Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier: kJeljnEjm6/Zv/a4O//N5WQI22J2cAn03pHvjoq8GNY=
Subject key identifier: 50:87:6B:F7:EE:9C:D0:31:72:11:E5:77:6C:0C:A0:EF:52:EF:0C:DB
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial: 0196372DDD8348EBF12CC8C14146422B0D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number: 0309
Signing time: Tue 15 Apr 2025 02:01:14 +0000
Manifest this update: Tue 15 Apr 2025 02:01:14 +0000
Manifest next update: Wed 16 Apr 2025 02:01:14 +0000
Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: E1GEPZVxvqHoB0Z1LVxVL/E2iXUCDoluNJf3Q6+R9DY=)
2: H09sImQpPd7oxswyyMfYCrHeDVg.roa (hash: F88ZTfKzhXNpAdlmJ7zmMSZP6dr7sViXeL2PLZiWpvA=)
3: Xy-GvzWZoQ4DZimCZXffSq7urSs.roa (hash: ueXh7ktY0jc26A3LbRVHrwaonrcTqoMtDjp0hV9hqJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:2d:dd:83:48:eb:f1:2c:c8:c1:41:46:42:2b:0d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
Validity
Not Before: Apr 15 02:01:14 2025 GMT
Not After : Apr 16 02:01:14 2025 GMT
Subject: CN=50876bf7ee9cd0317211e5776c0ca0ef52ef0cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:93:f9:29:04:dc:be:e4:4c:c4:c4:27:f3:a4:
99:9a:0d:41:3a:8f:44:ba:3d:79:a4:60:dd:3c:7f:
b1:93:27:bf:71:88:fa:35:f9:16:84:44:ea:d5:66:
a9:a2:b8:b3:2b:7a:97:39:90:55:87:58:d5:1e:05:
a5:64:6c:5e:a4:50:6b:a2:97:aa:d8:2e:79:a0:e2:
27:f3:39:4a:cf:af:b3:0c:66:00:06:11:9c:d2:a9:
bb:59:87:09:cd:9f:8f:d2:a4:82:2b:59:3b:83:1b:
08:3b:00:7c:b8:44:93:a4:bd:6d:b6:07:6c:52:f0:
99:6b:92:bf:e8:3b:a1:48:21:46:d5:31:c1:8c:75:
38:41:f1:07:dd:26:d5:45:0c:25:c5:41:7e:50:17:
55:4c:ea:4e:1c:9e:14:1a:b1:b4:67:e2:13:ae:7f:
43:b7:df:d5:65:bc:92:3a:8a:2f:76:fb:87:f5:a0:
fc:a9:bf:66:27:ec:af:47:8b:e3:9c:4a:d8:f3:2b:
d7:b6:d6:85:35:2e:31:c9:49:81:c9:47:cd:43:32:
0f:6c:b6:1d:b1:80:a8:af:97:52:5b:90:b8:f0:fe:
b9:cf:4d:cf:54:00:78:36:d3:c7:e2:66:d2:e3:b8:
dc:f0:3d:fd:38:55:ea:b7:70:2c:e9:87:8c:b1:a4:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:87:6B:F7:EE:9C:D0:31:72:11:E5:77:6C:0C:A0:EF:52:EF:0C:DB
X509v3 Authority Key Identifier:
keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6b:b9:bc:c3:41:77:fe:50:42:84:29:90:40:32:53:d7:4b:
65:70:27:d6:06:e2:28:17:52:f3:85:36:ab:4f:95:fb:c5:67:
69:c6:80:6e:dd:5b:6a:76:07:27:38:66:ff:e4:1a:c1:64:22:
b8:74:70:d3:4c:a4:56:84:b5:66:26:9c:cc:3e:6b:bb:8b:0b:
64:d8:47:b5:69:e3:0a:e5:ff:af:8b:3c:df:a3:96:23:78:e8:
be:43:2d:0c:71:d2:03:ee:ec:54:3a:3f:53:c2:bf:11:c8:f6:
2e:cc:fa:f6:ba:b5:e1:73:ab:1d:09:b1:3f:7d:57:80:59:6c:
28:4b:c0:c8:c7:0e:79:39:37:6d:28:47:60:49:13:50:e4:b6:
f3:15:62:12:fa:40:73:91:ec:61:e0:65:69:98:2b:6d:5e:08:
ea:b1:66:2b:30:5f:00:6f:89:58:de:63:c5:bc:c5:44:86:13:
2a:1b:44:b0:17:c4:d8:a4:03:4c:97:73:7f:db:46:11:81:80:
ef:d8:b0:65:24:4e:16:6d:97:86:c8:9c:19:a5:61:2a:0c:ba:
3e:52:b9:34:eb:ca:c2:ef:c4:f7:ee:1b:ce:98:30:6d:f2:21:
f2:27:22:8b:86:89:dc:ae:29:32:c8:b5:b1:88:48:bf:11:70:
c5:7d:32:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:24:49 2025 by rpki-client