Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
File: D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json)
Hash identifier: dcCXxQ/ssqUbDlbgYkzHrgi8FA1TsX5EQ42iSm3f7Ww=
Subject key identifier: C8:0E:E1:25:F1:F2:35:F0:11:DE:A3:58:B2:ED:81:EF:60:AB:2A:6F
Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Certificate serial: 01958FCF3AB25A35F9B8ACA9E66148E92BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
Manifest number: 01E6
Signing time: Thu 13 Mar 2025 14:01:17 +0000
Manifest this update: Thu 13 Mar 2025 14:01:17 +0000
Manifest next update: Fri 14 Mar 2025 14:01:17 +0000
Files and hashes: 1: 6t_nnlmTXWp3OzIKRqSj0hcN4no.roa (hash: W90ueV41Ar0nzHXhwJLVE6WKCjLM7hges3g+HZc2lOE=)
2: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: rJ7P0Bv3+YJ1UcoZ+wuWu4hHc2fY10w2oW6sG2UNvE4=)
3: vkoeIYHKBiHw3JW2EwGeByZF2OI.roa (hash: 0gHlaMAsvnnPjNWVDTFa0UhQf6R/7xyb1Ul2Br7gTg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:cf:3a:b2:5a:35:f9:b8:ac:a9:e6:61:48:e9:2b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Validity
Not Before: Mar 13 14:01:17 2025 GMT
Not After : Mar 14 14:01:17 2025 GMT
Subject: CN=c80ee125f1f235f011dea358b2ed81ef60ab2a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:28:6f:56:24:05:f3:c0:b1:97:e6:c1:9a:
e1:18:b7:f0:35:39:79:23:03:0e:36:aa:ec:b0:fb:
f3:e0:b6:cc:31:89:43:5f:47:dd:8e:79:20:04:d4:
5b:66:f3:7e:81:41:b2:20:49:be:3b:6f:bd:e9:1b:
9a:73:aa:11:10:41:c3:28:d3:c2:6e:2e:1f:49:47:
2b:24:8f:55:e2:5f:7d:28:d4:9c:03:40:48:d2:36:
5a:f6:55:a2:70:70:79:8f:6b:0e:17:0d:76:77:3d:
eb:1a:eb:c8:00:1b:36:8d:d6:44:90:07:57:e4:bc:
63:36:21:0b:cd:3d:e3:56:aa:e9:6c:36:1d:af:79:
84:d1:58:8a:17:34:66:af:c7:05:b9:d4:e3:5d:18:
85:e6:53:ce:36:48:2c:3e:c0:c1:dd:e9:7b:71:ad:
05:61:56:c4:5f:f1:0b:cf:6a:3c:85:3e:be:a7:19:
e7:69:9b:43:32:59:f1:99:4b:65:a1:b4:a7:47:57:
b2:50:63:50:69:fa:5b:3e:ff:e7:1a:77:8e:59:0d:
3f:6c:99:cb:cc:31:4d:f3:3f:4e:c9:0e:24:f7:69:
44:f1:1e:bf:c2:16:37:f0:fa:a3:a5:42:e3:83:1f:
cf:3e:57:b5:db:0d:c6:dc:8b:41:0d:60:50:73:26:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0E:E1:25:F1:F2:35:F0:11:DE:A3:58:B2:ED:81:EF:60:AB:2A:6F
X509v3 Authority Key Identifier:
keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:42:57:cb:d4:97:74:d2:4f:5e:61:d7:cc:26:8a:df:9b:2b:
41:c8:78:07:a5:74:d0:fc:62:a7:82:bc:07:89:1d:fa:fa:4e:
26:ec:87:12:00:a7:09:b3:0f:80:ef:ef:3a:b1:a9:28:79:36:
14:5b:d6:b4:fb:57:93:c6:aa:23:06:51:50:7f:c1:df:e9:4b:
83:48:10:25:01:7b:f0:f0:f8:63:d0:7b:86:d2:7e:94:1b:ec:
cf:28:e4:4f:cc:66:50:71:b6:96:b8:f2:a1:1e:7b:03:bd:47:
1d:6d:1e:5f:5c:be:fc:1e:ff:0d:a5:cb:e3:f6:ee:8c:26:bf:
e3:31:54:63:dd:64:61:60:6f:2b:a4:0c:7a:c7:03:aa:a8:66:
d1:1e:e7:9d:78:6d:7a:08:4a:f2:72:d2:57:64:86:38:32:3c:
a6:31:3b:2b:e6:d7:3e:48:c8:76:1f:85:27:99:73:9a:29:c6:
d7:75:e6:b6:ff:1b:97:d8:72:52:91:d6:ad:2c:be:11:9d:6c:
51:9a:c0:12:e7:8d:26:e2:59:3b:e8:65:c1:6a:2a:f5:0d:54:
52:6a:3b:49:81:20:72:65:52:66:8a:3c:ef:d6:23:51:0b:75:
85:e3:98:64:0c:57:d8:0b:b6:12:9a:aa:fb:fa:32:cc:b9:13:
b3:56:04:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:41:36 2025 by rpki-client