Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: TYZeWYrQEZ3ajXTB8WT/pXZ1kmz+vV+KJKs9bNsVdsc=
Subject key identifier: 22:18:40:3B:61:83:75:7B:57:A2:04:24:E9:DC:E1:ED:EA:D8:3C:C0
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 01960FE97B1FF1CEB53294D7D70BC415D011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 14DC
Signing time: Mon 07 Apr 2025 11:01:21 +0000
Manifest this update: Mon 07 Apr 2025 11:01:21 +0000
Manifest next update: Tue 08 Apr 2025 11:01:21 +0000
Files and hashes: 1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: pGTy8P1KYCDdAB1DHRdx2sD444IWQ2WJOHV2n/rFU3o=)
2: PGpk2qjaEHATBO5WJqpwQvvo-t4.roa (hash: sxUY6k6RZnsEb5wstWgn4/zoH8gCs5vVrsT2wup6jP0=)
3: flUmY1UuhQ4umekHZTdOQbHf_3c.roa (hash: +LH2doQCe/pHrWkfv/54Ur54xmP0ZJEt0aBXtrY/eUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:e9:7b:1f:f1:ce:b5:32:94:d7:d7:0b:c4:15:d0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Apr 7 11:01:21 2025 GMT
Not After : Apr 8 11:01:21 2025 GMT
Subject: CN=2218403b6183757b57a20424e9dce1edead83cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:6a:83:2c:86:65:51:79:f0:99:bd:f1:dd:
5f:b4:b2:e7:b2:55:46:4f:c1:56:d8:8a:0e:87:90:
96:99:65:6b:cc:43:16:20:46:54:59:b4:56:c6:f6:
5e:c7:dc:cf:26:85:bf:f0:cd:a4:e5:81:80:6f:62:
1f:25:a8:f8:31:5f:2d:c5:90:24:69:11:cd:b5:07:
22:15:40:c8:6a:b0:d7:bf:5e:e7:e8:17:e8:d4:fd:
ba:64:fb:24:e4:5a:37:b5:21:6c:04:8e:e3:64:fe:
b9:3d:fa:3a:61:6e:3d:f7:9a:d5:0e:de:50:41:29:
42:c0:ed:13:b6:9e:96:b0:7b:ac:34:27:b4:46:03:
2e:cc:36:71:c5:87:62:9e:ac:42:3b:79:e5:1e:55:
1b:fe:ab:97:aa:51:c1:fd:16:72:5d:51:d6:29:5a:
22:eb:d8:f4:58:70:a1:2d:a1:17:bb:55:f1:bc:a4:
20:b0:70:a5:f1:f0:ce:e1:54:00:74:b1:98:69:5b:
36:43:53:78:7d:74:c4:46:7e:21:6e:6a:aa:f7:31:
08:29:e5:31:17:84:9e:f9:89:50:ee:ec:a6:d9:bf:
c5:c7:29:39:88:22:5d:74:ed:f7:a7:b0:50:8f:1d:
51:93:7e:e3:0f:d9:32:d5:1b:c1:2e:17:8d:bd:9d:
81:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:18:40:3B:61:83:75:7B:57:A2:04:24:E9:DC:E1:ED:EA:D8:3C:C0
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6f:62:d7:7d:dd:de:6d:8d:98:e1:f4:bd:90:04:96:3a:31:
48:40:cc:02:9d:2c:36:95:07:d6:df:65:96:75:69:1d:28:ad:
83:ae:b8:20:12:23:8d:d1:97:c2:5d:fd:c7:58:33:f0:2d:2c:
58:5a:67:44:1e:e4:84:17:81:6d:58:c5:8f:fb:5d:47:fd:1e:
49:73:bb:c0:7c:a6:8c:ae:d1:a5:db:58:f4:5d:9a:4e:ff:1b:
f6:6c:63:41:76:6a:74:92:c8:c0:e8:3a:64:ff:c2:c6:ee:e8:
68:a1:f2:2a:75:75:ed:7d:92:be:00:be:2a:09:fa:47:83:e1:
01:28:24:c7:09:5a:9e:f7:62:13:3d:42:25:39:41:2c:7b:aa:
55:3a:3a:64:0a:6a:0c:b9:74:88:68:58:19:8e:a8:5f:d6:59:
6c:04:08:40:76:27:4e:24:54:e9:29:a8:7a:18:52:18:1f:59:
1f:b9:56:fa:d7:04:c1:ca:a1:be:d4:cb:e2:15:4c:39:af:7e:
32:f3:68:5e:d9:17:9e:b6:37:06:71:5c:f8:fb:b2:f6:b7:21:
9a:d8:16:1d:9f:c6:07:08:88:f0:29:21:7c:71:70:8f:d8:b9:
f7:a1:02:38:c7:31:ff:ad:ab:d3:35:71:ab:26:3a:55:b5:91:
e4:7e:45:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:43:16 2025 by rpki-client