Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: okMZqesoM7/LrFBvDSDxOcySAXk0c554SMhGX9r4n0M=
Subject key identifier: D2:C7:36:B2:D8:E0:A7:01:B3:41:BD:30:21:92:F9:CB:80:E6:BB:30
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 01958CCE3624D20F50D18FDFA2ECF18FB236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 114A
Signing time: Thu 13 Mar 2025 00:01:19 +0000
Manifest this update: Thu 13 Mar 2025 00:01:19 +0000
Manifest next update: Fri 14 Mar 2025 00:01:19 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: dkkOqekP/CeAfasuOJ6VJ6ih6R0cp+eBIdZvmOooZQk=)
2: AyldtAoWafPHTkmACDxst6jxsP8.roa (hash: 5JuPcS4QOkaO/Jt7b79o9DhsMUfsXTNZilUz8aQXzEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:36:24:d2:0f:50:d1:8f:df:a2:ec:f1:8f:b2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Mar 13 00:01:19 2025 GMT
Not After : Mar 14 00:01:19 2025 GMT
Subject: CN=d2c736b2d8e0a701b341bd302192f9cb80e6bb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:00:78:ef:ca:84:47:a7:33:42:89:54:04:89:
9b:60:f5:11:0e:83:c5:1b:3c:3a:b5:4f:0c:3f:a5:
16:78:42:16:d0:0c:ec:49:b8:4d:0e:0e:bd:7e:b6:
a4:7e:ec:74:f5:ef:42:e3:09:46:27:3d:09:51:e4:
89:2a:68:01:d5:df:c3:14:1d:3a:43:ff:39:4d:3a:
e5:7a:84:38:61:66:e2:41:b3:30:87:93:67:22:6d:
2b:ba:84:55:bc:63:7f:de:55:0e:7e:37:c5:11:37:
9d:3d:e2:3c:fe:15:fe:6b:e7:a1:72:6d:19:2f:17:
06:bc:27:b0:ce:24:de:8b:4f:15:ba:43:0e:85:46:
c8:fe:f9:f2:33:30:72:95:d9:ce:ae:5c:ed:c9:8f:
e5:9e:b3:f1:be:09:c0:cf:ca:87:fc:11:e3:ca:02:
9e:11:a7:0d:b4:b2:75:64:fc:b3:d0:37:cb:40:a2:
e4:ca:a4:c1:e6:00:cb:6d:b5:69:b3:44:0c:7a:26:
b8:d2:38:a8:e7:4f:87:aa:e5:65:4e:16:d3:25:dc:
41:36:ff:ad:f2:58:52:3f:63:90:39:84:ed:ae:7a:
49:90:24:93:5f:04:e1:22:2b:ef:9e:14:ea:3e:79:
9d:b3:4e:8d:ec:21:cb:f4:fd:82:89:dc:b4:67:13:
a5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C7:36:B2:D8:E0:A7:01:B3:41:BD:30:21:92:F9:CB:80:E6:BB:30
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ea:78:54:e8:42:eb:82:fc:f2:01:75:6d:32:07:71:43:a7:
0c:d7:5d:1f:08:2e:44:0a:f8:37:be:05:fb:af:e4:e6:79:38:
d4:6c:ce:88:1e:25:06:c2:b5:d2:f0:a0:e1:00:d1:54:8d:a1:
9b:aa:0a:99:57:9a:8a:49:5b:33:28:67:06:56:68:cc:96:06:
4e:93:5f:6d:d1:9d:d0:11:e6:ac:fa:5e:80:62:12:93:57:30:
c6:f6:0e:13:c4:71:f9:30:4b:95:4a:22:2c:bc:92:04:94:82:
84:54:c9:77:c5:38:7a:91:d4:f0:ee:1b:21:6b:0f:0d:3d:3e:
d9:3a:48:e3:82:ff:0f:e0:62:48:f1:e3:1b:51:c7:7f:85:ec:
37:71:74:3c:4d:e2:61:4c:62:9f:26:a3:a0:fa:20:fa:58:4b:
cc:7d:31:3b:70:25:4b:12:1f:e1:1e:44:bf:b6:2c:19:6b:73:
58:1d:58:15:e9:2d:e4:78:38:91:e1:5b:dc:ee:e2:15:75:93:
bb:58:48:81:a8:d4:45:b8:54:1a:d7:38:be:2c:d4:df:0d:11:
bb:e6:69:ff:c8:68:41:53:66:ac:3b:aa:30:b8:76:70:3e:5e:
90:c4:74:48:1a:bd:c7:10:8a:b7:d0:66:b7:bc:2c:73:17:b2:
70:f9:8c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:55 2025 by rpki-client