f8:
d0:6f:3d:3c:35:de:49:f6:52:fb:46:fc:01:4c:9c:
cf:37:f3:3a:c1:4f:3b:bc:07:98:46:50:8c:e6:2a:
78:ec:57:25:e5:ab:c4:0d:c4:bf:2c:6e:12:16:0e:
4c:d0:ac:cd:d6:43:da:77:74:68:85:a4:74:90:8e:
be:ce:0a:52:e9:65:dc:c7:00:6e:69:e9:3f:86:02:
9a:a8:9c:e5:31:3d:a9:9d:0a:7e:56:3b:0e:53:75:
b2:68:47:d9:ac:d8:49:4c:cf:2c:8d:b4:b3:1f:31:
52:1c:fb:a1:ec:b8:97:af:bf:93:60:1a:07:1e:f2:
8f:da:dd:a1:cf:70:0a:dc:e0:4b:54:c7:4a:a6:37:
d8:a4:6a:d9:7e:da:83:51:fe:5b:58:4f:43:77:11:
05:40:ce:9b:ba:89:77:89:f8:78:95:2e:4f:7a:ab:
44:89:13:a2:ff:9f:80:9a:5a:35:ce:da:87:07:e9:
63:e5:04:d3:53:a5:ee:33:a5:7d:de:58:53:cf:cc:
fc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8B:D8:56:74:37:94:00:EE:6A:7B:75:38:13:DD:48:D0:C7:B9:5A
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8c:89:2f:f6:5f:b9:7b:72:b6:4f:bd:6f:2a:3b:9e:b7:08:
7a:38:30:b0:ae:18:5f:c0:6a:91:a5:13:8a:26:cc:ba:36:67:
8a:b8:05:c5:f1:d6:d9:47:4a:49:ec:39:6f:90:65:ff:3c:d2:
8f:b8:12:82:33:50:bf:01:92:73:85:d7:84:ea:00:37:09:43:
77:22:6d:f9:48:4e:bf:87:53:1c:52:f6:74:51:bb:a3:ef:3b:
79:0f:15:41:61:81:f1:fd:44:01:af:73:86:97:3c:ab:1f:ad:
f9:f7:b2:31:29:a1:31:d5:90:ff:5d:f8:e2:8a:8c:f1:33:e5:
e1:9f:c6:e6:a6:74:46:6a:c5:73:f6:e5:f9:cf:d3:bd:20:7d:
ae:64:19:30:3d:73:4b:47:98:b2:be:80:73:7b:1a:6e:48:98:
6b:4b:33:26:cd:f1:d7:1f:39:21:ce:8a:a4:6e:39:d9:e1:12:
2f:7f:ca:c9:05:43:01:d0:b9:46:a6:12:83:f6:6f:95:cc:ba:
44:d9:94:73:2a:49:c4:f0:6e:e4:4d:3e:9c:fa:ff:b7:92:80:
74:f0:85:46:52:53:98:a1:7b:75:8d:9a:13:2a:8d:d4:0d:3b:
36:a6:5f:15:b4:04:08:82:ae:63:8b:ef:04:77:28:49:64:f1:
9f:6a:a6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:37:25 2025 by rpki-client