Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json)
Hash identifier: lhbVNjbTwKD66rucyDSFOdh0ZsQT37w5iK2wMMkftFI=
Subject key identifier: B1:74:D5:19:D8:04:62:F1:E5:2C:27:F9:00:3C:4D:CF:CA:BC:7A:16
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial: 019652365A114F95956B3FC0E1DDE345F967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
Manifest number: 0C1A
Signing time: Sun 20 Apr 2025 08:00:15 +0000
Manifest this update: Sun 20 Apr 2025 08:00:15 +0000
Manifest next update: Mon 21 Apr 2025 08:00:15 +0000
Files and hashes: 1: 0CytvhJudNwvmE_qIywCHCo6NeE.roa (hash: 88aZ7TRUqfxW9sX6erHIjwQ5v2GdVw5BH0X6fcp/TYs=)
2: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: knwgspC046Dkhm/B4G7E3KOe7o/07/8XxlKT2G5RlwA=)
3: KrKK6KlWrbwro0xZGJbZRZAIMbY.roa (hash: mLgmMH2GpuH6gYsfQafOR8wiybY64hDgIvWRNRviit8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:5a:11:4f:95:95:6b:3f:c0:e1:dd:e3:45:f9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Validity
Not Before: Apr 20 08:00:15 2025 GMT
Not After : Apr 21 08:00:15 2025 GMT
Subject: CN=b174d519d80462f1e52c27f9003c4dcfcabc7a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:d8:cc:1d:d4:1b:13:8d:ee:f0:59:06:36:
02:21:e3:3c:ab:03:31:13:4a:46:79:13:77:90:80:
59:a3:be:18:54:fe:48:07:2f:5d:58:d8:25:46:5d:
16:e9:8c:9e:9c:b1:0e:e4:b4:64:11:b9:5c:29:cc:
af:27:bc:76:3d:6e:fb:3c:05:bf:38:38:d3:77:4f:
0c:d0:aa:d5:3f:b3:5a:df:7c:1c:5d:fb:9e:da:66:
d3:62:d9:58:fe:95:7e:67:45:69:0c:0d:66:a6:98:
db:5f:16:80:a5:86:5b:6e:e9:ce:74:de:cf:6f:5d:
08:ea:06:d1:f1:b6:f6:cf:a2:3f:96:4d:58:4f:f0:
6d:69:90:eb:cb:94:0f:b6:b9:13:21:c0:5f:73:bc:
70:2f:6f:d7:54:ad:21:71:eb:10:c5:89:7f:26:03:
f3:f2:23:c2:00:0e:ec:3f:d9:4f:9c:8b:04:a7:e3:
49:fb:56:99:eb:1c:8c:ee:0a:81:4e:ac:d9:e5:02:
85:44:94:80:8d:ed:5e:fb:38:fc:30:c5:0a:62:eb:
88:81:7f:77:2a:cb:38:e4:66:e6:b7:5a:88:71:ba:
81:f7:17:65:21:ff:04:b3:10:49:67:38:2a:20:89:
48:9c:d1:13:6c:ae:d7:2d:b5:09:6f:de:7c:2d:6a:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:74:D5:19:D8:04:62:F1:E5:2C:27:F9:00:3C:4D:CF:CA:BC:7A:16
X509v3 Authority Key Identifier:
keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:33:97:47:d1:af:42:d2:23:9e:f9:7c:de:7e:35:09:6f:80:
b7:3e:08:30:55:76:04:66:2c:5c:b9:4c:a9:66:00:81:89:54:
41:a4:8a:c4:8e:1f:3f:e1:65:9a:ec:38:d3:41:65:35:8f:a2:
ab:06:2e:0d:5a:e2:5d:cf:af:76:71:f9:62:2f:b9:6e:49:25:
e3:da:b3:e4:1c:b1:8c:95:51:fc:0f:65:62:6d:3b:fc:ef:5b:
a6:2b:2d:cd:38:ab:45:5d:89:64:3a:28:6c:f1:13:dd:47:35:
09:8c:0f:2a:00:0f:0a:a2:99:79:48:6c:1a:7a:6e:9b:a7:dc:
61:ab:ae:a1:26:64:39:aa:17:82:4f:6b:fa:ba:bf:bd:aa:c9:
4a:30:a4:fd:cc:2e:88:37:78:81:e3:74:3e:78:26:63:fb:05:
59:0a:ad:5d:cc:17:d0:0b:98:e3:11:a8:d7:fe:c1:2b:70:c0:
16:eb:02:77:d7:c1:a4:f9:27:a9:f5:54:2f:1b:f3:d5:a4:9d:
26:61:43:8b:d9:71:35:0e:1a:98:6f:0d:59:6c:84:d8:67:f1:
98:61:7a:b9:2b:7b:81:59:50:fd:bb:c1:69:53:49:30:f9:fd:
74:e1:56:47:c4:ab:36:79:40:ca:65:63:8e:6e:f4:30:3d:0d:
05:71:23:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:47 2025 by rpki-client