Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier: SNi0nDpi1RmVM8Zm8PJd8aOOOuqj3ahd//5VjK2/Nuo=
Subject key identifier: 52:AB:45:6D:7C:76:48:3B:9C:F7:6E:8A:94:B2:F5:09:4E:49:CE:40
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 01964067C977F0BCD0AC0125823327E12585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 21:01:05 +0000
Manifest this update: Wed 16 Apr 2025 21:01:05 +0000
Manifest next update: Thu 17 Apr 2025 21:01:05 +0000
Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: tTERdqeKkqR9p8UK4IXBz7mRtn4jDaySMwu9Op5zmsE=)
2: dl4ybKFr-mjNJ3kV-IfkyZfwx44.roa (hash: /jV0BskL+oSsTISEbyqI8M7CEUXp7IlGvyGOrlDZbmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:c9:77:f0:bc:d0:ac:01:25:82:33:27:e1:25:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Apr 16 21:01:05 2025 GMT
Not After : Apr 17 21:01:05 2025 GMT
Subject: CN=52ab456d7c76483b9cf76e8a94b2f5094e49ce40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:17:70:a2:a8:31:4c:65:be:3c:fd:7b:ad:83:
97:91:2c:91:8b:d8:a1:b6:26:d0:2c:af:ce:cc:df:
00:b5:90:b7:4e:c5:39:24:b6:ef:20:bb:60:83:66:
47:41:76:95:2a:c5:8f:c0:73:86:9c:a6:11:98:e6:
ec:a7:0a:a5:54:8b:54:32:94:e0:c6:6f:13:6a:d1:
6b:1e:40:1d:36:ef:28:97:58:ad:00:b8:04:4a:16:
32:e8:70:14:60:85:f4:70:f5:8a:fd:5e:dc:eb:fc:
42:28:ee:b6:fb:ae:14:ef:de:42:df:e9:ec:45:8b:
ef:03:e3:6b:7c:60:0a:36:68:d3:a4:45:04:9a:0b:
1d:b9:f0:82:b1:c9:e8:e4:f4:b6:e1:17:dd:9c:88:
b4:f9:f9:c6:67:ee:05:f9:e9:56:50:14:c2:91:6c:
8e:67:25:be:01:6a:91:73:30:02:4e:77:af:28:8d:
75:d8:cb:1b:e6:0a:6c:7f:93:3f:f1:f0:56:9a:f3:
3a:c7:5f:26:d6:6b:b2:40:bd:3c:a1:36:de:cc:05:
64:9c:0e:31:83:a8:03:a6:91:44:c2:66:5f:c4:fc:
7e:a2:2f:97:1a:59:ca:c0:ff:2f:6a:64:89:be:f6:
25:83:1f:f6:05:99:25:03:1a:c4:82:b2:e2:31:51:
4c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AB:45:6D:7C:76:48:3B:9C:F7:6E:8A:94:B2:F5:09:4E:49:CE:40
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:99:e1:83:c3:21:6f:d8:dc:ff:a5:fe:af:03:72:0c:7c:a3:
73:a2:31:ed:9c:0b:d5:ba:0a:29:41:b6:cf:5e:e7:ec:6c:e6:
44:54:8f:b4:6b:40:0d:15:f1:fd:58:d3:79:cf:e3:22:04:d6:
1a:dc:05:ab:dc:ed:d7:d5:9e:a3:76:0f:55:2b:37:53:3d:cf:
bc:07:ec:bf:12:de:f9:95:2d:3b:28:f1:5f:9e:22:55:2e:a7:
11:fa:06:f4:6a:b4:e8:6c:81:d4:55:22:8c:24:84:75:59:bc:
04:66:cc:d6:b6:1a:74:85:df:b7:09:a8:38:0c:25:01:98:da:
f6:8b:96:51:75:06:45:1f:1e:f9:e6:de:54:67:00:aa:e2:48:
4e:23:10:15:fa:40:12:6e:c1:32:eb:3e:0d:60:47:03:b3:a9:
0f:fd:15:99:77:5c:85:a2:0f:9d:78:32:97:30:1e:db:62:74:
dc:bf:87:a9:64:3c:30:84:cc:df:2e:10:a6:51:71:1d:e1:65:
80:78:87:a5:21:75:cc:d1:73:f2:89:64:04:4b:80:35:b7:ce:
6c:03:10:c7:44:ae:75:e1:8e:f3:c7:c3:36:ff:77:86:61:3e:
96:23:c2:d3:21:f0:f2:d6:3a:e9:ac:50:86:87:a8:f2:04:46:
e0:3c:1a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:16:28 2025 by rpki-client