Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier: xhwF0jj6SEce308FpyvvxhKI55Lr+5ICE0A/kv9bSZg=
Subject key identifier: AB:A2:61:42:AA:C8:3A:CC:0D:32:66:3C:23:3F:8D:0D:82:0F:19:5C
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 01964B8F6A1C83255ED3E25F5A401E52D172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number: 08E6
Signing time: Sat 19 Apr 2025 01:00:12 +0000
Manifest this update: Sat 19 Apr 2025 01:00:12 +0000
Manifest next update: Sun 20 Apr 2025 01:00:12 +0000
Files and hashes: 1: 7XdSGfevcJJsevy7fOceWvja7nc.roa (hash: 738FMMf7Atyvq/JMYg2GIhaCbgWHQKUbxrDxkyANCA8=)
2: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: DMwlTORCAxHbfUcCPzDqPp760XnU6/ncyoHBXlawiD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:8f:6a:1c:83:25:5e:d3:e2:5f:5a:40:1e:52:d1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: Apr 19 01:00:12 2025 GMT
Not After : Apr 20 01:00:12 2025 GMT
Subject: CN=aba26142aac83acc0d32663c233f8d0d820f195c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:8f:5a:80:2a:66:d7:16:a9:42:c5:31:49:
7a:2d:7b:e5:3b:a0:88:d6:2d:cc:32:d7:20:ea:d3:
5c:bf:79:34:a5:c3:6d:10:d6:30:68:52:63:4a:ed:
d5:1b:5e:bd:41:7c:f4:d2:2f:46:79:fd:b7:19:a8:
91:3b:bc:dd:f5:64:fe:0a:47:74:2b:53:cc:de:f0:
72:af:98:8f:36:f0:35:d2:34:ff:55:bd:d2:ee:c0:
b2:ef:dc:31:58:51:a9:80:38:38:92:77:c0:19:cd:
96:9b:96:20:af:14:5b:67:91:99:03:b2:ea:63:86:
5e:35:4e:7d:b7:d5:f9:07:b6:32:fd:ed:5c:a4:a7:
2e:5a:36:67:54:2b:f4:af:91:5c:3b:91:68:ab:3d:
04:83:87:85:55:d1:ed:ac:a3:fd:c2:3d:d0:13:76:
b8:5a:da:a3:fe:a9:af:df:0d:60:38:80:4d:42:22:
80:33:14:2d:88:fe:a1:1b:61:c4:aa:b9:00:af:57:
28:fd:3a:b7:2a:33:ae:cb:0a:ac:35:fa:ea:d2:52:
a6:4d:42:1a:55:38:4a:ff:45:60:65:f3:36:17:54:
02:67:5e:cf:28:c7:72:c2:c5:82:c5:77:21:7a:9f:
82:9c:0c:0a:45:81:f6:e0:9b:f7:ca:08:37:4a:80:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A2:61:42:AA:C8:3A:CC:0D:32:66:3C:23:3F:8D:0D:82:0F:19:5C
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b7:4d:23:07:7e:5e:44:c1:ec:f7:36:7f:11:ba:6f:a1:7d:
e2:e4:60:e5:96:9f:ab:76:57:ca:68:20:86:b9:41:f5:50:ca:
7f:f2:8b:8a:f8:3e:f9:2c:eb:88:58:fd:fd:76:c7:2c:12:85:
c0:59:49:e1:ca:fe:6f:b2:cc:e7:21:e3:1a:aa:60:54:13:bf:
20:2f:bb:98:30:66:30:81:8b:e8:f1:e1:9d:b8:20:72:f4:34:
72:3e:b5:0c:a0:56:2b:24:d1:58:1d:8d:95:f3:e7:71:5e:ea:
27:44:6f:a3:b9:13:54:eb:ca:5a:3b:db:c9:6d:a7:e5:a4:fe:
af:fb:a1:26:0d:27:93:a4:33:55:3c:d2:87:e5:eb:da:ec:8f:
b8:5a:d1:ab:e0:73:95:43:2f:cb:98:9d:48:64:4f:6e:de:92:
f2:df:7a:34:77:56:27:43:c6:da:2c:c3:5b:9e:50:27:62:a1:
a1:fb:91:07:52:bc:8f:64:8f:d4:f9:a5:5a:44:4f:22:d4:d0:
0f:f9:27:22:e6:b4:59:cc:a5:26:29:df:ac:26:d6:22:47:94:
0d:5b:5e:f0:74:1d:41:aa:d3:23:a2:67:4c:d9:ed:01:ee:81:
e2:36:a8:a7:9f:69:69:29:10:6f:e4:e1:35:00:fa:25:e1:b4:
b8:eb:03:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:06:10 2025 by rpki-client