Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier: P57bNAMnH1QMKgcAhkPNGyW6ExdkpX8Fdw4qEYInMho=
Subject key identifier: 8B:20:56:F8:60:9F:57:8A:79:8B:1D:6C:F6:04:1C:90:CD:F3:8A:93
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 0196519191AD0BDDB6FB654F195CB1EA7E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 05:00:16 +0000
Manifest this update: Sun 20 Apr 2025 05:00:16 +0000
Manifest next update: Mon 21 Apr 2025 05:00:16 +0000
Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: EA+5B7muwQSxgKvVrzCXV5UCfE4W4Ry3DZvwKF1B4Hw=)
2: WtAp0tL-l96y_gbMlR5puzdruQc.roa (hash: xRGTdhiVzbN5no9s0pfriVSMuD8OBdniQOQSDlzn9q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:91:ad:0b:dd:b6:fb:65:4f:19:5c:b1:ea:7e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: Apr 20 05:00:16 2025 GMT
Not After : Apr 21 05:00:16 2025 GMT
Subject: CN=8b2056f8609f578a798b1d6cf6041c90cdf38a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:d5:c0:57:d2:14:29:27:de:3a:3b:23:f5:
41:2b:de:5c:02:90:5c:35:1c:d7:73:52:15:d6:8f:
be:ad:f3:d0:83:a0:be:95:f8:ac:22:b7:33:13:b1:
59:1e:b7:e5:04:fc:8d:28:ca:3e:48:7c:e9:34:67:
1e:c3:77:73:6e:81:a0:52:a8:fb:eb:cf:3c:7c:a7:
51:ed:d4:23:9d:e2:02:5d:99:2e:0c:a5:4e:24:5e:
31:84:40:e4:a0:ef:5b:14:49:5f:2d:af:7e:5c:a9:
bd:be:17:f4:5f:2e:de:56:6e:31:47:b8:da:6b:ac:
02:b9:56:ba:0c:bb:15:b7:5c:b5:fa:4e:58:ed:f6:
ca:ed:00:e1:0f:54:45:83:ab:46:85:65:cd:79:cb:
c0:32:62:94:62:52:25:4d:45:3b:4e:4b:fb:b9:9b:
1d:82:9f:a8:45:f2:0d:ec:cc:29:b8:52:ae:1d:62:
53:4d:cd:c7:ad:e4:7d:2d:0a:d7:6f:8a:5e:4a:32:
c8:75:e0:05:91:a2:09:c0:c7:21:d4:9a:c4:06:07:
ea:93:10:07:7e:e6:69:d0:ba:0e:7b:b8:8d:eb:48:
82:d1:35:94:d1:3f:e5:11:ca:db:bf:9b:91:f3:04:
b4:16:b5:ce:b1:59:97:83:3a:34:c4:e0:ec:1d:20:
4d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:20:56:F8:60:9F:57:8A:79:8B:1D:6C:F6:04:1C:90:CD:F3:8A:93
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fc:d1:af:d3:f8:d1:ef:93:44:15:98:09:fe:8d:33:ad:11:
33:40:02:d4:42:a2:f1:86:bc:8f:a9:b5:6b:54:33:25:e0:5c:
68:93:bc:28:ed:8c:b8:52:df:59:c5:ea:67:65:49:71:aa:33:
6e:13:ce:56:8c:df:97:55:e5:0d:68:37:0c:7e:c4:64:f9:84:
a9:79:55:4f:93:0b:e2:67:71:af:d8:ee:bc:20:1f:a9:3c:ba:
81:5b:85:ae:9d:9b:ee:1a:bc:7d:86:0e:64:c2:55:d1:2d:b3:
00:8b:08:13:59:7d:4c:58:05:5f:4d:35:65:7e:73:82:76:57:
86:23:a6:7f:25:f7:b9:36:5b:49:84:40:77:a6:f8:9f:bb:b9:
16:75:d6:73:ba:28:d1:fb:ff:0a:92:d1:0d:d9:ab:0e:a3:1c:
bc:c9:c0:49:db:42:f5:e0:2a:24:f8:1a:d2:ce:c8:e2:11:25:
d4:c7:9e:83:fc:31:06:c1:8a:38:b2:4f:5d:62:f5:53:c7:20:
6b:02:99:50:77:da:1e:b8:f6:05:0f:72:e7:4d:3b:b1:bd:63:
df:77:7b:64:5d:3a:10:fd:dd:e7:2e:ad:59:42:b8:11:ba:4d:
23:9c:82:c9:93:d9:34:2b:46:5d:b7:bd:84:79:f2:9d:ce:58:
57:60:85:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:05 2025 by rpki-client