Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: EaL4HIFr97GKoEA9g/qHBtVGSxhlYunqt0zyn+PnBWk=
Subject key identifier: AD:AF:5A:CE:E6:B7:CC:7B:CB:9D:81:41:84:69:98:0C:71:ED:7B:8E
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 019512474086CCB422E60DDFADF8206A2FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 05:00:14 +0000
Manifest this update: Mon 17 Feb 2025 05:00:14 +0000
Manifest next update: Tue 18 Feb 2025 05:00:14 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: Hk0bEa9nnyH4QCWtxAz57/6mKNOINHG2AtkfMa1ywZI=)
2: zXvVe6nLVwFkSDCiUM6x3r-Uf8g.roa (hash: pz+KoscFR8BxDTxynFStXcnjiXaUWD5kwjcvZLm4qMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:40:86:cc:b4:22:e6:0d:df:ad:f8:20:6a:2f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Feb 17 05:00:14 2025 GMT
Not After : Feb 18 05:00:14 2025 GMT
Subject: CN=adaf5acee6b7cc7bcb9d81418469980c71ed7b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:a2:2c:5b:6f:2c:4b:37:98:2e:a2:35:6d:
62:50:ee:45:ed:f6:bf:83:02:4c:6a:cd:76:fa:08:
6d:70:71:97:48:4f:ff:cf:06:29:89:37:0f:d3:68:
ea:0c:2b:e3:d8:78:04:1f:47:4a:4a:13:aa:d4:bc:
c0:df:b7:e7:c1:a5:af:41:ce:61:f7:dc:04:de:47:
45:5f:2a:09:a4:f9:f4:89:af:d8:94:29:0e:4d:73:
63:c5:04:c6:8c:55:8d:ab:7c:53:a4:49:e2:c8:4d:
54:d0:f6:74:8c:23:93:ad:7f:42:15:f1:ec:00:62:
6d:9f:e9:7f:e3:20:80:f1:24:8e:1b:e1:a3:94:67:
57:62:66:0c:d4:75:76:a1:76:7c:7f:e0:14:3e:df:
ac:41:a0:e6:90:b9:00:e3:74:51:29:8f:cf:d6:5d:
5e:46:de:6b:fc:51:26:9b:88:29:98:09:a6:92:cb:
0d:76:e7:69:85:8b:fd:13:c8:cf:11:71:b2:4a:67:
ba:c5:4e:fe:f3:a6:c4:1e:f8:c1:6f:4f:1b:62:22:
2c:15:5b:f3:73:49:93:72:d4:86:ec:38:0c:14:ef:
1f:a7:cc:12:4b:b7:d8:8d:67:0b:3e:7f:bc:43:91:
b5:cd:bc:a8:ff:06:85:de:f3:cd:68:be:69:15:33:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AF:5A:CE:E6:B7:CC:7B:CB:9D:81:41:84:69:98:0C:71:ED:7B:8E
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:31:16:7a:fe:33:00:f4:bc:f5:de:8a:cf:f0:09:54:87:a3:
fe:36:03:5b:6e:e0:bb:60:57:55:0d:4f:59:74:5c:b3:3c:fc:
f6:3b:1e:77:e3:91:97:f3:72:42:75:ef:42:e9:96:c9:a8:27:
62:ac:81:05:8b:c9:16:14:73:b0:2e:cd:c3:0b:02:53:d2:48:
8c:a8:d9:3d:fc:a2:8e:46:32:6f:09:54:f3:12:a2:f8:33:cf:
82:60:bc:79:00:1f:8c:16:8f:c5:07:ee:b7:86:93:71:6f:c4:
22:86:52:54:d9:ca:d6:31:22:29:34:ee:52:46:ea:80:c1:21:
1f:4a:43:dc:d4:b9:24:ae:bd:31:17:e4:cd:6f:f0:e3:d9:3e:
87:2a:c5:84:b7:bd:0e:80:ce:0d:fc:75:28:7b:d1:46:2e:86:
10:a6:31:44:fb:7e:10:3e:d0:bf:dc:4a:36:ce:95:8e:63:b5:
ac:d5:6b:d3:14:13:44:f2:91:c8:c7:af:ce:14:30:2e:4f:1a:
bb:7c:1b:91:4f:91:2d:8f:2f:96:2e:6b:de:a3:2d:50:84:41:
84:06:21:4b:fc:89:65:c7:39:3d:f3:b2:09:96:74:84:e5:dc:
79:eb:f4:6a:58:80:f3:86:34:23:14:f4:15:6b:25:25:82:a2:
f3:3a:4c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:01 2025 by rpki-client