Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
File: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft (raw, json)
Hash identifier: dGx508+ptng8oTe3I+fxBd2u3xTM+mdz7cdd79mdu1s=
Subject key identifier: 87:EC:E0:A0:66:A9:24:12:14:F4:45:EB:27:41:AE:58:C8:AB:F4:93
Authority key identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
Certificate issuer: /CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Certificate serial: 01965424FCF45A3A63D1A85D5380B36393F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
Manifest number: 0DCF
Signing time: Sun 20 Apr 2025 17:00:32 +0000
Manifest this update: Sun 20 Apr 2025 17:00:32 +0000
Manifest next update: Mon 21 Apr 2025 17:00:32 +0000
Files and hashes: 1: cV_xuUl9XuNAw2Is6z6ZV4oiM48.roa (hash: +2riVPNmAsQH9xrBeRoOTXvYeuCg2sjzB0s7i/rn9hw=)
2: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl (hash: v5zyr1QHQggbzz5hKGz99HRWnmc+DJR4ettwvhBNUU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:fc:f4:5a:3a:63:d1:a8:5d:53:80:b3:63:93:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Validity
Not Before: Apr 20 17:00:32 2025 GMT
Not After : Apr 21 17:00:32 2025 GMT
Subject: CN=87ece0a066a9241214f445eb2741ae58c8abf493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:c4:73:57:76:19:63:06:33:a2:aa:85:02:
f6:9a:64:fb:ed:95:6c:e7:3c:03:1d:f8:82:a6:a5:
4f:d1:dd:d2:b3:cf:47:97:c1:bb:ad:93:3e:e1:d3:
ff:c6:47:e5:8c:de:e4:65:f1:31:13:44:ed:1a:51:
2a:5b:2d:c6:47:55:24:39:1e:39:58:66:de:3d:41:
20:49:7d:18:69:31:f1:a1:e8:4f:67:ff:fe:b0:bf:
91:c8:1d:17:4b:0e:bf:f7:b1:1b:b8:20:19:7e:76:
63:d2:57:00:15:61:9c:0a:de:5a:80:8f:f9:22:e1:
b2:57:55:8d:94:11:2e:67:24:67:1d:f9:34:9e:40:
29:dc:3d:0e:0c:ae:fd:1d:f9:97:bb:a0:77:e0:1e:
19:45:5c:84:10:1f:c1:d7:66:c4:ae:13:34:dd:b1:
97:5c:b5:1e:9a:2e:84:68:95:1a:14:b4:13:e5:3e:
31:e2:6e:e7:26:fb:05:b0:33:f4:a3:a8:f4:07:5b:
13:88:49:f9:09:b2:11:6c:87:e8:e0:04:f9:2c:a1:
25:42:bb:02:1b:a4:9a:a7:63:3c:ed:0f:00:67:24:
e7:d2:ad:ac:32:a5:dd:a1:0b:55:28:0a:00:ab:a7:
61:80:23:6f:d1:58:04:59:ea:3c:45:8d:7f:7c:8a:
b9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EC:E0:A0:66:A9:24:12:14:F4:45:EB:27:41:AE:58:C8:AB:F4:93
X509v3 Authority Key Identifier:
keyid:77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bd:1d:c3:75:a5:0e:de:52:db:26:9c:b9:7f:15:52:83:ff:
16:b1:32:5a:76:3b:73:6f:e9:8a:21:61:05:f4:83:9c:c0:7b:
2c:7a:9f:cb:04:a3:08:7a:ac:f4:ba:40:b6:26:77:76:1c:54:
fa:67:ff:f2:89:1f:d8:2f:67:e1:4c:8f:17:0f:24:15:05:a4:
a9:72:64:00:86:fd:55:44:37:f5:ad:8a:01:e2:92:b4:78:6c:
ff:35:6b:1d:1d:1f:4d:d5:ef:e4:82:01:1c:5b:7d:5a:33:79:
c7:c9:a7:f8:52:92:df:9b:52:63:36:90:74:af:7b:1d:9e:99:
8d:81:07:c3:ef:07:8a:1c:61:fe:20:e3:ca:a8:ee:3e:a3:95:
fd:d0:df:35:16:12:5b:13:2d:8c:5e:14:4c:76:cf:15:72:69:
17:8f:5b:53:2e:89:d0:2d:d9:98:7c:3c:e9:06:69:f7:c9:de:
d3:02:24:1a:60:74:42:7a:a4:24:5e:2f:65:9a:5c:62:67:92:
32:be:b8:25:0c:1f:c8:dd:00:67:1c:28:6f:d6:6f:ae:63:38:
3c:f6:75:b8:6b:5d:54:98:42:84:c6:6e:97:67:46:a8:5a:18:
49:d6:85:e8:11:d5:e0:55:4b:a8:83:9f:a1:6d:e2:97:99:bc:
62:96:a9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:31:08 2025 by rpki-client