Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
File: DpgibNz3QdzIpCplmos94hmBiPk.mft (raw, json)
Hash identifier: eK2xUtoYx3AWP1m4YlyS0tCSASvZfVsWm+rSET6JqfU=
Subject key identifier: 84:D3:9B:8E:45:6F:B3:D0:85:A1:56:D9:F0:2A:4B:B0:AC:2A:86:36
Authority key identifier: 0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9
Certificate issuer: /CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
Certificate serial: 019511A2ADF9DD965922163A968A58779F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
Manifest number: 115A
Signing time: Mon 17 Feb 2025 02:00:28 +0000
Manifest this update: Mon 17 Feb 2025 02:00:28 +0000
Manifest next update: Tue 18 Feb 2025 02:00:28 +0000
Files and hashes: 1: C9YabYyYTwF76KS0OdJKS7svqe8.roa (hash: OaSH1c1TCgLCLOEvTQ5fN3rE7i93/Zx2eO7IyYukR98=)
2: DpgibNz3QdzIpCplmos94hmBiPk.crl (hash: HPQ3nvGB6FMZlFOlZA7QFZg77tHvQSK6PRxOIy22oKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:ad:f9:dd:96:59:22:16:3a:96:8a:58:77:9f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
Validity
Not Before: Feb 17 02:00:28 2025 GMT
Not After : Feb 18 02:00:28 2025 GMT
Subject: CN=84d39b8e456fb3d085a156d9f02a4bb0ac2a8636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:61:85:47:ef:78:fc:bd:87:f0:02:f4:b7:18:
3a:52:e9:63:6d:11:1c:ba:31:46:c2:9c:85:bc:9d:
64:b5:98:1d:ae:a6:e5:4c:68:92:78:e9:25:9b:5c:
f8:19:9f:26:04:35:41:17:7c:72:f4:28:75:a9:6b:
f3:f8:9e:7a:76:25:a2:04:68:51:a9:ee:9b:b7:fc:
c2:58:0a:71:40:ea:e1:5a:72:81:31:59:85:2c:be:
24:1e:ac:ee:c8:3f:61:a2:d3:1f:a3:79:54:04:7d:
a8:d0:60:bc:16:0f:c0:18:40:d7:4e:4c:f9:46:44:
9b:09:94:68:93:e7:bb:1b:d5:f2:f3:f0:ec:f1:3d:
44:86:bf:e4:87:d3:77:d3:60:f1:04:fa:62:01:b7:
d3:05:f1:3e:46:29:d2:a9:9e:be:b9:d2:dd:ee:bf:
29:30:8b:3c:97:62:10:ef:30:20:9e:bc:13:69:4e:
c9:71:ed:6b:03:45:3a:6d:3a:c2:bf:d9:8c:17:31:
1c:3c:09:ab:0a:d7:57:8a:b7:8a:86:19:bb:c3:22:
53:71:eb:8d:64:b7:78:da:89:0f:21:c9:55:cf:6f:
31:af:0e:d8:62:60:0a:cc:82:f9:54:2d:01:f8:37:
fe:c3:46:87:11:54:91:2c:72:c3:02:5d:8f:89:b7:
7f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D3:9B:8E:45:6F:B3:D0:85:A1:56:D9:F0:2A:4B:B0:AC:2A:86:36
X509v3 Authority Key Identifier:
keyid:0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3e:6b:94:c8:d2:66:7f:6d:71:a6:1b:b0:db:73:21:e7:6b:
b1:cf:11:c4:d3:97:f2:97:1a:13:60:c9:91:ff:d7:ce:e9:57:
d1:60:8a:81:f3:7d:05:b3:57:2a:27:90:b9:34:c0:3a:f1:d9:
17:6a:34:14:78:d6:b5:36:c5:32:f1:29:04:f3:53:2e:39:e0:
8f:3d:8a:51:a8:25:a9:d4:0f:4d:89:e9:a4:74:4a:51:f6:a4:
94:b3:73:46:2d:75:df:ce:28:29:00:ec:89:80:ac:4e:53:ba:
43:1c:3c:65:ea:98:90:63:17:7c:67:77:34:18:b7:ab:1f:31:
f9:c9:2b:e9:1f:12:6e:68:9a:86:cd:d5:e3:fa:eb:b7:b3:50:
13:3d:3a:6f:89:17:c5:50:d2:4d:9c:a9:09:a7:87:37:fb:53:
8d:94:76:29:2d:95:fe:b7:74:5c:ba:28:9a:5f:54:e9:35:04:
cb:e5:a3:dd:c2:54:dc:a1:8f:4a:e1:c3:87:d9:2c:81:c6:1d:
b8:20:28:b7:c5:e2:b3:b7:ba:1d:b0:64:04:94:84:43:29:d8:
b0:2a:e5:cf:9e:c2:1f:04:5a:04:e3:c4:2d:0a:05:f5:35:7b:
25:ed:47:d6:f1:93:a3:6d:bb:ca:7d:02:39:96:5c:e0:31:99:
1f:66:ba:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:23 2025 by rpki-client