Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
File: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft (raw, json)
Hash identifier: V9iolzrsFq7uGghvnVb12wl5aGoQteWaSSQUyzfaPE8=
Subject key identifier: 6B:67:67:E7:FF:4F:28:E5:63:AA:22:5E:24:3C:26:F9:E1:B0:03:3C
Authority key identifier: 76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
Certificate issuer: /CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Certificate serial: 019675D540A7CA2CCF2894A10E85D34FA70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
Manifest number: 017C
Signing time: Sun 27 Apr 2025 06:00:31 +0000
Manifest this update: Sun 27 Apr 2025 06:00:31 +0000
Manifest next update: Mon 28 Apr 2025 06:00:31 +0000
Files and hashes: 1: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl (hash: L2otHolL/GapusPVxCvt2Ob2htGUDNhpsvr39/wWI+Y=)
2: nHio7uNF-gJsASyGNozixn0XJIM.roa (hash: jcd5sjivp19XVsrsVA1XbLT4Ewz4dljsdil0kUZsn2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:40:a7:ca:2c:cf:28:94:a1:0e:85:d3:4f:a7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Validity
Not Before: Apr 27 06:00:31 2025 GMT
Not After : Apr 28 06:00:31 2025 GMT
Subject: CN=6b6767e7ff4f28e563aa225e243c26f9e1b0033c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:43:49:d5:12:f2:e7:22:66:77:0d:36:7c:
ee:c5:c8:6c:58:7f:00:49:41:5f:82:5a:9a:6b:b9:
2f:bb:1c:fa:a1:c5:00:a5:38:08:60:45:1c:80:fb:
13:1d:79:91:e6:89:28:64:7a:74:b7:87:d0:48:3f:
3d:30:7e:45:71:e4:4d:f5:8c:79:62:14:72:e5:ea:
3e:1c:4f:36:c9:5e:57:a0:bf:fe:02:0a:ab:c3:b8:
d0:1e:b5:10:55:48:27:07:49:65:aa:58:42:90:f7:
11:02:af:da:51:e5:22:00:b2:b3:a5:0d:04:6a:f9:
fd:e1:78:80:31:34:9a:47:15:87:53:fc:83:59:f2:
c2:16:3f:ad:15:c7:26:3f:f7:de:36:f6:59:54:57:
90:b8:49:65:ea:4a:85:8d:88:82:92:08:01:19:c4:
15:c6:2a:fe:25:c0:6a:5b:40:1b:f8:9d:d3:81:42:
cc:05:65:0f:de:0f:1e:67:20:ff:33:1c:63:39:e3:
86:fa:6c:23:71:3f:15:9a:00:a4:83:eb:9c:7f:18:
e8:14:ef:68:5a:10:de:98:f1:08:e6:8c:6e:cf:87:
57:e8:06:71:13:45:02:7f:39:2e:5c:c8:7a:de:d6:
27:e1:13:e2:54:31:25:88:a1:34:47:fc:2f:1f:bb:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:67:67:E7:FF:4F:28:E5:63:AA:22:5E:24:3C:26:F9:E1:B0:03:3C
X509v3 Authority Key Identifier:
keyid:76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:66:9a:40:34:6a:2a:5f:25:3e:29:d9:38:52:a1:90:53:91:
00:24:34:0f:f8:de:b7:f1:81:3e:aa:a4:1a:c6:bd:0c:5c:74:
2e:6b:c5:40:43:18:1b:78:12:70:7d:2c:41:51:39:f6:1e:35:
5f:96:c9:57:c9:10:8c:12:c7:29:0e:ca:e1:52:5f:a8:12:12:
06:8d:bb:52:7c:88:d8:4b:ae:19:4a:14:6f:ad:2d:e4:2a:56:
4f:58:6c:c7:0e:b6:98:fc:e9:22:58:a2:99:6d:61:04:57:f9:
80:8c:74:9d:50:f5:5a:ed:30:35:ab:ab:df:71:16:31:19:96:
ef:1b:76:9f:43:5f:1d:b6:a2:58:2d:df:68:c8:41:81:08:bd:
d7:b1:b6:89:a5:1a:c1:79:18:05:4d:e4:33:fa:6d:a6:93:69:
95:4b:0a:4b:c8:15:97:0f:14:7a:8d:b8:ac:b9:51:e8:d2:75:
52:8d:1e:c4:7f:8f:36:06:11:a6:57:66:e0:95:d0:e0:6f:51:
96:71:57:30:27:98:40:c7:79:df:4f:49:73:00:ab:fb:0b:ea:
7e:fc:b4:7f:e5:f6:fe:c5:51:58:bc:af:a8:05:cf:e6:04:4c:
07:af:ac:6e:75:9c:b9:72:f3:0f:91:c1:04:ef:35:fe:ae:f4:
0b:ee:26:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:26:29 2025 by rpki-client