Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json)
Hash identifier: vAn521XC9aQZ9X3yx2ptuJfGsKcpCCigY44lxq8fRxo=
Subject key identifier: 49:40:22:66:31:1A:9C:E6:3C:EC:19:75:BF:24:BD:CB:8B:78:DF:D4
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 019511D9740B5DA4053430F815B77C95F6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 03:00:18 +0000
Manifest this update: Mon 17 Feb 2025 03:00:18 +0000
Manifest next update: Tue 18 Feb 2025 03:00:18 +0000
Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: Q+j90v9VHGflHV+goFotuQ+7AudpgjmWXwjV0qUcgpM=)
2: y_bNAAFyln0l2OAbHxvZF5RByIA.roa (hash: V4mHpVmDU1it/2lH0Vz4ctCIXcFfTQBDa792VzELUIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:74:0b:5d:a4:05:34:30:f8:15:b7:7c:95:f6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Feb 17 03:00:18 2025 GMT
Not After : Feb 18 03:00:18 2025 GMT
Subject: CN=49402266311a9ce63cec1975bf24bdcb8b78dfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:09:84:9f:b9:ad:c4:44:ec:bd:1c:cc:41:
c4:1b:df:56:e5:e9:6d:0f:94:dc:62:ee:4d:f8:11:
aa:23:06:d6:2d:c7:00:f6:62:6a:b5:68:bf:91:48:
97:87:49:4f:4b:23:90:d5:d8:89:88:9f:32:c0:e2:
89:73:17:3d:f0:1b:5e:64:cc:6a:eb:d4:8d:62:b2:
ce:51:a0:db:2d:d0:a1:aa:cb:ba:5a:cd:9b:79:7e:
b9:a9:c2:16:73:e6:b0:e2:42:5c:cf:d1:2a:58:61:
c4:e7:e0:67:6d:69:53:59:ff:22:99:0b:46:b8:2d:
70:a8:b1:3c:bb:01:e8:c4:15:76:59:6f:be:bb:21:
1c:ac:96:56:9b:a8:77:a2:61:c2:cc:b7:ab:68:e6:
1a:a6:73:69:d7:b6:63:e9:fe:c2:36:c5:d8:76:bb:
9c:8f:49:3f:1a:aa:7c:f6:f9:22:11:31:f0:1c:8c:
0e:c6:19:9e:57:94:a1:94:c6:6d:c0:bc:96:df:a3:
9b:e6:4b:21:10:3b:4e:31:0e:fa:9e:bf:b4:38:24:
62:3d:45:5d:b7:1b:3a:e7:5b:b4:14:3d:92:e2:f6:
72:ce:86:21:5d:0b:0c:95:26:af:cf:eb:1d:be:17:
e6:44:84:cc:31:ee:3d:60:5d:98:e9:11:b3:e2:58:
2e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:40:22:66:31:1A:9C:E6:3C:EC:19:75:BF:24:BD:CB:8B:78:DF:D4
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a0:42:ef:be:11:ad:77:c5:4d:85:5b:bb:06:ca:a8:3a:91:
7b:6b:62:08:12:25:91:e5:83:83:30:88:5d:1a:e8:0f:c8:d4:
48:75:04:59:25:cb:dc:6b:fa:0f:ad:a2:47:6b:c3:0f:e9:c9:
d7:d8:bf:46:bb:85:79:dc:67:da:62:bc:e2:54:53:a2:21:68:
6b:57:30:2d:4d:6d:91:e5:3b:c4:4a:24:4a:73:6b:ca:50:1d:
e4:6d:a0:c2:b0:16:0b:18:2a:ce:77:e1:8d:b4:ab:db:d8:b9:
e6:e2:2b:e8:d8:f6:92:e5:0f:e1:2a:0d:12:bc:ca:9c:2f:e5:
1f:6e:c5:29:14:22:2a:65:81:87:f2:cc:17:43:71:a5:ca:45:
f8:d1:6e:02:15:13:84:f8:e6:c4:10:a5:d0:60:7f:75:49:72:
c9:5f:46:0a:de:9c:78:81:2c:01:2f:7e:95:dc:1c:53:68:a4:
50:f5:d6:c0:aa:e5:02:25:05:f6:c3:53:de:86:34:53:76:06:
d6:bb:a0:e0:8a:a9:c7:e8:2f:1f:da:9a:41:86:04:8f:bc:3e:
27:d1:b5:68:3f:de:ea:64:e3:1a:76:b0:6a:37:82:f1:16:37:
56:16:d3:fa:aa:10:ad:65:8e:37:6f:8d:04:71:5e:90:52:ed:
68:b4:7e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:42 2025 by rpki-client