Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
File: DuPU2BDyR3hBqLhVk7jzDors1Ak.mft (raw, json)
Hash identifier: 06Ar7mCSvtoDx0CSzFhFqHTZPc8HvgAdPJUovNWGIR4=
Subject key identifier: 72:B9:A2:F4:04:EB:60:A9:8C:06:AA:75:B3:92:A6:78:DB:53:20:BA
Authority key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
Certificate issuer: /CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Certificate serial: 01964FDAA8D7090820F12C9EFA9CB8339075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 21:00:52 +0000
Manifest this update: Sat 19 Apr 2025 21:00:52 +0000
Manifest next update: Sun 20 Apr 2025 21:00:52 +0000
Files and hashes: 1: DuPU2BDyR3hBqLhVk7jzDors1Ak.crl (hash: bWTu+GF0QaxNcqCZF7BiAaFzLj/feSS5V5LWXI2VelA=)
2: kT96Syix82Ksegk49TAUeSUGMVc.roa (hash: d9BAb8ybDMu+8NvAhemfJFOhiARZSFEf5iHfB6YfEWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:a8:d7:09:08:20:f1:2c:9e:fa:9c:b8:33:90:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Validity
Not Before: Apr 19 21:00:52 2025 GMT
Not After : Apr 20 21:00:52 2025 GMT
Subject: CN=72b9a2f404eb60a98c06aa75b392a678db5320ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:8d:f7:87:59:87:4c:91:41:81:59:53:87:
44:b0:74:91:22:ad:73:db:a4:80:e8:6b:24:0b:31:
24:e5:ee:b9:92:38:ec:8e:fb:27:82:5a:bf:78:e8:
e2:7b:cc:bf:9d:2a:90:f7:59:ef:72:c4:f3:4e:b2:
a4:e9:b1:05:5d:09:00:b5:7a:4b:10:ba:34:c7:13:
a9:23:ca:7a:95:23:6b:40:fa:59:bb:f2:c4:5a:f3:
bf:4c:73:99:93:23:e6:fb:b9:2e:22:eb:45:83:1a:
9f:ad:81:2f:36:24:a0:df:60:7c:a8:79:bd:23:a8:
87:1f:9d:a5:81:96:95:5f:a8:c6:de:ad:58:77:e1:
a6:d3:19:31:be:f2:a6:9f:24:cf:e3:23:3e:cf:87:
18:40:de:61:0e:fc:4b:1a:95:b9:a2:b8:40:3f:b9:
ef:8a:6b:d8:49:5f:1c:c1:06:58:87:1a:89:ec:7c:
63:49:81:dc:f2:bc:9f:3c:11:e4:92:b0:d0:53:e9:
b3:2f:81:c8:b0:a7:8b:f7:1f:98:04:ec:93:19:9a:
26:d1:12:92:7d:b6:45:27:72:0a:d7:0f:15:6a:7b:
95:0a:5b:ff:5e:fc:5c:7f:1a:83:b5:46:f5:61:d4:
e7:76:ae:ec:50:8f:1e:2e:db:8f:3d:cd:9d:13:e1:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B9:A2:F4:04:EB:60:A9:8C:06:AA:75:B3:92:A6:78:DB:53:20:BA
X509v3 Authority Key Identifier:
keyid:0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:25:2a:36:00:21:f8:f6:32:af:06:12:e3:11:e4:cb:4b:45:
82:51:9a:5f:db:c4:88:b6:da:9e:b6:e1:f6:66:8b:6b:e7:07:
3a:54:bc:d0:6b:42:a0:5f:8c:24:c9:7e:e3:b3:54:2f:88:c2:
59:46:36:a9:71:e4:02:fd:63:7e:2e:68:18:92:77:b5:db:a6:
58:7b:93:ee:5f:5f:bd:d7:76:9e:ff:84:cd:2a:24:aa:4f:5a:
c6:77:bd:37:1b:4d:c8:90:27:9b:04:83:50:c3:ac:9d:ea:db:
ab:55:16:3c:45:36:67:12:aa:b1:e5:ec:0e:49:ef:2a:e9:43:
cb:cd:fa:93:16:ae:3c:dc:7c:09:6d:47:0f:9b:92:7c:f5:e1:
a1:06:5d:56:33:1b:49:1b:d4:37:73:3a:77:43:0f:fe:da:89:
6e:9d:7e:47:dd:01:53:61:63:29:98:47:bd:4f:c8:6a:75:7c:
fe:e2:3e:d6:7b:73:5b:02:d6:d3:4d:c0:33:18:6e:77:01:7d:
f7:88:52:a0:97:65:81:f0:c4:e1:22:8c:a1:df:31:4c:66:7e:
76:8c:7b:01:b3:de:0d:38:98:2c:f8:72:81:be:b7:5e:06:b0:
2e:5e:dc:95:1d:bd:d0:7f:06:db:b8:d7:1e:c6:00:a7:81:ae:
a5:87:88:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:54:08 2025 by rpki-client