Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
File: deqJTuBXdeDvBh0IbKJSFH9ckd4.mft (raw, json)
Hash identifier: DUIHTrr4ytq8fb+7kIlc0sajGnrCprp+88C/R/5gJrY=
Subject key identifier: 31:95:F8:24:29:42:BA:D0:B4:EC:AB:67:63:63:34:48:5D:B8:76:31
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Certificate issuer: /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial: 01958B8457D3D1F253F8BEB36E1D538334F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
Manifest number: 149C
Signing time: Wed 12 Mar 2025 18:01:00 +0000
Manifest this update: Wed 12 Mar 2025 18:01:00 +0000
Manifest next update: Thu 13 Mar 2025 18:01:00 +0000
Files and hashes: 1: HQ3g25P006ROllKfG3gdhpSNHOg.roa (hash: JkW/Op/fvYeKeMra4WDWooddbprrjz6RgWEE7Fl3VHc=)
2: T23Nk-nWZ13uL-vUgHBSmBD0a5Y.roa (hash: /bhq2aMKeWlXXVjqRKG1maK35mjghRj8veSjPURu6WI=)
3: deqJTuBXdeDvBh0IbKJSFH9ckd4.crl (hash: SUCX/2h0YN/a4DoxsSo+dCTFSN2gaA9A3xgSX1HhBRw=)
4: koi0-CGVFzzCbkI5al5_w7LgOj4.roa (hash: Ypeyl95U2AAhobdLkDDvp1F6OHWp8H5ed2csv8B3QLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:57:d3:d1:f2:53:f8:be:b3:6e:1d:53:83:34:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
Validity
Not Before: Mar 12 18:01:00 2025 GMT
Not After : Mar 13 18:01:00 2025 GMT
Subject: CN=3195f8242942bad0b4ecab67636334485db87631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:4c:b1:2b:95:79:15:1b:c8:dd:08:1f:e8:
61:8e:4e:70:84:46:54:91:35:b5:7f:b1:f0:a4:ea:
f1:52:70:64:7d:e9:03:40:11:44:7d:5c:f1:c0:3f:
8c:37:53:f0:9e:a2:dd:3b:dc:18:85:33:3a:b3:d5:
fa:47:99:fa:46:a3:ae:2d:c4:8c:fa:13:e1:86:c6:
89:8b:05:a8:fc:9b:e5:66:6f:24:6f:97:d9:65:a9:
8b:ac:10:4b:9c:6e:07:3b:11:ce:31:d1:02:0b:5a:
ee:d4:46:97:09:c4:59:44:c7:a8:c1:b5:01:37:0c:
9e:af:7a:3e:4a:64:1f:70:1f:f3:3b:b7:f4:74:c8:
e0:f3:04:ab:79:3d:96:bc:31:17:be:98:b6:11:4f:
1e:97:6e:30:7b:21:23:32:f9:06:a1:29:ff:3c:42:
e1:7b:1d:73:cd:3c:23:b0:c2:df:45:f7:b2:58:48:
0e:8b:de:fc:05:94:b2:41:22:bc:08:6e:9c:c2:f9:
84:d1:a9:2b:95:ef:68:51:5c:53:44:9e:1a:e4:87:
bd:42:39:07:66:13:bb:99:c5:90:85:4f:76:19:44:
aa:8f:e4:b8:26:d0:b8:11:bf:a8:32:a8:44:96:89:
b2:83:cc:d3:db:d0:57:52:1f:f6:0c:43:9a:62:a4:
1b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:95:F8:24:29:42:BA:D0:B4:EC:AB:67:63:63:34:48:5D:B8:76:31
X509v3 Authority Key Identifier:
keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:26:6b:1e:c5:1e:bc:c7:b7:c6:88:6c:a7:80:c4:9f:62:e1:
54:6c:70:ca:79:e8:2e:62:1b:9a:de:dc:8e:21:9c:47:82:de:
f9:66:cd:62:47:35:d4:a7:ed:73:80:0b:ec:e4:48:e2:c8:33:
00:f8:47:7c:5b:c7:36:a4:1b:fd:f1:d2:dd:58:3d:27:01:2d:
a0:95:e4:9b:08:a6:0f:8c:06:a4:cc:37:e5:57:49:b2:b2:17:
cb:fe:40:59:13:d5:32:26:82:68:a7:c6:51:d2:5e:f7:22:92:
ff:41:41:7d:4c:e9:70:23:5e:45:f8:11:4a:e7:bf:eb:89:4c:
20:d1:92:4d:03:c6:98:ef:ce:5d:f0:11:a8:36:bb:c7:47:d0:
ac:ad:7d:05:1e:97:ae:ec:04:44:0e:76:34:ad:e6:3f:e8:c5:
9f:7d:12:f4:d7:a1:5e:e4:cc:ba:bb:f5:7c:48:58:88:41:d5:
d6:fd:37:a8:7d:97:3e:60:64:16:ab:ac:18:4d:7f:57:d9:3d:
a8:e5:81:b4:36:54:7f:20:e8:49:77:b2:21:e9:58:b8:b6:dc:
94:f0:05:f7:05:42:87:2a:e8:5a:6f:ef:2e:83:49:44:56:94:
d8:7b:ff:e0:b6:d5:24:4b:a0:e8:04:4a:fc:1a:0d:fa:f5:b0:
a8:6a:13:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:03 2025 by rpki-client