Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
File: Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft (raw, json)
Hash identifier: V3nmgIGg8wNiQ3A2qIC+9Q0uMHrzCiGUVaGMjt9Gnw0=
Subject key identifier: B3:AA:14:EF:63:DE:97:77:B8:2B:74:EB:68:B0:DB:5D:FE:86:D0:5D
Authority key identifier: 0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
Certificate issuer: /CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Certificate serial: 0196293BB441863B986AB2ED8DFD11732705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
Manifest number: 147D
Signing time: Sat 12 Apr 2025 09:01:40 +0000
Manifest this update: Sat 12 Apr 2025 09:01:40 +0000
Manifest next update: Sun 13 Apr 2025 09:01:40 +0000
Files and hashes: 1: Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl (hash: YqSa66Pe/CU3kDF4RAUd9/hNxI9h9sRTGwGayxX00kQ=)
2: egtmxNDK9FDAgrarU-Xyuo-QkfI.roa (hash: e278lOu7Zhdc/1PtGLzkkZXNU5WcrL6PKLI2BzSWdWQ=)
3: fEAZa-O9fHJhM2xOUClofNSLhKo.roa (hash: 7vCADDbVNbLzIuWoH8sPbznEC+p/MBTPDQ5yLj9acsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:3b:b4:41:86:3b:98:6a:b2:ed:8d:fd:11:73:27:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Validity
Not Before: Apr 12 09:01:40 2025 GMT
Not After : Apr 13 09:01:40 2025 GMT
Subject: CN=b3aa14ef63de9777b82b74eb68b0db5dfe86d05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d0:b3:b7:79:89:37:9c:36:5d:39:38:0a:0a:
d9:d4:a9:c5:b8:cf:1c:f5:74:62:3e:3f:e0:80:b1:
77:12:c5:f1:6f:9f:3c:c8:da:b2:fd:3e:3c:5c:e7:
a7:67:c9:22:63:98:70:bb:0a:3d:42:96:6e:29:61:
37:63:2c:7d:4c:8c:8d:d2:03:5f:13:76:60:b4:4c:
5a:9c:4d:72:f0:89:26:9a:b1:df:6e:04:ad:d1:83:
29:f3:cb:81:49:09:f7:bb:38:b5:e0:aa:9d:4b:d2:
a8:8c:fa:4c:07:c6:27:af:44:45:4d:f6:0c:eb:90:
b5:7e:2a:dc:fb:86:eb:77:a0:49:0b:de:42:b7:28:
95:eb:84:8a:ad:c3:8d:6d:1d:40:fa:22:80:66:20:
00:a3:b6:a5:9d:ea:37:73:21:39:ea:ff:fb:48:7a:
4c:64:d3:eb:ad:35:67:a1:94:5d:71:37:6e:95:85:
f3:b8:69:5a:66:1c:fd:2c:5a:d1:2d:51:02:3d:33:
28:bd:cd:81:08:36:b0:bf:97:3d:e8:18:70:a9:67:
9c:a9:08:fb:05:ae:eb:e5:b8:89:37:52:9f:af:74:
0b:b0:5d:06:f6:2a:c3:4e:2c:b8:c7:a8:20:4b:c7:
f5:86:4e:f5:be:7f:87:83:2d:66:8f:5b:c9:51:f2:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AA:14:EF:63:DE:97:77:B8:2B:74:EB:68:B0:DB:5D:FE:86:D0:5D
X509v3 Authority Key Identifier:
keyid:0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:69:a9:72:7c:cc:41:c5:8b:ef:e1:c7:51:7e:45:4b:8b:a3:
8a:8f:58:ab:29:a3:c0:90:bd:07:74:a3:97:31:98:99:7c:25:
2d:9d:f9:a7:fe:46:a1:46:ab:5b:9f:45:77:46:b0:16:cd:72:
ae:e2:ea:7d:c3:89:38:e9:07:d1:10:d1:fa:24:a9:eb:bc:c9:
9f:94:46:45:b6:11:1b:07:a7:f2:bd:1b:49:3b:dc:80:4b:b8:
c2:4b:3b:b6:6e:23:54:c3:27:b9:6e:77:c1:1e:61:70:a7:28:
33:5f:14:39:93:d4:65:c7:9b:f2:7b:45:f0:e5:b2:94:65:03:
d7:c5:6d:66:98:b8:32:dd:ef:03:9d:60:61:2a:fd:b3:27:b3:
ff:fb:13:8a:fe:03:86:cc:9f:22:64:95:0d:57:e3:ca:1e:5d:
9a:e7:16:a0:ab:29:84:e7:2f:2e:d3:ac:9c:4b:fc:3d:e6:e9:
1c:96:e9:d7:7f:61:bc:be:ea:d0:a2:9a:4f:32:dc:df:47:44:
99:0a:d0:78:5f:fd:a1:4d:cc:e1:0d:18:b9:70:32:a7:ac:d6:
4b:11:b5:2c:60:68:bd:4f:b6:2c:ac:aa:86:4b:9f:b7:f6:39:
50:1b:0a:90:eb:b2:18:2d:57:f6:bb:a2:dd:f5:84:ce:d9:b8:
ca:3f:39:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:47:45 2025 by rpki-client