Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
File: DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft (raw, json)
Hash identifier: CUN3rt6+ENEbIxAY2Lc/eoxeuDE26t7xcrDvXZsboEA=
Subject key identifier: 8B:6B:96:26:68:62:06:05:CB:5F:58:DA:A3:51:82:F6:5C:8C:23:CA
Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547
Certificate serial: 01965914295C24EDC4FA6BF89B6EA2D16A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
Manifest number: 146D
Signing time: Mon 21 Apr 2025 16:00:15 +0000
Manifest this update: Mon 21 Apr 2025 16:00:15 +0000
Manifest next update: Tue 22 Apr 2025 16:00:15 +0000
Files and hashes: 1: DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl (hash: fpw6GR+futJgrsGv6OQCwqDfRO2EbewN/5MeXpP5NwU=)
2: fvo32ZlXLNUWfNKLhRu-uClyC2U.roa (hash: bzkWT3EH+ccZpwHViIEHvMRRGrNUoXsGOv/sbjZrV0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:29:5c:24:ed:c4:fa:6b:f8:9b:6e:a2:d1:6a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547
Validity
Not Before: Apr 21 16:00:15 2025 GMT
Not After : Apr 22 16:00:15 2025 GMT
Subject: CN=8b6b962668620605cb5f58daa35182f65c8c23ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:01:18:eb:04:a4:c8:79:d6:fe:09:45:46:
35:9c:9c:df:e0:75:66:42:8f:5c:44:3a:4e:2c:e4:
bd:e9:51:7f:36:d8:2b:6f:22:a1:aa:2a:f6:65:08:
89:6f:52:5a:ad:0d:74:74:be:57:66:1e:6a:bc:48:
a5:b9:a1:92:92:55:27:6d:f5:55:15:46:96:80:14:
6c:fe:19:14:f4:58:65:34:f5:a3:e0:48:21:6f:59:
7d:2d:ab:ab:c3:17:10:d4:95:2d:d5:6d:cc:ba:aa:
50:f7:83:9b:83:43:0f:a5:f4:b5:f4:40:fe:5e:c1:
85:8d:da:6b:4f:13:55:80:05:8e:88:9c:54:3e:63:
ef:9b:ec:4a:03:f4:51:a4:fd:a9:a0:de:f9:1a:81:
eb:17:6c:eb:76:82:5f:c2:e4:7d:c9:43:a4:ba:75:
fe:90:13:12:9c:26:ca:71:7f:8d:26:b9:46:68:8b:
6c:80:3b:76:a5:02:7e:c7:33:77:1c:63:2a:2f:9e:
51:9e:e2:06:cb:ac:07:2a:c3:71:d9:52:23:99:64:
75:87:b1:3d:0c:36:fc:9d:9a:e7:dd:14:ec:a8:02:
25:e1:e9:80:2a:dd:19:a0:f0:58:d5:07:9e:70:75:
b6:8f:03:c4:d5:a7:f0:e4:82:39:92:75:71:29:92:
09:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6B:96:26:68:62:06:05:CB:5F:58:DA:A3:51:82:F6:5C:8C:23:CA
X509v3 Authority Key Identifier:
keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ce:72:41:99:4b:e2:39:ae:5b:a3:c6:4d:b2:4c:14:b0:2a:
a0:3e:3f:72:77:cb:96:31:8e:93:c3:05:1a:3f:1a:70:78:5d:
ea:b4:d0:97:eb:95:86:69:fb:66:7b:e9:64:6b:d7:94:e4:ed:
a0:49:d2:af:e3:aa:f7:c7:e0:f9:77:31:b7:ce:dc:50:21:c7:
29:6b:3d:2e:c9:a1:f7:72:34:ad:13:62:63:a8:f1:4e:1f:a8:
47:98:90:4a:95:02:8a:ce:86:f5:d9:3f:1a:89:2a:cc:62:55:
e4:de:e9:22:94:d9:a5:3e:dc:6f:74:61:11:99:44:f8:6b:b0:
e5:37:f7:47:e6:fe:ec:1d:42:6d:3b:2e:67:22:fb:3f:38:9d:
90:df:21:21:3a:bf:f5:13:ae:d8:bb:26:83:b3:3e:f9:3a:02:
0a:07:60:11:68:53:a1:c3:8c:49:74:fe:4a:cf:2a:55:15:5f:
8f:19:9b:16:e2:d9:7e:22:d0:8a:1f:00:20:63:bb:5e:f9:c5:
b8:aa:00:91:30:0a:68:94:47:91:8d:f5:e5:df:e1:ec:b2:28:
d7:a1:f9:f5:48:a3:31:d0:2b:32:80:21:4e:21:9f:c5:de:54:
1a:b4:80:c2:f7:f4:0e:cc:4e:0d:f7:d7:c1:74:3f:7a:52:d7:
74:bb:ea:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:38:37 2025 by rpki-client