Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
File: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft (raw, json)
Hash identifier: cenfDiX4/fiATKZyHtfYq+vKV7g6RCv4IeZyOwdBIgA=
Subject key identifier: 00:3C:B1:D7:38:87:84:DF:2E:D5:90:5E:79:63:8A:25:CB:75:36:60
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Certificate issuer: /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial: 019628CE289CB7EA1986AB7A96C769DEDBC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
Manifest number: 14E8
Signing time: Sat 12 Apr 2025 07:02:01 +0000
Manifest this update: Sat 12 Apr 2025 07:02:01 +0000
Manifest next update: Sun 13 Apr 2025 07:02:01 +0000
Files and hashes: 1: 8o1O-t_WKzJXOkGFsMQUN6blBp0.roa (hash: KBCGb1hk/sBmmTgro2o9IaPB/nx00oBvONm6CxD0Y2w=)
2: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl (hash: 5HkB9bGueptuw7YeADIp42lRUx8nF+tT7CW6Tr9yTIs=)
3: aW93vIod8bw9akpUiGgWH-EgLiE.roa (hash: qyblENK3boODcPRYexEWYW0qmMFYuF1Qh/Vo8m2KhS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:28:ce:28:9c:b7:ea:19:86:ab:7a:96:c7:69:de:db:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Validity
Not Before: Apr 12 07:02:01 2025 GMT
Not After : Apr 13 07:02:01 2025 GMT
Subject: CN=003cb1d7388784df2ed5905e79638a25cb753660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:54:6d:8a:6b:6b:c0:58:13:7d:3a:dc:eb:
00:02:87:5f:ee:af:46:16:73:21:7b:4b:62:4e:46:
df:e8:6e:fe:82:91:b5:34:bb:02:1a:cd:b0:88:90:
ae:7e:ae:c3:9a:eb:78:f7:92:af:42:de:a5:e8:f2:
b0:41:01:0a:21:d7:8d:70:93:15:b2:c9:c9:5c:fd:
b0:26:57:93:f2:15:a2:6c:34:6e:c2:96:f2:67:19:
88:3d:51:9c:6c:c6:68:ff:8f:fe:96:8a:8c:0b:ea:
95:93:df:ac:c9:a2:09:01:49:0f:58:23:b3:e7:63:
04:24:5b:81:1d:de:d1:51:e5:86:95:cf:0f:43:36:
a7:fa:3e:28:41:5d:74:03:04:12:57:93:fc:8c:47:
a1:d2:9e:88:48:43:00:84:ee:64:4d:e7:8a:c0:71:
6c:bb:85:e5:05:96:11:84:87:52:94:b8:48:92:76:
8c:8d:06:3f:44:ae:67:00:c1:b8:36:eb:97:6b:11:
28:63:5e:3a:71:33:48:e5:3f:09:6a:bd:b0:58:d8:
b8:0c:93:2a:0d:a4:88:87:dc:c0:43:59:be:eb:83:
9c:d7:16:d4:c9:03:25:96:0c:6b:3d:1a:50:73:53:
38:f1:8b:6d:18:c3:cf:26:db:6a:7f:54:68:23:85:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3C:B1:D7:38:87:84:DF:2E:D5:90:5E:79:63:8A:25:CB:75:36:60
X509v3 Authority Key Identifier:
keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a4:66:85:8e:11:17:b5:37:26:a4:6c:e9:50:be:66:14:c1:
1f:45:6a:d1:c8:9b:46:12:c6:18:5a:04:4d:db:92:74:32:9f:
90:1c:c7:d3:da:b0:13:25:48:03:1b:7c:23:22:b4:20:5a:da:
07:31:90:93:23:f4:2d:3f:05:2b:94:f3:ff:05:52:f3:49:0c:
65:14:2e:e2:4f:85:9f:6e:74:6c:ec:dc:27:dd:be:bf:a8:48:
21:99:2d:d9:e1:d6:4f:25:db:d3:cb:9b:54:7a:b5:86:66:8c:
71:54:95:91:e7:11:c4:97:0c:74:9d:d9:04:64:22:27:b1:81:
ae:14:d4:db:d2:46:e2:a8:49:14:86:27:e8:4e:84:86:c7:f4:
e8:1b:6a:f1:60:7e:f1:a2:40:7c:20:a5:bc:37:96:73:8a:41:
09:c1:96:22:35:8a:3c:a3:e8:d5:7a:cd:c7:57:f2:a1:be:49:
eb:5d:8d:14:e4:6c:3c:97:1d:c2:e3:c3:ba:fb:91:19:e1:cc:
7f:f1:0e:c8:93:55:92:91:24:54:94:45:72:62:16:d4:f7:7c:
d5:ad:40:f8:be:59:dd:13:a1:61:f1:6c:30:93:1b:ab:e7:6e:
64:d5:95:0d:c8:2e:2c:0f:0a:ea:a2:76:35:f5:89:a8:1a:f6:
00:01:42:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:32:00 2025 by rpki-client