Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
File: D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft (raw, json)
Hash identifier: AwmljgjGvCFPefB+K83kmgv8HHHATRJ5yFLikRD3KY8=
Subject key identifier: 8A:CC:6C:1F:55:30:6E:39:2B:6E:71:82:FD:0D:0E:DC:F4:6F:8F:23
Authority key identifier: 0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
Certificate issuer: /CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Certificate serial: 0196439F5398523193B0FD12A973DE139CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
Manifest number: 0D5B
Signing time: Thu 17 Apr 2025 12:00:37 +0000
Manifest this update: Thu 17 Apr 2025 12:00:37 +0000
Manifest next update: Fri 18 Apr 2025 12:00:37 +0000
Files and hashes: 1: D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl (hash: uzAeQSt+/PugmmklsoVIaC7PRTfKuVod70IkOisdqow=)
2: FIHDrOZdPItJ1g7-VrAk_uoQnSo.roa (hash: 1BVoM3pIwN+Dth/AavDroFy4/aBiv0LMqKNh/mLZqqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9f:53:98:52:31:93:b0:fd:12:a9:73:de:13:9c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Validity
Not Before: Apr 17 12:00:37 2025 GMT
Not After : Apr 18 12:00:37 2025 GMT
Subject: CN=8acc6c1f55306e392b6e7182fd0d0edcf46f8f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:b6:1e:15:2c:a7:ad:63:0d:db:4d:f0:97:
63:89:48:4a:c0:09:57:db:03:85:d5:60:74:bf:e9:
12:43:ca:c2:38:23:9b:8c:70:e5:d6:b5:62:8b:4a:
9c:2d:ed:54:12:6d:05:48:33:f5:d5:c7:4e:b5:10:
c1:96:2d:e4:9a:53:03:d5:00:a4:31:32:02:0b:c8:
b0:e7:25:d9:f6:c7:44:da:34:52:0a:74:4c:34:20:
60:f9:8f:c4:4c:6d:0b:44:bc:e3:b3:9f:90:bc:bc:
74:61:75:c5:42:6b:c7:c0:ab:48:6d:70:7c:e6:46:
9a:12:64:03:17:be:55:62:c4:db:d5:24:36:9a:68:
aa:20:e1:47:1b:c0:71:14:3f:88:ac:71:6a:80:64:
5f:5e:4d:c8:51:5c:71:79:88:d6:ae:98:5b:4a:bf:
ae:6e:56:a8:af:b1:2b:ba:02:24:95:5c:08:ad:51:
d7:b2:7b:12:f7:da:b1:9a:51:c7:a7:dd:83:76:50:
89:13:8f:34:4d:96:8b:91:80:47:4b:de:c6:a1:3c:
92:1a:3a:9c:e8:c1:38:86:6a:f3:c4:88:9f:93:e9:
76:a3:8c:e2:f9:cd:d6:17:da:10:49:d0:25:47:bb:
3d:cd:19:ff:b3:63:5c:88:86:3f:b5:a5:59:1f:ba:
8c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CC:6C:1F:55:30:6E:39:2B:6E:71:82:FD:0D:0E:DC:F4:6F:8F:23
X509v3 Authority Key Identifier:
keyid:0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fd:df:b4:67:ae:18:07:15:87:43:bb:34:6a:2b:c6:c6:c2:
b4:40:c2:ed:66:35:83:12:b0:39:87:d7:35:7a:51:57:1a:3b:
b0:0e:c8:23:39:6f:12:37:f0:33:57:1c:93:74:28:f7:31:eb:
5a:5f:b3:3b:6b:d7:82:32:27:b2:13:cb:70:8f:d0:1c:3c:f8:
6d:d6:0d:c0:d4:73:76:fb:6f:b8:cd:1b:81:2e:07:db:13:e1:
77:fe:b4:28:8f:6a:5e:75:5c:e3:40:6a:69:4e:86:57:34:65:
9b:f2:f5:37:a5:a8:8c:60:3e:85:84:8b:76:cb:03:58:0e:6f:
85:30:8b:c0:81:d6:da:1f:76:29:c4:d2:b3:10:32:cb:45:b4:
3e:2b:e2:14:aa:aa:94:0b:92:62:9b:6c:8e:00:78:31:1b:8e:
61:10:aa:b6:ef:75:3e:02:e5:ff:c7:b1:5f:b2:05:84:e6:09:
2d:79:77:58:68:d6:6e:ad:5a:1d:0e:c6:21:2b:c7:dc:e0:42:
56:4c:ff:3f:6b:d1:c2:0f:73:35:75:d7:cb:ba:5c:80:6b:16:
e5:82:f4:8b:86:ec:71:fe:00:20:11:d0:f2:8b:ba:7b:4a:79:
7a:d8:a9:58:57:a1:6b:75:ba:29:f5:58:cc:f5:13:52:fd:b1:
1d:0b:92:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:45:20 2025 by rpki-client