Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
File: Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft (raw, json)
Hash identifier: HLaZMwwFUmML7rTsPMCmOymDMM7foOmTlZpwmzLylIM=
Subject key identifier: AD:68:84:60:3F:D6:6D:EA:B7:CC:CA:66:C4:71:0C:03:45:A7:A4:68
Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
Certificate issuer: /CN=0dde6317311fe6d538577c17fec982b82eea9abd
Certificate serial: 01963F8B86FCFE94CD9312585FFE2F56C867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
Manifest number: 1088
Signing time: Wed 16 Apr 2025 17:00:30 +0000
Manifest this update: Wed 16 Apr 2025 17:00:30 +0000
Manifest next update: Thu 17 Apr 2025 17:00:30 +0000
Files and hashes: 1: CQ0HG1zWD48ox6-boezAROBkH6Q.roa (hash: zcrpqTakOim+S6H2s99YrSuzoN8a0ByVl/l7V7jze5I=)
2: Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl (hash: TrF0izQk2oJfON4Pb8aZS+RzoqMWSQ1zcZtupVlzqdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:86:fc:fe:94:cd:93:12:58:5f:fe:2f:56:c8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd
Validity
Not Before: Apr 16 17:00:30 2025 GMT
Not After : Apr 17 17:00:30 2025 GMT
Subject: CN=ad6884603fd66deab7ccca66c4710c0345a7a468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:c9:be:45:99:8c:63:17:49:ab:5c:e9:da:
9d:b5:68:75:5a:3a:b8:f9:97:56:dd:4a:b9:ce:59:
8e:9e:db:aa:66:07:e8:ed:ad:96:e5:77:bb:19:79:
d5:24:ae:c0:2a:8e:d0:a9:a6:74:10:c3:aa:01:df:
64:82:96:ef:f9:69:1d:43:99:cf:db:49:4a:c2:26:
18:7c:bf:f7:37:f2:80:31:c9:52:c7:69:d1:2e:d9:
19:8d:24:b3:ec:f9:a0:dd:a5:96:97:08:c5:89:15:
2f:17:63:fa:7f:fa:ab:40:74:cf:f7:f0:7d:1a:39:
a0:7d:9e:d4:84:70:0a:cf:82:cf:c9:fc:52:20:7f:
af:cd:b4:9e:38:5b:25:37:72:23:89:97:8f:f5:62:
44:7d:97:5e:38:79:74:d5:b0:b6:04:9d:e7:95:d9:
8f:07:f8:87:23:43:e4:09:03:dd:7c:4d:03:4c:31:
62:33:6f:11:ce:4e:6f:64:05:9c:f1:62:8b:82:6b:
47:1c:20:b9:b1:84:fb:68:8b:c1:cd:f5:b7:a8:14:
04:01:9e:c0:59:ea:f7:43:a5:dd:c7:b8:a0:52:6b:
7e:14:f1:76:2e:bf:56:92:7f:63:78:24:eb:1d:fc:
5a:1b:0c:7b:96:b4:a2:b9:ab:6d:b2:0f:10:32:b8:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:68:84:60:3F:D6:6D:EA:B7:CC:CA:66:C4:71:0C:03:45:A7:A4:68
X509v3 Authority Key Identifier:
keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:47:7d:44:15:76:23:a0:4a:3c:82:80:8f:74:ea:f0:54:3b:
96:13:0f:05:c6:84:bc:d6:7f:47:e5:1a:85:34:92:30:68:8e:
9e:be:30:a3:ea:ad:b0:0c:c4:80:34:ae:ee:21:f7:ca:00:13:
c4:21:a7:35:4a:99:8d:79:50:0b:9d:ef:dd:12:1b:26:62:f1:
05:fc:91:45:28:5e:c8:2c:5e:19:b3:37:97:35:f4:e4:d4:38:
04:19:b6:f2:c6:26:af:c4:68:6b:ea:86:22:53:36:d8:34:cc:
49:b9:96:74:6e:11:7d:61:5f:40:0b:89:ab:68:fd:ec:86:01:
3a:7a:27:e6:67:67:ac:84:7c:d5:1d:ba:70:73:51:c4:7e:37:
9f:48:c1:db:d1:f4:71:99:14:20:7b:3f:e0:42:5a:18:2d:bb:
27:9f:b9:ef:79:66:56:83:01:c6:ef:4c:99:35:8a:a1:b0:4d:
1a:58:2f:68:e4:9b:92:fc:6d:af:65:25:7e:0a:0f:70:9e:f3:
b3:16:e6:a6:9b:2d:70:a1:6c:38:25:9d:9c:d4:fb:01:f4:36:
f4:58:0f:0c:74:59:de:83:8e:ca:ce:45:1c:7f:f3:12:42:38:
cd:59:aa:b9:2e:7c:41:3e:fb:bc:e3:0d:d4:77:a9:da:c1:b7:
26:2b:54:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:08:59 2025 by rpki-client