Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
File: DTIXImHJUJ5XNSE3ugGSqEhrb90.mft (raw, json)
Hash identifier: m50bmE5pUb8g3+1fkL63DahuOtqtWaX4jr9BuUcV/ic=
Subject key identifier: 60:5A:FF:E3:75:55:92:3E:F0:6B:CD:EC:7A:0C:AA:A5:5B:3B:32:7F
Authority key identifier: 0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
Certificate issuer: /CN=0d32172261c9509e57352137ba0192a8486b6fdd
Certificate serial: 01950F46928ED24C6FD87C0A265C25065E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
Manifest number: 053E
Signing time: Sun 16 Feb 2025 15:00:37 +0000
Manifest this update: Sun 16 Feb 2025 15:00:37 +0000
Manifest next update: Mon 17 Feb 2025 15:00:37 +0000
Files and hashes: 1: DTIXImHJUJ5XNSE3ugGSqEhrb90.crl (hash: 0J5jwyvoZmAggoGw1q3RhDcto+dv7i9bV9zHugQt9s0=)
2: fjriIHG0K5ESLdXlGMzPccy1eWc.roa (hash: 8Yi5eFrLfWuilXieuc7JFFDe1Ore62ncPRyz11+p5yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:46:92:8e:d2:4c:6f:d8:7c:0a:26:5c:25:06:5e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d32172261c9509e57352137ba0192a8486b6fdd
Validity
Not Before: Feb 16 15:00:37 2025 GMT
Not After : Feb 17 15:00:37 2025 GMT
Subject: CN=605affe37555923ef06bcdec7a0caaa55b3b327f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:9c:69:c7:a2:47:15:b4:af:bb:03:21:71:
72:92:7c:da:e3:f8:ec:79:fb:a1:51:9c:2b:47:41:
a7:2f:10:bd:12:74:d4:fb:99:57:43:d8:9c:6e:9b:
41:fd:d4:f6:33:63:eb:d9:82:bd:d4:f3:19:4b:06:
83:05:4e:fb:28:a5:bc:c1:a7:ee:27:5e:27:da:b7:
e4:42:ee:5b:5d:b0:00:b6:0e:3b:c7:d2:11:3c:75:
84:aa:5a:f0:bc:43:43:15:e6:b0:0d:bf:7b:03:ae:
f0:34:ff:a3:9b:33:68:95:94:d6:68:5a:e7:0d:51:
94:06:61:d8:2e:bb:58:9c:7d:c7:d7:ef:d1:f7:ed:
3b:68:b0:b0:10:8a:9f:da:7f:74:54:8a:1b:0f:68:
94:2d:a7:b6:15:00:2a:98:be:66:83:eb:ba:cb:65:
b5:05:0e:2a:98:ce:d4:1a:18:40:65:b9:68:83:f7:
ab:82:4f:9f:7e:3a:7d:14:fb:2c:59:6b:5f:ad:1a:
44:23:b9:79:7c:51:ec:4a:49:e2:b5:65:d8:03:ec:
fe:77:f6:0c:a8:1f:bf:c7:8b:25:08:ec:10:e3:82:
43:02:ca:c8:70:c5:46:c2:7b:f4:d3:5e:c1:92:94:
4d:a7:7f:18:78:51:fd:9c:86:00:ea:00:c6:6e:2e:
04:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5A:FF:E3:75:55:92:3E:F0:6B:CD:EC:7A:0C:AA:A5:5B:3B:32:7F
X509v3 Authority Key Identifier:
keyid:0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4c:93:07:53:e3:a0:51:05:bf:9f:f5:15:dd:08:26:04:5f:
9c:10:c8:18:fb:b8:4e:45:7a:52:2c:59:4c:2d:6d:2e:dd:93:
98:84:8e:2e:8f:a4:ae:fc:63:10:6f:24:d3:37:26:e2:6c:96:
ca:8b:bb:ad:6a:db:39:22:29:07:26:bd:89:d6:d7:52:9d:a4:
1c:1d:43:3d:f0:4b:0c:e2:bf:a6:a7:94:b7:89:49:ea:bd:26:
0d:9d:2a:05:b7:43:63:09:6b:ee:53:53:a7:d8:2e:f5:1c:ff:
7b:ba:23:38:c4:09:75:ef:fe:85:51:4c:c3:81:81:41:e2:4e:
8e:7f:c2:37:c9:0e:a2:f4:dd:a0:b0:66:21:66:01:0a:50:40:
96:3e:f2:4c:ab:55:b1:40:f1:3e:57:7c:ad:c2:ed:92:98:4d:
ce:b0:dd:6e:63:f7:f1:f7:1e:f5:e7:85:d0:73:1b:86:37:37:
a7:5f:49:6d:e3:42:fe:8e:0d:db:ca:bd:0e:6f:28:9b:f2:ae:
47:76:3d:08:ac:a2:55:af:46:a8:0f:ec:45:82:46:d2:37:a1:
f7:04:35:ac:4a:b1:28:9f:20:27:71:a3:8e:c8:bd:bd:0b:a6:
49:c2:81:f8:f5:f7:f0:40:a6:3f:0f:e2:07:9b:e3:27:7a:58:
0c:da:27:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:46 2025 by rpki-client