Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
File: DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json)
Hash identifier: bMxnFHC2yoR6GKcyAq2namyuwcLRDr2JLFu+KQBmggk=
Subject key identifier: F5:E7:63:3C:72:A8:0F:53:06:62:00:D2:68:4D:83:FB:B5:DB:5C:FE
Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
Certificate issuer: /CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Certificate serial: 0196531286A89C9241501A30ECFE388FD174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
Manifest number: 019B
Signing time: Sun 20 Apr 2025 12:00:45 +0000
Manifest this update: Sun 20 Apr 2025 12:00:45 +0000
Manifest next update: Mon 21 Apr 2025 12:00:45 +0000
Files and hashes: 1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: 72eIyH3hMKRFpH74g9QiMMvPQ4QibiBJR7gKxRGcwk0=)
2: wz1d87RRsH1wKxGmJq_DN0PXswY.roa (hash: UbFzX/CxroLQPhe2c4ynViKTu15Zs0MKcqpj4a9goDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:86:a8:9c:92:41:50:1a:30:ec:fe:38:8f:d1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Validity
Not Before: Apr 20 12:00:45 2025 GMT
Not After : Apr 21 12:00:45 2025 GMT
Subject: CN=f5e7633c72a80f53066200d2684d83fbb5db5cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:43:ed:97:aa:46:1f:5e:3c:31:a1:e9:33:
75:1f:b8:19:0e:5e:61:1b:11:44:ba:f7:32:44:91:
cb:09:e1:d5:1a:6f:c1:75:68:a6:74:8f:45:97:e0:
63:2d:91:99:58:84:76:21:34:66:99:63:80:e7:97:
db:8b:b9:34:ac:57:34:0a:55:9d:69:6d:07:be:db:
10:48:97:51:fe:07:ff:bf:28:82:44:3e:f1:4c:41:
13:42:b9:a2:d8:9c:99:32:d8:33:89:9a:4d:e7:52:
8e:83:72:64:0b:85:1a:24:00:7c:ea:42:f1:8f:40:
6e:8a:82:88:7a:b9:ca:5d:c4:fa:ca:62:71:ec:e6:
c1:5a:18:3e:da:e2:04:76:61:31:8a:b3:b5:8a:aa:
9b:57:d3:b4:26:a6:f8:39:87:09:ef:a3:7e:05:46:
a7:2c:44:a9:61:50:b0:52:3f:a8:89:58:d3:23:55:
81:03:a5:05:78:c1:9d:38:28:ea:2c:d7:04:9c:3c:
60:72:38:68:26:92:3f:01:be:1d:19:32:44:d4:91:
33:f2:83:4a:2f:4a:7b:8c:a8:39:6f:c2:b3:d3:96:
02:2c:03:1d:5d:b1:2a:67:5a:1c:35:a6:29:e1:88:
68:48:75:ce:1d:23:b7:7d:6f:53:f2:9a:b5:37:8b:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E7:63:3C:72:A8:0F:53:06:62:00:D2:68:4D:83:FB:B5:DB:5C:FE
X509v3 Authority Key Identifier:
keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fb:15:d9:5e:f5:b2:ef:be:ec:9c:c3:24:db:0d:af:38:6d:
2d:b6:5b:16:f4:93:c8:fc:e3:8f:80:da:ce:b5:21:df:42:02:
06:6b:ef:5e:a6:56:71:e2:c4:2e:5d:44:5e:18:0c:58:c4:69:
90:1b:5b:f1:66:ba:70:0d:9a:1d:0c:21:5a:89:f1:da:7a:4c:
0c:74:10:e5:64:76:c3:66:b6:4f:a8:8c:37:f3:48:03:34:a0:
f9:32:5a:5e:e5:d6:23:71:32:a9:33:7a:1b:d5:29:46:5a:b5:
a5:d6:7d:46:e4:cb:a2:5b:68:4f:53:35:fb:4c:7d:ab:eb:b6:
67:4f:71:ae:a4:10:82:24:90:ab:82:85:31:75:89:4f:2c:86:
98:04:74:bd:2b:e0:66:5f:df:fa:29:3e:13:09:3b:f8:a6:ae:
d6:b9:49:f2:0f:66:87:ee:8e:fc:83:08:5a:f4:94:01:fa:a7:
98:98:6e:6a:55:52:84:b8:23:39:39:0a:16:67:2d:1d:ca:78:
86:69:15:11:16:64:64:63:ec:44:22:fa:22:2c:16:0f:04:d5:
57:20:75:1c:58:ad:e2:49:96:28:ba:55:1e:32:b3:2e:df:47:
3b:5f:ec:d9:99:ae:06:fd:53:cd:b7:e9:6a:c2:86:b2:34:87:
c3:ef:16:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:00 2025 by rpki-client