Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
File: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft (raw, json)
Hash identifier: T291/A4/RsjSFhhhEQpoFbI69wHe8CGYz1LbM2hmcIM=
Subject key identifier: AC:2A:E8:9C:7F:DA:75:82:DB:1A:99:6C:CB:06:BA:B1:2F:4C:B0:FB
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 0196526D93B5A5C8745B05082AAE67B26B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
Manifest number: 1224
Signing time: Sun 20 Apr 2025 09:00:35 +0000
Manifest this update: Sun 20 Apr 2025 09:00:35 +0000
Manifest next update: Mon 21 Apr 2025 09:00:35 +0000
Files and hashes: 1: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl (hash: qwWgdVFJYyZXUw7MKMAXTj9n6ZbY0GtKJCvvHS7m/O8=)
2: v5vd3x3XjeefXJEwufhUGGb4X2s.roa (hash: Q56G00WWpMRZXSZJI+Ae5yRJxVdvk5MUrhK76sZeFtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:93:b5:a5:c8:74:5b:05:08:2a:ae:67:b2:6b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Apr 20 09:00:35 2025 GMT
Not After : Apr 21 09:00:35 2025 GMT
Subject: CN=ac2ae89c7fda7582db1a996ccb06bab12f4cb0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:d8:4f:5c:06:83:22:1e:1f:3f:48:7a:de:
17:ad:c8:69:55:3e:0d:e2:24:8a:f0:43:a6:54:3b:
58:5d:57:95:55:78:79:c9:60:d1:00:20:65:25:14:
c8:88:9b:74:03:26:07:8e:1d:e7:ba:13:16:92:5c:
65:f8:81:52:a8:dc:92:73:35:b2:76:28:35:c4:92:
f8:27:b4:5c:86:be:14:22:ce:98:bc:e7:63:34:31:
5c:07:30:be:60:16:1f:36:a5:9c:ac:16:1b:b1:f9:
88:65:d1:30:f1:f5:bf:08:3e:0a:19:c4:69:48:59:
27:88:6c:6e:9b:94:97:ab:d2:28:07:9a:c9:1c:b9:
95:a8:b3:f3:31:44:21:03:e0:58:e8:a6:2e:1f:77:
55:62:22:2b:b4:89:7a:35:e9:ce:37:60:0a:7b:16:
19:5a:88:7c:36:ef:70:c0:cd:ff:b6:5d:7c:bd:f4:
07:28:e3:bb:62:11:df:57:0a:31:2d:6f:b1:31:cd:
49:6a:19:f0:92:fe:5a:64:7e:67:be:ae:c2:c2:04:
a6:c0:a2:8e:f0:08:3c:8c:8e:af:c0:1f:c0:74:d9:
94:14:5e:3e:2c:e1:be:48:b4:3c:52:9b:3c:76:69:
f8:ca:56:d5:c6:09:7c:e2:f3:82:c0:ab:88:76:d7:
8d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2A:E8:9C:7F:DA:75:82:DB:1A:99:6C:CB:06:BA:B1:2F:4C:B0:FB
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bb:18:c2:19:27:7e:21:5a:2a:73:cf:1a:da:b0:e7:96:01:
4e:7f:02:91:21:37:87:1f:2a:a0:77:ce:94:2d:29:f1:84:3e:
42:16:8f:18:19:83:08:0f:8b:ef:a8:ea:a6:b5:5d:06:6e:57:
83:9f:e1:a2:6d:19:f2:12:e9:60:64:47:cf:a8:8c:a1:e0:26:
62:9b:31:96:ae:9d:49:2f:b3:d9:5a:ee:87:e0:e9:f7:d6:5d:
07:46:10:bb:1f:6b:e2:3f:f7:7a:ed:4b:8f:70:39:70:8a:64:
97:36:22:44:49:f6:ee:e7:91:d8:d4:0f:06:f2:fd:d1:1c:ce:
6a:b7:83:26:1c:d2:b1:45:4e:72:71:4a:ab:7b:09:40:8f:a1:
25:30:1d:08:ae:8b:2c:c0:0d:76:90:a8:bb:e5:7e:9e:f1:be:
79:4f:16:2d:bb:ee:6a:84:1d:f4:cf:29:60:0f:54:0a:28:65:
21:7f:da:b5:db:3f:71:21:c6:ca:74:ce:b3:09:54:46:fc:b0:
11:43:bb:3d:2a:3a:a7:18:11:2b:76:01:f6:1b:9d:45:db:36:
e7:ed:40:06:8a:fd:8c:f5:26:2d:28:1e:bd:e3:30:a5:72:ad:
1b:45:59:6b:ce:31:b7:6b:58:89:a9:fa:38:b3:ff:f8:02:4d:
34:39:c4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:31 2025 by rpki-client