Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
File: DTIXImHJUJ5XNSE3ugGSqEhrb90.mft (raw, json)
Hash identifier: 52AGUBOzPEYAz1yFLSmDMnzVFU6NxgW+WS+yApn1ffM=
Subject key identifier: 20:D6:BD:20:35:EA:EC:E8:49:3A:A8:5F:2D:F6:A5:47:5F:6D:41:D6
Authority key identifier: 0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
Certificate issuer: /CN=0d32172261c9509e57352137ba0192a8486b6fdd
Certificate serial: 01964DECB8276A9B65E73B70D85805833AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
Manifest number: 05E3
Signing time: Sat 19 Apr 2025 12:01:21 +0000
Manifest this update: Sat 19 Apr 2025 12:01:21 +0000
Manifest next update: Sun 20 Apr 2025 12:01:21 +0000
Files and hashes: 1: DTIXImHJUJ5XNSE3ugGSqEhrb90.crl (hash: uSF6rfbTkAK1bPK1mX7/1osvAiUZGPteZxy8ZAJ5BPA=)
2: fjriIHG0K5ESLdXlGMzPccy1eWc.roa (hash: 8Yi5eFrLfWuilXieuc7JFFDe1Ore62ncPRyz11+p5yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:b8:27:6a:9b:65:e7:3b:70:d8:58:05:83:3a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d32172261c9509e57352137ba0192a8486b6fdd
Validity
Not Before: Apr 19 12:01:21 2025 GMT
Not After : Apr 20 12:01:21 2025 GMT
Subject: CN=20d6bd2035eaece8493aa85f2df6a5475f6d41d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:c3:ea:d3:6e:52:5c:65:64:fb:ca:dd:7c:
9f:d4:3a:85:4e:96:b0:8a:dc:3e:f4:ce:6f:03:e7:
de:f3:f7:f7:52:12:46:76:a7:f0:1b:5b:7a:26:05:
10:11:1c:c6:19:d1:c7:dc:6c:71:90:06:70:9c:8b:
62:58:5c:1c:16:18:8b:7c:72:bd:52:e8:c1:8c:6b:
1f:dc:0f:69:88:58:3c:dd:2d:de:0e:f7:fa:fd:8c:
27:52:1a:8e:1a:5e:10:8c:2b:cd:46:17:eb:dc:22:
46:85:b4:2d:c6:89:e6:56:cb:47:5b:6e:d4:c2:d2:
25:ae:e7:d0:93:cf:01:8d:33:c5:40:f4:5c:ed:9d:
24:2e:4b:2d:50:de:c2:b6:3d:f2:4f:9d:f9:c2:d3:
38:77:19:c8:4c:5d:67:04:a4:c1:53:04:00:bc:a0:
28:b2:4b:dd:05:f3:13:a4:f6:29:9d:2d:11:9e:42:
91:dc:f6:48:08:bf:6f:be:38:d6:17:f9:e0:75:c1:
c0:ec:c8:ce:3c:63:b9:0d:36:c9:14:31:b7:bf:a4:
fa:ab:de:1f:31:76:7d:26:47:7c:e7:b1:88:69:59:
84:68:72:9b:8c:8a:e2:53:51:fd:c5:f4:e0:c5:b9:
24:45:23:bd:33:8e:36:06:82:a6:ee:d9:6c:7d:8b:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D6:BD:20:35:EA:EC:E8:49:3A:A8:5F:2D:F6:A5:47:5F:6D:41:D6
X509v3 Authority Key Identifier:
keyid:0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:54:4c:ef:58:23:d1:56:5c:cb:24:bc:da:4b:f9:89:f3:57:
dd:ff:51:c3:75:a7:ed:e7:e4:9d:b9:26:f5:6f:91:5d:eb:f5:
c3:c2:01:95:6b:29:ec:6c:d9:83:b2:0f:da:92:e0:b0:53:31:
74:69:47:73:ab:c4:dc:8d:a1:0f:a5:10:42:0f:ad:a9:92:5d:
28:23:0d:cd:47:df:a7:cd:3b:87:b7:12:f3:f5:a9:7b:73:5e:
ca:13:45:62:4f:de:90:d2:1a:21:25:64:76:c3:70:64:bb:dc:
b7:d2:ba:36:0c:9f:4d:d6:b7:da:b7:f8:b3:14:27:ed:d6:92:
80:a9:fb:d8:78:96:b7:39:cf:79:de:e7:01:de:18:a1:e6:8e:
a1:ce:c5:45:ec:4f:d5:c1:10:2c:84:59:c3:4d:f2:1c:f4:de:
63:8d:86:3b:09:f7:39:53:ef:5e:d1:27:f3:c5:84:c1:8d:e1:
6a:3f:c4:a0:87:c8:11:bb:32:8f:1c:44:b0:4d:6b:79:b3:0f:
4e:f6:bd:d7:01:8d:03:b9:ee:37:f3:7b:3d:6a:51:1b:71:ce:
fe:dd:0c:0c:10:3c:08:c2:85:62:0b:9c:9a:4e:2f:57:95:17:
33:2c:f4:5f:d5:7e:37:9a:e6:c8:84:0a:a3:a2:42:d4:25:e9:
04:89:15:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:11:52 2025 by rpki-client