Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier: vqqgOHfQfFTIKmNs0JM0JRiuzXROJMG9A1batJQCwLQ=
Subject key identifier: A1:27:55:FB:C1:A7:4E:71:86:3E:FC:73:DC:3B:30:74:9D:17:2B:68
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 019613213DB3F4BF0118818078B75FCCFDE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number: 12A1
Signing time: Tue 08 Apr 2025 02:01:07 +0000
Manifest this update: Tue 08 Apr 2025 02:01:07 +0000
Manifest next update: Wed 09 Apr 2025 02:01:07 +0000
Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: xOwdsJk0BltqpR5pZkHr7GC4iXeWqo6nHiKiaJUFvbc=)
2: ka4zet-SkUrSnEvI5_4fHR-JIQI.roa (hash: EBw/ap+q2JTBNlcLQGiKoKAynchkYNGQi71a58xmflM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:21:3d:b3:f4:bf:01:18:81:80:78:b7:5f:cc:fd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: Apr 8 02:01:07 2025 GMT
Not After : Apr 9 02:01:07 2025 GMT
Subject: CN=a12755fbc1a74e71863efc73dc3b30749d172b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:1a:3e:66:e7:7e:94:d2:ec:c8:a4:86:88:
16:72:0f:39:1f:81:d6:1a:d9:6c:63:c0:a5:69:26:
15:82:76:16:19:d4:a4:ab:1a:12:cc:5b:d0:ef:82:
1f:72:4d:52:d9:33:32:ae:3e:8b:7a:b2:24:cd:34:
d7:73:15:72:04:56:f6:30:36:26:90:cb:22:63:06:
e5:3f:37:a7:d8:39:82:a9:3a:1d:05:c5:6c:89:07:
29:52:b6:70:00:24:21:ee:3d:16:43:41:f7:41:98:
6c:f2:db:22:b8:55:0a:71:08:40:09:c1:b5:dd:61:
91:cc:d1:7b:d5:7a:bb:de:60:17:c8:22:69:2a:51:
0f:40:59:44:90:2c:fd:9e:f4:4d:6a:de:82:29:1f:
a4:ba:3f:0d:c3:17:65:62:20:a5:16:fe:7b:05:d5:
73:02:9e:49:12:56:75:b8:63:be:8f:70:22:53:a6:
ed:a6:fb:7d:9e:3c:bd:91:aa:18:b1:23:fc:d0:c1:
02:57:f5:5b:4e:12:63:0d:4f:ef:c1:27:30:07:4e:
48:6e:c2:83:f6:8c:66:68:6d:e1:60:b3:fd:b5:cc:
44:43:68:12:4f:f0:0e:9d:25:21:b1:48:e2:ac:1d:
93:2a:a3:40:7f:cd:71:74:d9:5a:b9:d7:a0:4c:d9:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:27:55:FB:C1:A7:4E:71:86:3E:FC:73:DC:3B:30:74:9D:17:2B:68
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1b:f4:57:6e:bf:2b:80:28:0c:b8:57:1f:99:97:02:df:be:
ad:ae:7c:6f:7b:b5:eb:22:0c:13:69:e3:8f:9b:4b:f6:ff:27:
c5:05:95:dc:76:d7:ff:7e:42:9b:cc:58:c2:64:27:28:a5:cb:
1c:cc:2d:10:b2:cf:d7:2e:0c:c7:74:49:00:4c:91:79:56:03:
df:7b:d6:5f:6c:0c:f6:67:22:3f:62:0a:8c:01:8e:5b:9a:f7:
2b:cd:13:d9:47:4b:b4:ce:95:89:97:c4:b2:73:3b:2d:a4:e2:
0c:4a:23:6e:90:93:68:f2:04:5d:97:88:7c:6d:d1:af:d8:04:
ce:e7:ab:67:d0:c7:ce:62:79:fc:07:09:ce:6b:5a:cc:61:29:
0c:3c:a0:da:8c:bb:2a:d2:26:76:5e:f3:dc:4f:e7:8a:d1:b3:
0a:ff:19:6f:af:d4:0c:36:47:39:6d:c9:10:b6:04:44:fe:57:
4b:f9:fb:2d:10:4c:38:00:fc:30:c5:f8:c9:2e:97:f9:9a:48:
a8:b4:35:a9:81:0b:b6:c6:37:08:ec:a0:49:d8:a1:84:40:ba:
e0:77:ac:d7:09:8d:d0:7e:28:18:53:b7:48:37:4b:f2:44:35:
92:ad:51:d2:a2:e6:8f:14:7b:e2:a9:dd:7e:28:c5:4a:f8:82:
01:e5:4e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:36:13 2025 by rpki-client