Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
File: DpgibNz3QdzIpCplmos94hmBiPk.mft (raw, json)
Hash identifier: Y0xse6/Cd3KHShGY3gcqPIMXmCkRldbv87c/p9x3ReA=
Subject key identifier: 89:78:C5:3E:70:3F:D2:9F:61:85:64:56:A4:FE:84:74:5C:8D:36:94
Authority key identifier: 0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9
Certificate issuer: /CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
Certificate serial: 019652370EB2FDE6C0F421A68A6CBE414D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
Manifest number: 1200
Signing time: Sun 20 Apr 2025 08:01:01 +0000
Manifest this update: Sun 20 Apr 2025 08:01:01 +0000
Manifest next update: Mon 21 Apr 2025 08:01:01 +0000
Files and hashes: 1: C9YabYyYTwF76KS0OdJKS7svqe8.roa (hash: OaSH1c1TCgLCLOEvTQ5fN3rE7i93/Zx2eO7IyYukR98=)
2: DpgibNz3QdzIpCplmos94hmBiPk.crl (hash: z4P+ETKQCRkazAFtAAj8y7QJTCcL9RkYR4Q/oB7Wefc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:37:0e:b2:fd:e6:c0:f4:21:a6:8a:6c:be:41:4d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
Validity
Not Before: Apr 20 08:01:01 2025 GMT
Not After : Apr 21 08:01:01 2025 GMT
Subject: CN=8978c53e703fd29f61856456a4fe84745c8d3694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:47:49:ee:19:53:80:99:19:54:a1:35:02:
38:d8:6e:81:54:a2:3d:fe:75:20:19:6d:26:97:6b:
50:6f:e4:de:1a:ae:07:5f:58:25:b7:81:89:0b:34:
5d:82:bc:68:79:61:00:24:c8:1a:fc:8b:46:15:3e:
d8:bf:a5:88:cc:60:9a:f0:a8:35:da:b9:bd:a6:c2:
d6:00:4e:0e:93:23:15:0e:ec:a3:5a:bb:b1:48:3b:
15:e1:0a:24:62:03:cc:69:6e:81:55:94:2a:3e:26:
de:f2:92:77:69:02:95:c7:c7:04:81:76:ba:73:25:
6e:9f:40:c5:f7:14:a6:09:68:49:4c:b3:8d:7b:ea:
66:f0:53:2a:f0:cf:c3:5f:38:af:b4:68:a4:96:a2:
fb:64:5c:55:7f:fe:2c:40:fe:e5:ea:56:77:28:71:
d3:98:ca:37:8e:d1:6c:19:e8:ad:7d:f9:58:6b:b3:
d2:7d:95:fa:4e:15:01:f8:4b:79:ff:12:ca:ca:d4:
f3:dc:6a:a4:de:2c:c8:64:9f:d4:8f:6b:12:b3:c3:
3c:4e:56:5d:c3:5e:8a:e5:69:da:2f:4c:42:8b:d0:
78:e4:df:97:9f:d8:f1:dd:3f:49:1d:4c:82:07:02:
86:e7:9b:f7:55:82:1c:d8:5d:e5:61:2b:62:fd:c7:
3a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:78:C5:3E:70:3F:D2:9F:61:85:64:56:A4:FE:84:74:5C:8D:36:94
X509v3 Authority Key Identifier:
keyid:0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:35:b3:71:5c:42:70:df:2a:48:59:b5:74:dd:fa:b4:52:70:
a6:11:30:7a:6a:36:92:b0:ae:2e:6e:10:4f:e2:aa:f9:56:6f:
af:76:51:b4:8b:68:54:0e:67:39:18:87:46:6b:30:c9:42:2a:
e9:33:d3:18:f8:0a:6e:50:3b:36:ad:d1:29:f3:e3:9e:8c:4b:
f4:c4:fc:59:20:47:b4:2c:a7:08:00:dc:6c:2d:0b:10:21:3e:
f9:0c:b2:52:6a:1c:1d:37:ca:85:94:53:1a:6a:3d:52:83:4b:
6a:fc:07:8d:4f:73:a1:1b:fc:6e:7f:64:66:21:8e:0a:29:e9:
a8:54:08:e6:04:f8:e3:c6:20:5b:e0:98:14:3e:f8:19:8d:58:
4f:01:b3:47:ce:71:41:b6:05:f7:c0:59:2c:8c:29:2b:b0:8d:
e3:a3:6d:d3:28:81:fc:e6:e3:a8:92:e0:c3:37:d6:ad:f8:ca:
de:d4:b3:18:c0:65:bb:ea:30:01:37:54:d3:f3:32:de:ba:87:
47:90:6d:52:66:a5:76:14:21:f4:ce:25:ac:83:13:92:e1:fd:
97:f8:0e:ca:a3:5f:8e:bc:02:6a:57:7f:15:8f:09:03:6e:0c:
31:ba:c2:0a:ad:fe:00:2f:04:ad:42:3c:01:2b:ab:5e:9b:9f:
40:c3:6c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:41:09 2025 by rpki-client