Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: aIDCPpRlrsASiUwKTFs4ECu3zASjBFAzRnNQ3coAy/Q=
Subject key identifier: 1B:83:30:0A:10:C7:76:6E:6F:8D:21:64:DC:38:FB:46:6F:DE:60:A2
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 01964F3543285B30226907B712E3845AC36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 02BC
Signing time: Sat 19 Apr 2025 18:00:12 +0000
Manifest this update: Sat 19 Apr 2025 18:00:12 +0000
Manifest next update: Sun 20 Apr 2025 18:00:12 +0000
Files and hashes: 1: 6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (hash: 7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: 8Pgf9oTw1GX0oMY1B0O9YYSgJanA2WTzTw3XcVcehKY=)
3: zlURg4ebmdJpRRKJcb6F2eANLUw.roa (hash: d2+6gKcdS2njrjfKwQ9XXY+00MaMzcf8y0Aa2MydLsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:43:28:5b:30:22:69:07:b7:12:e3:84:5a:c3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Apr 19 18:00:12 2025 GMT
Not After : Apr 20 18:00:12 2025 GMT
Subject: CN=1b83300a10c7766e6f8d2164dc38fb466fde60a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:16:fa:53:cc:4e:11:22:23:f1:d9:0b:70:
d5:5f:aa:67:6a:3e:5d:9d:4d:95:af:ce:37:8e:dc:
40:91:ca:84:7c:21:87:86:86:3d:bd:23:5c:d7:95:
02:35:90:38:3e:62:75:a3:c5:6d:f3:1b:ae:78:05:
90:75:58:55:dd:4a:7c:03:09:c0:9f:2a:d9:71:27:
ce:3a:4a:0a:2f:bb:93:ad:0d:da:93:d1:3b:f1:e7:
11:e3:73:81:c3:47:c1:88:12:7f:21:a7:c8:76:2e:
4f:13:f4:4b:54:62:69:f1:67:44:fd:2d:2d:5d:04:
53:53:c8:26:05:5b:f9:3d:96:65:5f:63:83:1e:07:
0d:e9:88:2d:78:d2:53:fb:9a:b0:4e:10:5a:a5:b0:
fc:e9:36:eb:da:54:57:76:53:e1:c9:3f:70:8f:8e:
01:09:a8:f6:78:f2:c4:19:6e:27:c4:0c:25:02:7d:
bc:a4:dd:72:14:47:23:c3:3c:b9:2f:6a:49:e1:2c:
b6:76:c8:fb:be:4c:f9:51:b2:a3:ec:37:8c:1f:eb:
11:1f:08:05:a3:85:af:5f:7f:2b:30:86:95:3d:6c:
57:97:2e:44:df:3f:71:4a:6f:ff:8d:43:bc:32:41:
4d:e9:76:5a:1d:f4:ef:38:bb:69:f2:cd:05:b6:bf:
5e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:83:30:0A:10:C7:76:6E:6F:8D:21:64:DC:38:FB:46:6F:DE:60:A2
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a0:59:de:fb:8b:ee:ee:a7:36:49:a8:e4:da:5f:d1:43:d7:
fb:59:ee:60:c2:21:e5:6b:fc:4d:91:c8:15:66:50:df:6f:7d:
29:b2:82:f8:2f:ff:02:53:75:e7:7b:21:cd:ce:f5:f0:bb:8a:
b3:5f:bc:58:f5:9f:ea:fc:db:0f:17:4a:40:46:f2:e0:a9:2d:
45:dd:7f:8f:06:07:32:40:95:7a:d1:cd:a5:ee:55:8a:b7:df:
7a:ff:66:38:bd:5f:38:10:54:73:c3:db:8d:b6:70:84:ed:f9:
de:30:58:e2:89:1d:ed:59:92:d1:2e:53:9e:21:10:ba:9c:42:
4d:57:71:81:6f:df:3b:e8:bb:b6:93:e3:4d:c5:a3:56:fb:e0:
c5:37:8f:b1:72:4a:e9:bb:52:75:ab:32:d6:c9:63:35:70:59:
0a:4e:da:96:f2:9c:4d:38:4a:6f:38:c3:61:f3:19:cb:3a:09:
48:61:e1:78:9e:84:fd:f2:8d:b8:66:4e:58:77:99:0f:9b:00:
56:c2:b1:36:07:3f:2b:97:56:5f:c1:95:fb:2d:1f:09:71:4d:
70:0a:92:99:eb:72:63:ed:46:b2:3b:bd:96:57:b1:1c:db:25:
80:4b:17:c4:7a:2e:dd:fe:ed:cf:90:5f:55:80:b5:19:84:14:
67:4e:1c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:20:39 2025 by rpki-client