Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: k0YIIA/s9G1JZfYveoB5+J5GRzNf1rbc9NqQPZvw3xA=
Subject key identifier: 9F:BF:BF:57:9D:F7:F4:F0:7E:7C:CA:7F:24:60:92:EC:EA:6B:8C:BC
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 0196579453E3190892C4B7021CF5922581E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 0B09
Signing time: Mon 21 Apr 2025 09:01:00 +0000
Manifest this update: Mon 21 Apr 2025 09:01:00 +0000
Manifest next update: Tue 22 Apr 2025 09:01:00 +0000
Files and hashes: 1: 1-KvMzZmip20mq_6TE6zao4jxRAY.roa (hash: +e++mFx5okLj8UNvWINUv13IrPw1m2hTZhWWjifAWCI=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: tBMM143KXZ7gsEFVddtPmHukex65t4yiexd2+Yp/Yts=)
3: o-s15NWoSVwgSNMQIfsWarrXXGg.roa (hash: 6NGLeGFSgaPGE1dmOJNyifUaOXRJYE04QVot2QOuL9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:53:e3:19:08:92:c4:b7:02:1c:f5:92:25:81:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Apr 21 09:01:00 2025 GMT
Not After : Apr 22 09:01:00 2025 GMT
Subject: CN=9fbfbf579df7f4f07e7cca7f246092ecea6b8cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:ed:ba:6a:6f:bd:b5:10:13:84:24:46:b0:
c2:3c:93:3e:74:da:b3:99:8d:d2:23:ed:57:64:3e:
c1:69:16:2f:f3:c8:f9:6b:c5:da:f7:08:8c:f6:90:
fb:bf:eb:1a:7c:fc:09:29:4f:89:ed:5a:cc:07:65:
4b:dc:8e:00:49:0f:c2:3f:2c:0a:83:98:fe:03:d3:
e5:4a:d4:24:8c:32:80:c0:63:f5:44:8d:39:5a:f3:
cf:3f:42:ab:da:bb:20:b7:98:eb:24:ad:45:cb:6e:
1a:37:72:c9:2d:47:b8:df:70:8a:d3:8c:14:ba:77:
98:f9:24:6f:72:a9:01:6b:1b:8f:60:a6:4c:fd:17:
c3:8a:ad:2b:e2:84:55:a2:aa:a6:5f:fc:20:35:8d:
94:2c:ae:7b:fb:6c:6e:18:04:ce:8c:e8:fb:6d:33:
07:af:ed:af:b5:35:c2:62:25:1d:75:e1:35:ec:e8:
f5:f5:30:ae:17:dc:44:f7:28:58:04:6b:65:3e:2d:
e7:af:1b:26:2b:b5:e9:50:b6:ea:98:64:94:7a:27:
77:a8:c2:6e:d9:a2:98:9a:a9:0d:a9:ac:8b:49:f7:
b8:4a:ca:2d:9c:10:05:09:2b:36:8f:e0:53:6e:5a:
a7:0f:46:80:b8:ee:7f:66:2d:2b:6d:a8:f6:a7:e7:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BF:BF:57:9D:F7:F4:F0:7E:7C:CA:7F:24:60:92:EC:EA:6B:8C:BC
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e8:fb:28:f5:c1:cd:55:82:b3:84:87:96:7d:82:af:d8:ef:
bc:fd:98:07:21:45:4f:f7:3c:db:eb:4e:96:35:5c:a4:1d:f4:
c6:bc:df:ff:3f:01:13:2e:b0:87:e2:33:e9:c1:dc:55:46:6c:
89:52:e4:18:13:ac:2f:cb:88:34:61:db:9d:88:6e:da:37:7f:
95:25:ec:1f:17:cc:f1:21:5b:4c:e9:89:08:98:0e:71:63:2d:
85:15:e1:2f:f4:58:c6:3a:c7:ee:20:c6:33:36:fd:86:1a:0a:
13:fd:3c:c8:43:9c:ed:65:6c:63:3a:34:37:17:47:69:6f:35:
65:5e:6e:4e:3a:b2:60:24:e3:73:7d:f7:47:b9:0a:db:cd:21:
d4:d8:96:b9:d4:bd:bd:db:e2:d7:99:0c:7c:19:1a:cc:fc:09:
d4:00:85:d1:50:e0:9b:a6:19:05:9b:6c:e9:a9:63:91:5f:87:
e0:f9:b7:52:56:50:a7:26:20:c4:ac:30:86:01:85:5d:e4:4c:
98:02:93:da:d9:5a:c2:95:df:40:af:08:7d:84:44:ef:53:2e:
b4:fe:77:dd:3a:6b:ea:82:b6:82:a9:88:ec:b0:d5:74:50:68:
22:8b:28:2d:57:b8:6d:78:ec:44:54:d9:a0:4a:33:b0:1a:6c:
6b:03:f0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:21:26 2025 by rpki-client