Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier: v5Hb4XHPuh+LYmlcLRnzf8esyhRSZfF41dpOEkYeVHg=
Subject key identifier: 00:4F:29:D6:25:26:E2:3D:E2:E0:7E:4C:ED:E5:82:88:CB:DD:0D:FD
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 0196556E7595AAAB44FB5601EC9DB6987F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number: 08BD
Signing time: Sun 20 Apr 2025 23:00:24 +0000
Manifest this update: Sun 20 Apr 2025 23:00:24 +0000
Manifest next update: Mon 21 Apr 2025 23:00:24 +0000
Files and hashes: 1: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: A6Ahhko5VdVB2KtPzQn0MNFezZ8PZprG3rZjjJ90NPU=)
2: O7YDGlReH1x3D0s7Ygr1Vy16MbI.roa (hash: WAs5UezYMvac542kW/ZhIkgbBXd8gscxgdqz/AR6xPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:75:95:aa:ab:44:fb:56:01:ec:9d:b6:98:7f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: Apr 20 23:00:24 2025 GMT
Not After : Apr 21 23:00:24 2025 GMT
Subject: CN=004f29d62526e23de2e07e4cede58288cbdd0dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:c4:73:93:cc:38:09:ea:98:25:bb:ab:a1:
5f:04:a7:9d:93:c9:ed:b3:b4:9e:5f:0d:c5:b8:fb:
98:77:a2:f5:85:e7:43:1d:91:50:d9:56:a8:47:69:
ac:f8:63:24:c9:c3:1c:a4:e7:ad:12:08:19:d6:b7:
f3:20:e4:a8:f3:4e:86:d4:96:f6:04:6a:73:2b:cc:
ef:a7:f5:df:1e:b1:13:e1:57:51:e7:dc:41:f1:ca:
04:a9:89:31:d7:13:5c:27:bb:72:f3:1d:31:d4:8f:
a5:a6:f1:60:83:74:51:39:be:b6:af:0d:da:cc:41:
15:d5:3c:60:68:4d:16:17:a6:23:fc:02:6d:ce:61:
00:e6:f1:31:31:f6:6a:c9:08:40:9a:30:55:79:cb:
4b:ab:54:d0:7d:04:67:1a:e7:77:c6:5a:bf:a7:40:
ef:bf:f6:eb:13:3a:cb:01:5e:4a:66:dc:e0:fa:60:
87:6a:38:1c:53:e8:00:48:a5:92:6f:3b:ad:80:1f:
52:3c:89:60:22:66:03:2c:41:58:7b:44:66:2e:c1:
23:80:0c:db:c1:9a:9e:0a:32:3e:06:9b:23:95:88:
1d:77:26:76:b1:8d:f5:2a:94:b8:1d:b0:58:7e:b5:
af:3d:bd:2f:24:5b:be:be:08:e4:fd:ff:94:68:f0:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4F:29:D6:25:26:E2:3D:E2:E0:7E:4C:ED:E5:82:88:CB:DD:0D:FD
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:29:76:6b:5f:04:17:f2:12:e9:1f:23:56:ce:73:02:6c:68:
a0:f4:54:c9:31:0d:57:b5:fe:63:4a:0a:4f:b6:c6:e8:1e:51:
f1:4c:e5:6f:76:a4:92:8d:9c:80:98:2c:74:22:2b:f0:4a:f6:
c2:89:1c:b4:54:9e:10:85:99:c7:97:4b:48:b5:72:bd:b2:4b:
b7:c6:4e:07:7d:49:aa:3b:5a:fe:bf:44:f5:cb:b0:c1:a8:a6:
d0:c3:a5:e7:cb:71:72:3e:ad:2a:5f:39:a5:bd:4a:3b:87:4e:
07:98:2e:f9:2f:28:72:93:05:e8:e5:91:b5:bb:b0:a3:29:1e:
43:38:fe:b3:a5:b1:3b:40:7b:b4:15:3b:d4:4d:bb:c1:2f:18:
4d:66:04:b7:71:54:54:39:72:bf:90:76:ed:45:f1:6e:ad:d4:
37:65:04:c8:a4:7d:15:d2:1d:7e:15:6a:52:6f:e6:15:c2:80:
a8:d2:59:94:c8:89:4b:8d:c5:44:65:45:3b:a4:15:91:da:8e:
8f:9a:ae:a5:e4:9b:d6:c9:e2:ab:51:ef:9b:ed:cb:41:0a:64:
b3:5d:b8:34:d3:fd:23:f4:13:ce:07:45:87:0b:b2:90:b1:1f:
3d:7a:8d:b7:24:29:b0:f0:2a:90:64:d1:92:7c:68:a1:78:53:
8c:e5:6e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:23 2025 by rpki-client