Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
File: djLJDvGdK9b2aKSCbi0NFWNelH0.mft (raw, json)
Hash identifier: 1oEe78Ce/XzGbuPVKr3I962W2qimMSFyGcqGn8E8vUU=
Subject key identifier: C0:3C:D4:2E:89:DF:85:AA:DB:42:81:15:A4:D6:E5:B3:0D:33:CD:2A
Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
Certificate issuer: /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Certificate serial: 019652001C95A4D30C9A8D03E69C049B81D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 07:01:01 +0000
Manifest this update: Sun 20 Apr 2025 07:01:01 +0000
Manifest next update: Mon 21 Apr 2025 07:01:01 +0000
Files and hashes: 1: djLJDvGdK9b2aKSCbi0NFWNelH0.crl (hash: +gX1o1cAVsX2t1RGkOTusiJco5kx24b4JomBmrvaWOI=)
2: wBaE5svUrTDa4cJiCAHlEwrForw.roa (hash: sNv0g7ZzW3+C7EQOHQU5ckniP/nqJPJ/xsRMEfe9338=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:00:1c:95:a4:d3:0c:9a:8d:03:e6:9c:04:9b:81:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Validity
Not Before: Apr 20 07:01:01 2025 GMT
Not After : Apr 21 07:01:01 2025 GMT
Subject: CN=c03cd42e89df85aadb428115a4d6e5b30d33cd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:74:f5:97:85:8a:bd:e8:60:3f:8e:97:7c:
2f:4e:59:97:7f:32:85:8e:db:8a:43:f8:81:6b:e3:
7a:5f:4b:80:34:6f:ee:61:67:3f:28:1e:9e:ff:f7:
42:56:54:a8:e7:c1:94:fd:8a:1e:72:33:8a:46:0c:
e0:be:b0:37:87:48:0a:37:cb:06:bf:d5:05:49:bc:
1e:3a:90:d8:bc:e9:4a:87:21:41:6c:48:8b:dc:9f:
74:82:30:a6:fa:6e:c9:36:63:55:7d:0e:b6:8a:e3:
98:4f:36:d2:19:fe:7a:06:8a:83:64:7d:e1:26:1a:
6f:f8:15:66:db:22:02:3b:df:65:d1:80:c8:b9:13:
20:ab:8b:5b:fe:39:d8:4d:b0:08:af:3f:84:ee:f1:
18:88:de:c2:41:2c:be:68:8b:7a:ab:b0:6a:90:18:
96:b9:0e:86:a8:04:05:76:36:4e:8d:90:ec:2b:c0:
20:0e:df:ac:3c:f5:80:ce:36:10:c9:92:3e:0a:bd:
e7:16:ce:07:30:f0:3f:2e:f7:ce:63:70:09:6d:39:
e2:0f:fc:c3:f8:a4:71:b4:4b:2a:e8:8a:90:5f:49:
6e:91:30:80:42:3d:91:13:4c:88:f4:21:e4:76:0c:
8b:ec:c3:98:a6:4f:8f:04:ef:67:ca:56:10:f6:3d:
7b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3C:D4:2E:89:DF:85:AA:DB:42:81:15:A4:D6:E5:B3:0D:33:CD:2A
X509v3 Authority Key Identifier:
keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:df:ba:97:3b:86:ab:d8:e3:8a:78:05:55:2c:c8:66:6f:14:
24:24:9d:53:99:81:f3:8b:67:a8:ff:fa:e9:bd:5c:22:59:2b:
d6:98:6d:ea:8c:69:d9:3b:90:70:21:48:53:78:bf:47:b1:d0:
50:08:94:3d:80:42:be:90:e9:bb:90:bf:69:1c:97:d9:c4:f8:
9d:42:d4:31:9a:28:cf:74:e1:da:8b:3f:01:dc:2d:89:fa:06:
f1:40:cf:d4:d2:40:c0:20:b8:18:08:18:47:5a:83:85:89:2b:
9d:a7:a2:1b:cd:44:83:d2:38:ef:84:a0:7b:69:ef:f1:6c:ef:
b9:f4:91:32:76:8f:59:32:d1:f4:c3:a8:1d:55:a7:49:ad:b7:
ca:df:fb:86:00:64:f7:a8:e4:b7:5e:90:29:6e:5e:f6:b0:fe:
4e:f0:a4:2d:de:91:86:5c:dc:78:a0:bd:76:45:6b:ea:c5:ef:
02:7f:8e:6f:38:01:4d:36:bd:43:97:16:13:66:a4:1a:60:d7:
ec:6a:19:bd:d3:d0:68:9d:26:d0:79:d2:1b:17:d8:85:4f:21:
3e:75:25:ae:29:99:5a:bc:c3:7d:d0:3d:32:f5:39:47:cf:09:
60:1e:40:12:19:53:01:2d:a6:48:77:16:1c:ff:7d:41:a0:8f:
43:7f:44:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:53 2025 by rpki-client