Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: xlZfPjh5yDLMsYGPN2u6oAZRhifStkw15mXpG9Dgl54=
Subject key identifier: 4D:7F:F8:68:3C:67:58:CB:5F:74:49:0B:A4:66:53:8F:F0:8C:14:56
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 01964CA294464049BFA50EF60185BAAA80CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 06:00:45 +0000
Manifest this update: Sat 19 Apr 2025 06:00:45 +0000
Manifest next update: Sun 20 Apr 2025 06:00:45 +0000
Files and hashes: 1: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: HYctT+iczbDSmywxl5ymX+iZ3TAWoDmGeIEKH0mMCmI=)
2: ej_BjAFbZm6hQCW3kEzJ6VoPdPc.roa (hash: U8mMSnb2Uo3FLs8ZgRPpDiQ27ni+P67f58AC/CHMeBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:94:46:40:49:bf:a5:0e:f6:01:85:ba:aa:80:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Apr 19 06:00:45 2025 GMT
Not After : Apr 20 06:00:45 2025 GMT
Subject: CN=4d7ff8683c6758cb5f74490ba466538ff08c1456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:92:6e:37:85:3f:3e:8a:39:68:93:d9:41:
e0:87:2e:65:f0:69:7b:97:f1:d1:50:6f:d0:a4:08:
61:82:52:71:05:f4:c6:0f:26:36:49:e1:b9:65:89:
17:15:cf:dc:ff:d2:df:53:f7:8f:52:a4:cc:1c:84:
ed:82:62:3d:ef:1a:07:e6:4a:de:43:f9:5c:24:f9:
4d:20:d9:a8:4d:f4:26:ed:56:df:82:ba:89:3c:47:
fd:30:04:c0:26:1a:92:ae:ea:91:31:c1:94:a4:15:
98:65:d8:a8:79:6a:1a:dd:ba:65:3f:14:b5:84:4e:
25:b4:ec:c7:5e:21:d0:95:43:aa:68:4b:cc:0b:ba:
25:d6:a9:20:d8:2f:75:30:c4:db:65:67:5d:8f:a8:
7e:4a:c8:9c:6c:bd:72:fe:f5:60:71:fa:c7:c9:67:
4d:e7:99:d4:83:a8:0a:44:a1:c2:bd:9b:9d:af:d7:
2f:e6:fb:84:26:10:a5:ab:8b:37:d5:f9:f0:4e:5b:
51:89:a3:a6:0b:fe:06:18:e1:c0:4e:0b:c5:ed:48:
ea:83:a7:27:7c:18:0f:8e:a4:63:9c:95:c1:5d:80:
84:f5:8a:bf:af:d9:a7:64:a0:75:d2:5a:da:43:00:
2c:bc:98:5f:bd:ae:86:76:01:d6:ef:bd:54:45:40:
11:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7F:F8:68:3C:67:58:CB:5F:74:49:0B:A4:66:53:8F:F0:8C:14:56
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ae:65:29:a5:37:bc:68:e8:d3:cd:57:7c:38:b3:c6:3b:ae:
71:b4:5d:69:54:67:cf:f5:10:1c:86:04:7b:e3:82:b4:80:77:
90:c0:fe:72:5c:39:38:27:6b:fb:70:8c:15:c9:f8:71:0d:78:
46:e9:c8:6b:50:f0:ab:74:4b:51:3f:31:91:87:c6:80:39:bc:
27:99:c9:93:ea:3a:e1:d3:cb:9e:de:f3:2f:8d:fe:13:0a:a3:
5d:4e:f2:eb:bd:48:85:de:1d:71:af:eb:d4:31:01:7a:ba:5a:
6c:c3:37:d0:1c:3f:59:ab:21:12:a6:48:51:32:85:53:5d:76:
80:68:08:f6:f7:96:cb:9a:5e:56:86:5e:bb:9d:64:32:fd:f2:
a4:77:39:e3:ef:61:90:a9:e1:ec:01:6a:44:58:b7:cd:dc:9c:
b6:16:f6:30:12:5c:3d:71:80:23:27:f4:c4:5a:0e:2f:de:a9:
92:20:04:98:82:31:9a:ee:8f:5d:e0:69:48:23:45:eb:dc:2f:
7a:51:e1:57:e0:f0:50:f8:c7:f5:ba:2d:09:f1:68:57:94:82:
a7:fb:39:1f:8b:3b:a6:56:61:f6:f7:b1:dd:3a:98:1b:17:eb:
4a:6e:ad:0a:f2:b9:16:b5:6e:c3:a8:09:e3:cd:13:ac:97:18:
d1:b1:bf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:24 2025 by rpki-client