Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: Cc1ewh9ig63X8HMZdEPoCvb2XDFPosrbKvOEdK0F3c4=
Subject key identifier: 2C:C2:14:24:33:35:7B:01:C8:24:69:D7:A3:F5:26:D7:2D:BB:44:8A
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 019649D833004CD888515531DF08E82E0A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 17:00:27 +0000
Manifest this update: Fri 18 Apr 2025 17:00:27 +0000
Manifest next update: Sat 19 Apr 2025 17:00:27 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: mPTUUyi0dQBcIrd5hdLPRAdxeAp2cYvXScJOzkCq3/M=)
2: GQRsCJTR5eyMxFAsEzKdn1EA608.roa (hash: HAXZ0MI6t/VbluxA0NO0jceUtQ5vVV4JGD/6H3yxEPg=)
3: lqRpbscM182PANHFGsqMxFenQsU.roa (hash: KSrFDxAg8q5YynrUWiOm6jdQGqkWKL+PdBqVLGCQ1I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:33:00:4c:d8:88:51:55:31:df:08:e8:2e:0a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Apr 18 17:00:27 2025 GMT
Not After : Apr 19 17:00:27 2025 GMT
Subject: CN=2cc2142433357b01c82469d7a3f526d72dbb448a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5e:d9:34:50:37:91:47:ad:01:a9:05:6c:2c:
c4:6c:33:4c:c7:2f:cf:04:a4:88:c5:a9:cf:a5:3c:
2a:0d:28:2e:8e:44:c8:a5:a3:c9:08:3a:72:57:f5:
9b:bc:e8:19:e1:19:17:76:95:96:16:d6:0c:dc:c1:
49:62:46:f2:4d:37:35:99:c5:dd:9f:89:32:b5:81:
53:a7:5d:e5:f7:da:68:26:5a:f4:43:87:40:42:90:
e7:0f:68:43:a2:6f:7d:27:1d:e2:b7:2e:62:9c:4e:
8f:38:ba:3f:c6:23:51:d1:3b:15:a2:cf:e9:ea:fa:
58:ce:27:f4:ea:a8:ee:01:7d:e0:a1:a7:13:98:38:
c2:70:54:73:0f:e1:f4:39:1b:53:4f:26:de:eb:47:
4b:ef:50:e4:7f:85:c7:64:f4:16:09:d2:80:fd:57:
96:a2:3d:f7:85:d3:b0:b7:d5:a9:f1:f9:9f:76:99:
6f:64:d7:5b:66:63:25:2c:6c:74:b5:9e:e5:0d:38:
6f:f1:2d:ec:1a:3d:85:39:0f:7e:ec:39:dc:06:82:
c8:8b:df:80:cf:45:3f:36:c7:77:f8:33:4c:9e:b8:
98:4d:78:6c:4b:e7:85:ed:af:0a:6f:9e:3a:cb:64:
8e:23:4c:e3:7a:dc:e7:8c:16:cf:51:66:b2:d0:fa:
f9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C2:14:24:33:35:7B:01:C8:24:69:D7:A3:F5:26:D7:2D:BB:44:8A
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:af:19:ef:f8:c8:f7:9b:33:c8:37:d1:3b:f0:51:74:ea:70:
1f:4d:73:f2:75:38:8d:cb:70:27:ae:02:4f:4f:21:45:e3:6e:
b9:a8:a9:74:06:a2:93:bc:fb:35:6d:b3:a0:e0:b5:68:3b:7e:
61:9a:0f:72:cd:88:d6:3e:87:bd:48:bb:cc:87:01:b1:70:0f:
27:85:9d:e0:52:ab:cc:3c:83:53:3e:8e:1d:41:ef:f7:17:25:
7e:bb:12:07:e8:18:31:2b:70:24:64:79:25:ce:81:55:6d:18:
b4:e9:40:38:8c:f4:a2:11:1f:89:da:9b:3e:53:86:dd:b2:ea:
2b:d9:37:cc:84:5c:1b:74:ba:7b:41:8d:d3:63:cb:45:43:82:
55:2a:cb:57:0e:cf:3e:cb:ea:83:1f:da:36:74:c6:26:7a:2e:
22:87:7f:59:21:6d:5f:59:93:83:cf:af:70:ec:85:fe:49:f8:
af:e3:3a:5a:85:04:3f:21:5a:de:dd:bb:2c:cd:f8:86:fb:85:
6e:24:52:7b:71:42:04:d9:e6:18:01:96:58:0e:ef:05:10:34:
ea:16:d0:8d:93:a3:9d:59:fe:7a:9f:41:58:4d:d6:ee:b9:61:
e0:2a:9f:b2:fd:9d:51:2d:d0:26:ea:3d:bf:90:af:48:4d:3b:
28:27:bf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:51:32 2025 by rpki-client