Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: hb3VHDGurCkUNWH2JXdi4n72mZb9f+AfUxVMGy4PhOc=
Subject key identifier: 1C:20:18:0A:9C:13:78:8D:8B:67:4E:1D:2F:82:CE:47:55:D4:F6:E4
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 01965D960E63CB33A63D8C57DBB89A9BE6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 1460
Signing time: Tue 22 Apr 2025 13:00:37 +0000
Manifest this update: Tue 22 Apr 2025 13:00:37 +0000
Manifest next update: Wed 23 Apr 2025 13:00:37 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: zyJjAUxueMi8a79AFGz99qm+IRxiXK03Y4ScgMoAlVg=)
2: UgQOVXjSfDZ0oMmnpF9LnBZc5Iw.roa (hash: EuORew0X+P8iEghXgdkM03dJatTHGRU6W9xGTUJPJEY=)
3: WnLaCz0whNUAj7xt1GXCRyC0ff4.roa (hash: 1NkpD3wTqpaneQCvPoyVPVIPTREHfmPMSbzyzikhuRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:96:0e:63:cb:33:a6:3d:8c:57:db:b8:9a:9b:e6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Apr 22 13:00:37 2025 GMT
Not After : Apr 23 13:00:37 2025 GMT
Subject: CN=1c20180a9c13788d8b674e1d2f82ce4755d4f6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:5f:15:a8:20:37:66:5f:52:6a:02:86:28:
51:af:e8:74:13:6e:2a:20:81:e5:98:8d:ea:74:3b:
55:54:c7:49:b3:6d:12:f2:57:60:af:15:b1:60:d7:
4d:a9:74:ca:3e:e6:ae:2f:6a:59:94:3f:fc:2f:69:
8e:14:30:e7:f2:30:fc:38:3a:84:d9:07:01:7d:a3:
78:40:27:cf:cf:5d:72:14:95:4c:fe:7a:8b:e2:bc:
c9:38:81:6e:5e:6e:6f:c2:81:3d:0a:ca:1d:18:75:
7c:3b:e8:3e:8e:ca:98:fd:e4:a0:25:45:90:60:bc:
13:9d:a4:3c:91:28:9d:30:88:34:48:2a:53:a0:7b:
08:c5:ca:f3:f5:d3:a1:2e:0c:7c:1c:f2:71:ea:92:
14:22:f2:11:6e:c4:a5:8b:6c:45:2e:8d:53:e7:39:
6f:77:a6:ef:fd:ab:43:4a:22:7a:60:17:74:68:0f:
e8:2e:b6:c4:d5:c3:ad:b1:d5:e4:3f:c3:a9:8b:74:
b6:1b:22:44:51:b1:0d:76:48:50:bb:14:8b:b5:9a:
81:c2:ec:09:c4:63:70:1e:71:f6:3e:ed:5e:54:7f:
bf:c2:c6:87:70:a2:32:5e:81:37:b4:57:d2:08:71:
82:24:57:aa:1b:e8:f3:2a:22:34:01:7b:21:25:44:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:20:18:0A:9C:13:78:8D:8B:67:4E:1D:2F:82:CE:47:55:D4:F6:E4
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:34:ea:12:14:41:03:1e:0f:c2:36:cb:ac:96:da:44:ba:6e:
cb:51:1c:ce:d8:75:a8:c3:8d:0a:1b:be:f9:f2:d1:3a:34:56:
cb:f7:97:a5:ae:ba:62:92:4f:9b:be:e0:ad:e7:e5:e9:a2:d1:
cd:22:ba:8e:10:c4:b8:6c:14:aa:52:36:4a:bc:e8:89:bb:a8:
62:88:05:2e:99:3e:9e:d4:bc:d2:e6:d4:ca:42:08:5f:ad:83:
4e:ed:4c:eb:ef:e5:da:da:e0:10:fd:00:ea:63:90:57:ae:a3:
f0:75:d1:02:80:fe:f6:cd:6a:68:24:26:15:6a:6a:10:63:2d:
dd:67:d8:f7:a5:23:5d:d4:14:42:f0:39:66:12:62:c8:1e:77:
fe:db:4d:17:0c:2d:66:0a:6d:98:4f:62:ba:a9:dd:6f:d7:9a:
42:6f:26:8e:2c:d1:b8:4f:5c:01:64:c1:d6:a2:b5:44:f4:87:
43:fc:1d:98:57:6c:8a:d5:db:9c:ce:c5:c4:fd:1b:52:fe:5f:
ac:a9:bd:d0:eb:53:68:17:f1:15:8b:ec:9c:2d:d4:02:95:bf:
aa:b3:c8:6f:09:a0:12:89:0f:fd:3b:65:00:85:8f:14:e8:d4:
5e:c7:fb:0d:d5:21:a7:4a:70:2f:95:08:6c:d7:a7:b0:13:1e:
9f:90:0a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:54:15 2025 by rpki-client