Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier: YQTHQAmmnHnzvkakAE5TyVdLEquymNirACb3Zh01nq4=
Subject key identifier: FD:27:5F:A2:5D:97:D8:0B:C3:FD:71:B1:E6:4A:4B:67:CD:5F:84:17
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 0196858039BDDEC8EED2B2DBB340EC3D762B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number: 0C8E
Signing time: Wed 30 Apr 2025 07:01:35 +0000
Manifest this update: Wed 30 Apr 2025 07:01:35 +0000
Manifest next update: Thu 01 May 2025 07:01:35 +0000
Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: 1wLcMVtrhI48bHE1rUUe2rupuczSNalqOeWyapYmGGg=)
2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:80:39:bd:de:c8:ee:d2:b2:db:b3:40:ec:3d:76:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Apr 30 07:01:35 2025 GMT
Not After : May 1 07:01:35 2025 GMT
Subject: CN=fd275fa25d97d80bc3fd71b1e64a4b67cd5f8417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e9:77:c8:58:9b:17:61:27:fb:12:15:a9:0d:
07:3b:a5:af:58:3b:d3:9f:62:ab:cc:da:8f:de:e8:
0a:1f:98:af:90:62:93:83:00:fa:b5:b4:e0:98:b3:
c2:55:27:32:59:bd:dd:04:ae:9a:87:83:3e:90:b6:
ad:bc:28:9e:b8:e6:cf:19:3d:36:f3:2f:55:0a:4f:
e5:cb:c1:f9:a8:0f:d6:43:17:40:44:f1:df:bb:4c:
37:29:cb:99:39:79:49:e6:72:e1:50:28:b0:fb:cb:
4c:d8:30:31:84:c4:a4:f2:f6:14:a7:a2:4f:85:59:
63:bd:bb:bd:de:dc:80:4e:85:93:f1:03:de:c4:06:
68:24:30:d6:85:c7:a8:41:81:f8:a9:af:19:14:58:
07:30:1d:9c:1e:75:b0:a9:6c:0e:ce:b2:7f:37:8e:
2f:6f:f0:04:04:e4:59:ad:75:a6:5c:b8:ab:78:20:
41:b9:c8:7e:be:e9:81:f6:85:b7:03:2b:17:53:80:
e0:20:18:1f:73:72:a3:e5:e0:cb:2e:21:49:c8:67:
17:92:d2:c1:51:ee:ff:42:76:54:be:85:b8:82:eb:
16:56:ba:de:3b:0e:92:df:64:c3:1b:4f:fe:fe:d2:
d1:ac:ba:ae:8a:4e:48:f1:79:c4:90:e8:f7:21:88:
d9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:27:5F:A2:5D:97:D8:0B:C3:FD:71:B1:E6:4A:4B:67:CD:5F:84:17
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d5:f5:dd:2c:bc:95:cf:db:7b:fe:3e:c8:08:42:b2:2e:b8:
78:ee:5a:77:db:05:0e:12:8c:5c:45:b5:d9:f9:cb:ad:b3:8f:
d5:93:9b:fb:28:1e:90:68:13:ae:7d:e5:f3:7a:5c:a3:cd:24:
15:35:a7:82:24:2a:3e:0c:63:92:cc:22:0e:d4:be:96:14:d2:
d9:c5:90:94:b0:a7:81:3a:f2:34:ff:b0:ae:de:c3:c7:1d:21:
f5:e0:08:b6:60:3d:b4:e4:7b:e0:ae:26:66:5d:be:9b:b2:6b:
5d:5b:d9:d0:b1:e7:d0:8d:35:87:24:e8:3f:8b:5c:56:11:19:
c0:cc:ca:1f:0c:4c:8c:cd:78:ce:ae:05:1b:e8:d0:6d:d7:9f:
8d:4c:a3:e2:0a:8e:ce:ee:84:33:43:b7:bd:01:df:67:16:92:
1f:1e:a5:a1:f9:87:82:7d:66:72:23:4f:b1:10:73:d1:16:92:
af:39:d8:f6:87:00:fd:66:80:e5:ee:9e:91:62:8d:8d:98:e6:
40:d4:ca:99:60:be:76:84:b8:88:2c:ba:fc:f1:95:0c:3e:46:
81:6e:41:86:f6:ec:dc:c9:ba:f8:42:53:6c:25:69:49:c5:dd:
8b:d1:fc:de:e3:ae:da:dc:a5:38:d0:98:38:f8:e7:51:04:8b:
04:e5:39:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:45:53 2025 by rpki-client