Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier: g6XXxSWEkPnq52mxtGuz/cRGEruBA2V5CRpDGrMi7iI=
Subject key identifier: 3E:99:BD:FB:F3:8B:33:17:08:C2:64:20:DD:95:E4:49:85:4C:39:D2
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 01961BED4C784D53CBEE1360D29CF0B3D500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number: 0864
Signing time: Wed 09 Apr 2025 19:00:58 +0000
Manifest this update: Wed 09 Apr 2025 19:00:58 +0000
Manifest next update: Thu 10 Apr 2025 19:00:58 +0000
Files and hashes: 1: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: oLTI6av1qcBnDtMJL8G+NAm9yHcsBjeNKmq3YFgSV38=)
2: _2hrxKKbdmRyLOnHUiOQipQACXY.roa (hash: DxOyoU679BPpOs0ffrHVPaZuK8yvllJ+3WIdB3uJM5Y=)
3: t16GyUN0G0ERD6SmYA9i0r30zic.roa (hash: oKvu0HJILKuRj6gBGrcQg1IlSuH1C1Ay4XKjgYCj9is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:ed:4c:78:4d:53:cb:ee:13:60:d2:9c:f0:b3:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Apr 9 19:00:58 2025 GMT
Not After : Apr 10 19:00:58 2025 GMT
Subject: CN=3e99bdfbf38b331708c26420dd95e449854c39d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:c8:41:66:c7:59:1e:2a:67:70:ce:2c:b1:
39:b7:09:f3:45:c8:40:20:ed:0d:92:57:55:98:c4:
d4:16:35:b5:ac:69:38:5b:52:a2:b2:53:16:d9:98:
49:d3:df:c5:f9:63:d4:a3:ee:fb:15:6b:00:e3:0f:
26:02:d1:01:69:2a:7b:a1:ce:cb:68:86:8a:13:94:
36:a2:74:79:38:cb:48:41:e4:e4:56:b2:2e:4d:17:
3a:5d:cf:3b:ca:af:a1:a0:fb:0f:77:d0:c1:e0:b0:
b9:cc:47:e7:34:56:b5:db:86:0f:bc:29:8c:e8:db:
70:0d:ee:f6:2e:af:5f:3f:ea:d2:d7:fb:de:c0:36:
da:76:5d:c7:a4:e3:25:d0:e3:37:cd:9c:4b:ca:38:
f0:48:81:53:68:cd:4b:44:b7:43:6e:fd:ec:2d:40:
08:09:78:bf:87:90:9b:e5:ae:af:2c:4e:a5:8c:ad:
c2:5d:cc:5f:04:a5:99:10:7c:b8:5c:e4:e3:24:e0:
46:c5:40:6a:e9:3b:48:3e:d6:d8:12:ef:4d:57:cf:
80:6b:1e:8f:14:4e:a8:9e:99:db:2d:fd:7b:37:02:
4d:f3:a8:67:2e:13:1c:a4:fa:d8:34:ee:c8:fa:db:
3e:1a:88:b2:62:2b:34:ab:c4:a6:81:61:dc:79:c3:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:99:BD:FB:F3:8B:33:17:08:C2:64:20:DD:95:E4:49:85:4C:39:D2
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:87:34:0d:ba:df:fc:57:0c:2b:dd:30:f1:e2:79:9c:87:e2:
56:f9:e6:d9:a0:15:40:de:06:f2:34:96:3e:0b:8c:dc:c3:66:
bc:94:46:39:4a:63:c4:87:9f:92:b0:51:68:49:c8:c6:e3:79:
4b:ae:4d:ce:c8:30:c4:cf:cf:d2:14:c8:f5:5f:06:1f:82:1b:
45:7e:8d:6c:0a:91:89:96:1b:73:a7:c0:2b:89:aa:50:92:10:
ae:c9:c5:6a:7d:c1:2c:75:5a:86:96:43:62:55:b9:5f:00:82:
c5:d6:d6:8f:33:4e:60:d2:5b:09:10:b7:57:8b:47:87:9d:b0:
48:9c:d1:2e:89:fa:05:62:8a:6a:d8:da:f1:f2:d5:6a:a0:54:
92:fe:d5:78:e7:a0:6f:a6:4a:9b:c5:44:47:14:2f:e3:9e:78:
01:02:ac:5d:88:12:4d:62:28:64:6c:ca:bd:69:1f:7f:17:69:
8e:01:cd:75:11:23:d7:f2:4d:74:b4:19:87:67:c7:d5:4b:41:
18:04:6f:5d:9b:ec:51:69:f5:95:37:87:0d:f8:31:2d:75:ca:
f9:d9:d8:d6:7e:9f:57:73:32:2f:26:c5:59:ee:00:c8:85:fc:
ec:52:98:09:dc:30:1a:36:63:b4:8a:c4:9c:24:3f:37:82:8c:
9f:d9:80:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:48:55 2025 by rpki-client