Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File: Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier: Q5rQceJqjHBZOvrZ+gG9qANH2211e+FAzcOkwe5/Lxk=
Subject key identifier: 0F:24:C2:A5:FB:5B:0A:DE:6C:1C:0D:D6:6C:D0:1E:12:07:9E:F0:9D
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 0196392D951120A91176AE706BC6EB833430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number: 14FF
Signing time: Tue 15 Apr 2025 11:20:10 +0000
Manifest this update: Tue 15 Apr 2025 11:20:10 +0000
Manifest next update: Wed 16 Apr 2025 11:20:10 +0000
Files and hashes: 1: 1-0L6QihwgCIdPcxlSZx30BVCxIU.roa (hash: r/v9bB2/O8eoqo0SdsHJ+0cV0GGG/FpWoOUcPgNpIWM=)
2: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: RN5sjNnI7t446CJOMKIuH7D1U/GWGaIs/revcr8hPF8=)
3: IJAOzCgcOmnwLYeg7ILsOnQE_C4.roa (hash: qNB39/8R46KNEQ+i+JNvTzUgavEQepnYZFITugyt9Gk=)
4: J2u59yFgmuGdudgIENAeqcAIi5A.roa (hash: 1czvcte4D1PcVrf098gt6GCTblFnQnU2WnM5dPM5CwQ=)
5: K-WcYZp1Vr4DrhTlbDa1XAsuu4s.roa (hash: FTkwxwLsNPLRvw7XfELnO2lGIpcQ3JUT+SSorDdEIQk=)
6: fPUfeSK-zqhYqo9RI5ZO_RvTAnI.roa (hash: 2BLh0mt6BN3cuK7N2qRXjH6g7/lfrSvhbtCftnz6qGo=)
7: l4iAztFdyWZxSOfl8q_e1dKH1is.roa (hash: Uv7SVk02b8fR8AImRa4OOMzROmZWxN56DleM+7FbEo4=)
8: wdQu71DwsSZCWEGjtF-c6H8Remk.roa (hash: nQC972cihJ5AOMxuc+A8aMUofttqjMugRlO4fZX1z8w=)
9: zwK7zErLOq-Lh2vm_AxCgFBZ4xs.roa (hash: iF8UE/8pbMpYaV1IVf6cowiiQQTnx+niOONavMOR9ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:2d:95:11:20:a9:11:76:ae:70:6b:c6:eb:83:34:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Apr 15 11:20:10 2025 GMT
Not After : Apr 16 11:20:10 2025 GMT
Subject: CN=0f24c2a5fb5b0ade6c1c0dd66cd01e12079ef09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:10:af:dd:77:e9:a9:5a:d6:62:6f:ca:49:
90:82:43:e1:b9:61:db:e6:e6:ad:31:09:1d:c7:cd:
fc:7b:ca:0c:25:de:6c:5d:03:e0:ee:b6:ec:d9:d6:
59:6b:47:82:45:c5:cf:a9:96:57:5a:e3:4d:dc:db:
01:fb:e7:a3:f6:3f:37:73:b1:83:87:2b:54:4b:68:
76:2a:c3:09:d3:69:e1:07:dd:a8:bf:70:bc:a3:1f:
ac:22:6d:95:c3:5c:29:cd:85:b0:6b:f5:79:d9:c5:
da:99:78:ff:8e:8b:e8:58:b2:3b:ff:0f:d0:8b:e5:
7b:6e:38:87:3d:36:5e:4f:4a:44:4d:63:c2:dd:a1:
fc:9c:c2:fd:f8:c9:35:58:09:a4:33:65:0d:cf:cb:
ae:76:15:33:0c:02:2a:ac:8b:01:18:d4:63:3e:8c:
30:30:72:78:0d:f4:53:d1:1d:a2:a2:a8:b6:d6:48:
af:5a:ad:6f:2a:a7:f6:c6:1b:16:c8:a1:1b:40:cf:
e3:13:aa:96:3b:bc:78:84:fc:d1:0a:fa:96:0c:0d:
12:69:8a:32:66:92:ef:ad:25:aa:b0:3c:10:8d:e1:
63:8b:79:57:19:ea:c2:b9:4f:3d:f8:05:09:cb:b3:
77:e1:cf:5c:94:f5:bc:dd:41:44:9d:45:90:a7:32:
8d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:C2:A5:FB:5B:0A:DE:6C:1C:0D:D6:6C:D0:1E:12:07:9E:F0:9D
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1f:ac:92:84:b7:d2:8e:cb:fe:ec:f6:d6:9c:7f:10:1f:32:
91:f2:e3:b0:8a:46:2e:f3:ea:cd:7e:00:f7:b5:50:1a:3e:44:
da:54:8a:fe:15:6e:97:eb:a8:74:51:18:38:42:7c:aa:5d:a1:
1a:84:75:ae:71:ed:6b:bf:53:11:ee:ab:0f:8a:34:f5:fd:d6:
cd:36:6a:27:26:79:dc:7f:eb:c0:99:16:a1:1a:74:2e:18:b2:
4e:14:f8:8a:59:da:c9:1a:34:17:54:3b:c1:fb:19:45:27:80:
f9:5e:cc:e4:67:79:e7:fe:2b:d4:ec:3e:a3:67:ce:20:a9:e3:
2e:52:75:bd:0c:e7:02:db:eb:a7:78:89:f9:c6:d8:75:23:64:
81:eb:54:53:4c:38:e2:cf:65:8a:88:0d:b2:c1:cb:0b:3c:fd:
d9:ba:98:5e:01:58:f1:36:34:04:ff:68:a4:e2:36:29:be:1a:
96:ad:61:c3:ec:e4:ca:50:87:1d:93:e2:92:1a:df:0f:b3:5c:
0e:5c:23:09:c9:dd:1d:f5:f4:9d:e8:53:a4:6b:c8:5c:5e:94:
2a:17:80:92:3d:4e:27:4e:d1:10:58:aa:6e:4d:24:9c:fe:6c:
41:6f:d8:a4:80:78:be:e0:4e:3e:11:5e:ff:8a:76:4b:b2:36:
42:97:95:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 15:47:00 2025 by rpki-client