Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
File: DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json)
Hash identifier: x1i7khCA1tjUTVg/hWexD2pZdOElfZFa4VMtqrDMIgg=
Subject key identifier: E3:D8:87:65:54:FC:54:CF:81:13:01:65:72:01:D6:BE:B1:B5:58:A5
Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Certificate issuer: /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Certificate serial: 0196564A9220937342EB4ACF7F5FB2F3BD46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
Manifest number: 11C5
Signing time: Mon 21 Apr 2025 03:00:49 +0000
Manifest this update: Mon 21 Apr 2025 03:00:49 +0000
Manifest next update: Tue 22 Apr 2025 03:00:49 +0000
Files and hashes: 1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: nrWawvFaHYZ3zAYwsrmHtSkPJNm591rwdihiYRycfJc=)
2: ZWVOs3WDW-rx5m7taQu6I2WYx7Q.roa (hash: yPh81fsK4TJM83HFw4j8d9BB5tZUMJFngOFcn+J9UgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:92:20:93:73:42:eb:4a:cf:7f:5f:b2:f3:bd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Validity
Not Before: Apr 21 03:00:49 2025 GMT
Not After : Apr 22 03:00:49 2025 GMT
Subject: CN=e3d8876554fc54cf811301657201d6beb1b558a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:19:bf:2d:2d:96:87:c7:9b:9e:d1:6b:86:
37:e6:91:46:f2:b7:46:0c:f3:79:ff:57:c6:6f:10:
3b:1e:ef:ab:12:5e:98:1d:7e:a6:7f:29:8a:9e:6a:
4a:b8:13:5f:49:88:38:d5:bf:ad:69:21:d8:e9:76:
a1:ce:90:ac:05:80:5c:72:11:92:15:81:3e:ef:14:
62:4f:36:70:11:b1:56:ae:a5:3d:bf:5a:c9:01:7f:
e0:36:d9:53:fe:62:c6:55:8a:79:c1:c8:f1:97:17:
2f:e6:e9:6f:f3:33:9f:eb:58:be:47:37:7e:e1:86:
9f:42:ea:b7:11:20:b6:47:4f:6a:16:53:99:28:2c:
dc:85:54:b0:22:f7:58:a6:10:0c:1a:44:7e:33:dc:
af:3b:68:16:c5:21:95:24:6f:89:21:e6:4c:7c:55:
81:89:f3:da:04:37:c5:5f:bc:11:fe:0c:70:f2:32:
b0:e1:35:02:3b:fd:5e:4d:04:db:a4:73:93:5b:b5:
48:81:b5:32:e6:1d:40:9b:db:3f:68:84:ed:d1:95:
6e:e1:03:4f:2b:91:80:b5:78:aa:90:79:37:77:87:
13:ec:a2:61:a9:64:8f:6f:4a:95:20:c3:de:4f:f5:
ff:17:8a:93:c8:34:9c:3b:15:ae:9d:21:6e:46:f1:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D8:87:65:54:FC:54:CF:81:13:01:65:72:01:D6:BE:B1:B5:58:A5
X509v3 Authority Key Identifier:
keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a0:a2:f2:c9:84:9a:7c:00:ca:f1:04:e7:e3:13:d7:2e:b7:
2d:15:d8:b2:6e:ac:6f:e7:3f:b8:e7:d4:64:7b:9b:e6:68:10:
64:1e:1c:fb:e0:a4:5d:64:e2:a4:53:78:09:76:43:d5:41:72:
af:48:34:c1:82:39:fa:9f:1e:27:61:70:0e:7b:cf:4e:8d:69:
5a:d1:b3:d8:f1:32:88:06:8f:c1:55:fc:17:19:bb:5e:0f:ee:
94:84:10:2d:75:4d:30:cf:e6:bb:3d:b9:66:a2:0c:fe:e1:a4:
71:cb:8f:a3:99:5d:4f:a1:d1:13:1f:80:38:fd:bf:61:c6:65:
2a:25:a0:26:f2:e6:7f:f7:38:71:76:03:86:77:54:96:4e:1d:
96:1a:2a:f6:79:50:4c:cf:3d:9e:8d:83:55:1c:c4:ab:75:46:
65:23:7b:16:89:65:96:fd:13:a9:33:cd:e5:c9:16:7e:d7:51:
42:ee:e4:28:51:60:b6:19:f6:74:dc:2b:9f:04:7f:94:05:d4:
79:77:da:3b:4d:43:a7:9d:d9:89:1a:97:e0:c7:86:67:d7:f1:
a6:ed:6a:7e:b6:08:13:7d:cb:04:4b:e0:08:98:0a:a7:0e:31:
7d:7e:81:de:06:3b:f6:2c:ab:88:8e:9a:5e:ec:d5:8c:62:1f:
e2:d1:6a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:52:57 2025 by rpki-client