Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier: lKcze7p2qojFBSFtevc5M1+3PKfPNWUw0kbQFo6mHJc=
Subject key identifier: 08:47:D2:98:03:CC:24:9E:4F:F0:41:E2:23:0D:33:B5:DA:A9:6F:4E
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial: 01963E424A4D61116689CADED0D4EC8A8249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number: 0CCB
Signing time: Wed 16 Apr 2025 11:00:53 +0000
Manifest this update: Wed 16 Apr 2025 11:00:53 +0000
Manifest next update: Thu 17 Apr 2025 11:00:53 +0000
Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: 4d/Xa5Y/INsVD0n106/V8EzZHGXaBB575/EbjdzUeUw=)
2: WLSJNsKtp7tRpU1OJgVstTs_lJ8.roa (hash: HTWALMbF2cmOkLXiJznP+o3iPW0wZUQzmHPHS3MTUp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:42:4a:4d:61:11:66:89:ca:de:d0:d4:ec:8a:82:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Validity
Not Before: Apr 16 11:00:53 2025 GMT
Not After : Apr 17 11:00:53 2025 GMT
Subject: CN=0847d29803cc249e4ff041e2230d33b5daa96f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:1f:e9:90:2a:92:0c:38:ac:e8:3c:50:d3:
ba:bf:74:38:da:f9:9d:d6:33:1d:f5:da:65:6d:fb:
4b:13:df:d1:e5:65:da:2c:95:eb:e7:20:dc:b7:63:
f4:ac:2c:a0:7a:46:36:2f:02:98:c4:e5:4a:ae:5a:
14:93:31:21:78:2b:3d:c7:88:39:95:d2:a0:43:9e:
49:cc:76:01:08:be:05:1e:40:6c:03:2b:88:cc:c5:
ce:8a:1f:9c:91:ca:42:c9:21:81:cb:d2:aa:66:1f:
e2:52:f3:b9:c6:49:cc:12:57:79:aa:78:57:e3:ac:
15:c8:55:87:6b:08:1f:9c:d0:db:2b:1a:08:f4:0e:
0c:27:ea:b5:8c:1a:1d:63:44:8b:58:27:f8:f0:c6:
6d:8e:ba:3f:3c:ff:d2:9f:b4:58:df:fc:db:a0:f8:
6e:42:43:b8:b1:26:98:dd:e4:03:f0:f8:ab:09:90:
ff:46:69:8c:69:fe:27:98:a9:6b:50:05:40:46:77:
19:5b:95:1e:3b:d6:9c:60:2c:45:52:da:a0:d3:b8:
fd:53:02:6d:75:f4:03:a4:fa:78:ec:d9:8f:40:fb:
7e:12:13:bb:b1:bf:20:d9:bf:75:ac:79:90:e5:4f:
31:f2:41:70:74:36:86:4e:6a:4e:a9:16:7f:cd:6a:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:47:D2:98:03:CC:24:9E:4F:F0:41:E2:23:0D:33:B5:DA:A9:6F:4E
X509v3 Authority Key Identifier:
keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:63:04:51:1c:68:47:35:07:b0:66:f9:d6:4c:64:1e:ad:5f:
50:c0:91:ce:02:fb:77:be:fd:6f:37:4f:7d:f4:dd:42:bb:33:
9c:e9:78:29:7c:20:96:3d:37:b0:f5:8c:58:6b:49:2d:e9:fd:
ca:45:7a:7f:e4:e4:2d:78:09:00:1e:4a:a8:75:bc:d8:dd:a0:
e9:fb:1c:4f:59:3e:75:d0:a4:e2:79:13:6b:93:b4:67:71:ed:
ed:6a:ca:5a:64:86:cb:93:63:ef:82:71:ac:7a:a2:47:74:87:
b7:15:4a:70:ff:66:63:a8:ab:9a:df:d0:e3:59:55:76:b6:2f:
3c:31:2a:22:25:6f:30:1e:65:56:d2:8b:ff:d6:e3:c3:af:30:
50:31:b9:85:45:e0:84:b2:6a:82:ad:54:57:55:2f:c8:2f:0e:
b4:5a:3c:2a:a7:9b:58:fe:5b:f4:b3:b2:24:8a:6a:1d:af:cd:
4c:5f:06:66:2c:1e:3d:08:7e:56:1e:f0:8e:de:12:c9:d5:f7:
1c:80:70:b3:c9:f6:19:3a:e6:64:36:82:37:d4:7e:38:b2:59:
d1:6d:22:cf:85:f4:9d:c5:76:6d:52:c9:24:23:7a:d9:9b:a2:
a7:fd:bd:b1:0d:a9:78:54:6b:32:63:ff:3d:b2:35:6d:a3:04:
e4:3f:c2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:11:53 2025 by rpki-client