Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File: dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier: xiTybfnG6sFtdwZ+NB8kgZ37fdVn1is90NzpCDeNR+g=
Subject key identifier: BD:A2:92:38:46:F7:A5:70:84:BF:3C:00:4B:B5:EE:FD:AB:CB:99:6B
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial: 0196507F790888F4B46F4298C231340DB8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number: 05AD
Signing time: Sun 20 Apr 2025 00:00:53 +0000
Manifest this update: Sun 20 Apr 2025 00:00:53 +0000
Manifest next update: Mon 21 Apr 2025 00:00:53 +0000
Files and hashes: 1: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: +O2Hcjl9DkY409JRlQW/sP4oxOIKEZZuq/VlrceszJs=)
2: wmFwOwWe4TE9uLkEByUtzshEopU.roa (hash: QBlI2HpuFwgzwXYHTq+pMuExi7xAAtXFZ+n0JdzIy8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:79:08:88:f4:b4:6f:42:98:c2:31:34:0d:b8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Validity
Not Before: Apr 20 00:00:53 2025 GMT
Not After : Apr 21 00:00:53 2025 GMT
Subject: CN=bda2923846f7a57084bf3c004bb5eefdabcb996b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6a:3d:a1:19:26:ab:52:5f:a7:95:d9:51:b0:
46:af:90:58:3d:7c:11:98:24:c5:99:07:3e:c2:14:
23:90:0c:5a:3d:5d:f5:b0:19:75:94:7b:59:ab:d1:
d4:fa:62:d7:88:c1:ad:a6:61:dc:85:c1:12:16:2b:
a3:2e:42:3d:89:e6:3b:1e:66:20:66:d6:da:34:c1:
16:5d:25:bb:9f:47:32:61:e5:77:d4:55:e7:7c:41:
9c:3a:49:08:c9:e3:db:a0:25:29:0d:d3:22:b6:3d:
93:7d:6e:bd:38:4a:94:ee:9c:26:38:c5:8d:ea:39:
e3:1e:ec:1e:ef:23:fd:38:b1:80:75:3b:6f:7d:41:
19:44:ef:e1:ce:21:96:81:2b:f6:7a:7f:38:9b:fb:
aa:61:87:ef:6e:60:d2:47:65:12:2d:b8:62:12:35:
33:5c:b7:6b:fd:d3:6a:0e:d3:a3:6a:a1:43:d2:6b:
d1:45:b6:4b:ba:75:00:23:fd:93:98:5a:85:06:ce:
b8:f4:e2:a3:bd:de:f6:a6:a9:f8:58:ef:36:ba:cb:
e8:79:8b:47:c4:66:d8:27:8a:05:70:3c:f3:7f:61:
6c:2d:a2:a2:e1:20:48:7b:aa:c7:6c:8b:bf:2f:12:
77:6d:a5:4a:59:2d:90:89:2e:82:92:09:18:d3:7f:
9b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A2:92:38:46:F7:A5:70:84:BF:3C:00:4B:B5:EE:FD:AB:CB:99:6B
X509v3 Authority Key Identifier:
keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e1:91:bc:c9:3d:de:70:17:c2:26:66:ea:cf:77:fd:6e:86:
f1:06:8a:18:fb:4d:83:48:1e:39:e8:df:7b:d0:d0:ba:45:5b:
fe:aa:3d:0c:23:8b:c3:7b:a3:c7:6c:bf:11:84:d1:82:25:69:
72:9c:9a:ac:e9:04:62:36:0d:8c:b4:d6:ab:40:e3:c5:29:54:
c3:49:c2:1b:f4:17:ee:b8:61:f0:7e:ab:db:9a:54:7d:64:3a:
13:db:99:0f:8e:b4:a4:f0:80:44:1a:38:be:da:be:03:5f:85:
bf:df:e7:46:c4:d6:e0:43:ed:11:22:9a:4c:a0:b9:e7:7b:aa:
04:66:b5:cf:6c:bb:5e:a7:e8:46:ac:1d:d9:85:f9:f0:ec:16:
44:dc:8e:6b:ba:6d:88:13:69:18:84:65:2f:be:95:2d:5b:49:
ff:62:45:5e:7e:c0:bc:57:22:ae:0e:b7:76:c6:bd:58:ba:67:
47:07:22:20:64:ac:bf:5a:1a:c3:1a:15:97:fe:71:af:f6:e2:
f1:cf:10:39:bd:1d:aa:ec:85:7a:8e:ec:b4:a1:c3:f9:70:9b:
b2:6d:0b:d5:3c:3f:e9:9d:f7:f4:80:f5:02:75:59:f0:e1:e1:
b9:60:5d:19:af:91:3a:ea:1c:c0:66:ef:15:45:1a:69:2a:24:
e5:62:3a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:56:45 2025 by rpki-client