Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
File: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft (raw, json)
Hash identifier: SJJq1lkhfPGGZknetIexf1nogWQ4ZXR79izGXzWrHyk=
Subject key identifier: E8:3F:A7:83:AB:3E:6A:95:88:76:D7:FD:EF:7D:7D:81:60:8A:FD:25
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial: 019654928957298512AE5D69E13753A31B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 19:00:11 +0000
Manifest this update: Sun 20 Apr 2025 19:00:11 +0000
Manifest next update: Mon 21 Apr 2025 19:00:11 +0000
Files and hashes: 1: 1-y1Ne5UH69xAclnQXN8UNFZ6fbA.roa (hash: DMlPQL5W5NIfofMivrzJcYQP+Q8OdiiG+2ZjJ0SbGWs=)
2: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl (hash: b26E3GP4ZOV2mcbRaF1NgaLOzlMjz7KIr+dFlleFEDE=)
3: gP1adqpN3jFkt9OdAVoyA-6IhBE.roa (hash: LIhJSQT5pr5zAf/JFHVd3amDAMZCN7LCkj2NZQ4RFrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:89:57:29:85:12:ae:5d:69:e1:37:53:a3:1b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Validity
Not Before: Apr 20 19:00:11 2025 GMT
Not After : Apr 21 19:00:11 2025 GMT
Subject: CN=e83fa783ab3e6a958876d7fdef7d7d81608afd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:c7:07:b2:4e:8a:8a:f6:7d:7c:b4:87:81:
de:e2:42:0b:ab:9a:25:de:ee:e5:f4:ad:ae:16:37:
53:1b:48:ff:f0:d9:fc:47:4a:b6:ae:98:dc:eb:ab:
1d:3a:31:cc:b2:cc:a2:a1:0a:5e:4c:de:61:ac:31:
79:0c:6d:77:ff:08:be:94:8c:69:e2:c4:55:13:6f:
60:51:2a:07:1c:d2:46:31:35:3e:49:e1:85:2b:78:
e2:08:84:c1:e9:ca:77:6f:ed:b5:14:34:80:c1:18:
12:ba:8f:6b:23:8e:71:0a:61:36:a9:77:36:c2:2c:
d6:4a:f4:39:ca:1d:71:c8:90:07:f5:6b:dd:7e:4a:
b4:dd:03:e6:d9:30:f5:a5:68:42:3e:60:38:61:f8:
5c:82:e5:59:c9:95:22:4c:9d:1d:d3:32:62:70:17:
63:1a:d6:0f:07:9d:fd:2f:f5:1b:4f:43:43:ad:8c:
ea:cc:94:f4:df:60:2a:62:98:ec:47:c5:62:57:16:
d6:f0:38:d2:52:45:d0:ff:99:36:78:68:4a:42:68:
40:a8:10:27:5c:4c:f4:b8:55:dc:15:8b:92:25:8c:
b0:c0:52:d9:71:83:83:49:f2:1c:dc:7c:99:9d:d9:
67:a6:e2:64:d7:c6:5c:40:ed:2c:df:a1:fd:b6:2b:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3F:A7:83:AB:3E:6A:95:88:76:D7:FD:EF:7D:7D:81:60:8A:FD:25
X509v3 Authority Key Identifier:
keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a4:5b:ec:57:56:7d:12:6f:ca:e0:39:4d:af:27:3d:95:d9:
b1:35:a0:05:07:08:59:cc:f2:e5:c9:87:9d:c9:50:2b:d6:a6:
2a:db:80:7c:2e:b7:f9:d4:4e:d2:3e:be:76:44:03:21:c1:16:
d6:a2:80:9a:8c:61:1c:6b:d9:c6:73:14:16:1c:90:01:70:c2:
c4:01:ad:79:38:d2:09:c6:48:86:0f:14:70:3e:60:9d:ba:91:
e8:d7:cb:36:32:23:23:87:7b:9b:46:e9:ac:25:49:1a:4a:40:
cd:0b:22:6c:f4:c6:97:91:34:fd:94:81:75:6e:34:37:a9:da:
ec:e3:f5:69:c3:1b:15:23:d0:50:a8:25:7e:51:96:f0:91:a8:
52:0a:ae:16:ed:3e:1a:07:74:46:cd:b1:a8:ce:a4:99:e9:43:
18:e5:bd:a3:33:fe:7b:61:36:40:dc:85:c0:7b:2e:5d:df:65:
ff:1e:11:9b:22:dc:43:a5:df:e1:b7:27:b9:57:dd:b5:63:7d:
92:83:96:05:d0:77:0a:68:0d:ee:77:15:03:5a:61:5a:51:0b:
99:3f:61:da:b9:ce:5a:fe:46:74:f7:ee:cc:cd:3b:f2:9a:e0:
62:00:4b:eb:24:21:59:af:d6:71:5c:a2:ec:35:31:86:25:c4:
45:34:9a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:31:24 2025 by rpki-client