Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: Ds15UrQeCQuHrb+Lv+EkfcoN9+rqy2IKnKEzy9/Ar7k=
Subject key identifier: 81:18:F5:10:62:23:65:C2:44:95:26:6A:A5:B7:4A:ED:BD:4C:A5:48
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 01960FE95CB71A40C9ECC4F6458BF0E77A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 023D
Signing time: Mon 07 Apr 2025 11:01:13 +0000
Manifest this update: Mon 07 Apr 2025 11:01:13 +0000
Manifest next update: Tue 08 Apr 2025 11:01:13 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: kXhzmcQRF7K9F+vXrSaHhO84yd3T1lnH9dpdLGFO4NA=)
2: OEYyZZKZhp-2fVGqVtoifeZmQ8A.roa (hash: SXPo45Zy5oQW0FXPgd1Rr0ybBjZhh0uTBvIGSnzxV5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:e9:5c:b7:1a:40:c9:ec:c4:f6:45:8b:f0:e7:7a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Apr 7 11:01:13 2025 GMT
Not After : Apr 8 11:01:13 2025 GMT
Subject: CN=8118f510622365c24495266aa5b74aedbd4ca548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:f6:93:a3:b5:48:e7:9c:e7:58:63:ea:13:
40:2c:65:fa:fd:4d:ef:cb:64:e5:70:97:82:34:18:
01:6b:d5:ea:53:11:77:ac:1d:88:6e:a1:8d:4c:5f:
3b:3e:4e:83:bb:fc:9a:fe:3e:be:56:5c:bb:72:61:
86:e8:66:25:2e:68:f8:39:87:24:07:e8:b8:a2:d3:
07:10:51:d6:f4:23:29:04:9d:74:98:37:42:23:ef:
ff:a5:9e:41:ae:a8:69:a6:32:55:e8:44:aa:48:cb:
e7:58:9b:2e:16:29:ae:8e:2f:22:7d:e6:fd:56:d3:
7c:69:21:e9:29:c4:36:4f:9b:32:31:32:a9:a9:be:
63:db:ea:c9:ba:f4:7a:2a:5d:b8:6d:b7:5a:d3:d0:
5b:38:62:2c:e4:56:d6:7d:f2:21:31:de:40:2e:8d:
03:3a:c8:23:e5:33:bb:45:e0:5b:44:df:2c:b1:aa:
d7:72:31:25:b0:49:55:8d:9e:76:b6:44:fa:49:45:
f8:10:17:e8:48:62:70:25:df:e3:97:6c:4b:99:26:
2d:47:24:8a:96:df:62:8a:d3:50:e0:55:48:b6:92:
1b:34:ee:cb:ee:51:a1:22:19:03:da:a6:c0:82:ea:
e7:b3:57:7b:43:26:15:ef:e2:b5:74:49:75:89:e7:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:18:F5:10:62:23:65:C2:44:95:26:6A:A5:B7:4A:ED:BD:4C:A5:48
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:45:7f:bd:e1:92:9e:de:c0:71:06:9a:5c:f1:67:75:d4:d5:
f8:a8:94:3f:c6:8d:ec:1d:ca:a7:31:67:86:8d:fb:7f:25:e5:
3f:0a:72:2a:b3:f8:e4:c0:87:de:5a:b7:49:14:8f:e7:11:49:
e0:b4:db:40:3b:84:18:69:42:97:56:d1:59:24:b2:6a:bd:10:
a8:02:65:f9:5f:02:35:2f:4c:ed:6b:d7:96:44:22:8b:e5:89:
ce:64:78:a8:8d:52:24:dc:5f:e4:32:64:98:55:99:b6:03:26:
09:3d:b6:3b:ea:bf:11:39:1d:4e:57:b5:00:4a:45:ce:0b:0f:
cd:da:1f:b5:63:63:55:71:b0:f9:e5:68:a5:be:77:5b:5b:20:
42:f5:8e:d6:db:51:71:5f:43:6a:7f:fc:8b:be:d2:56:c3:78:
3a:74:55:8b:0e:a9:99:19:e1:0a:54:f7:7b:bc:b8:c3:5c:63:
af:7e:8c:b0:92:21:40:39:b9:c2:27:93:0e:4c:50:93:6d:32:
48:68:7d:3b:f7:34:2d:4c:76:a3:f1:0b:63:0a:02:ac:99:a6:
b8:5a:87:bb:7b:b1:ff:71:a6:6b:4f:1f:33:d0:eb:cb:b0:29:
6d:55:9a:8f:bb:cc:69:3f:f0:5c:04:3b:c4:20:2d:08:fc:fd:
62:d7:23:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:00:29 2025 by rpki-client