Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: 0XLgOsHZc+x2LnF2CuCX4+YQax7s1yvcAXyLxj0T8c4=
Subject key identifier: E7:73:42:D1:67:0C:FA:92:17:3D:4C:AF:5A:96:32:8F:29:9B:9B:C4
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 01969C071A480B06765F3B544441AA720877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 0205
Signing time: Sun 04 May 2025 16:00:33 +0000
Manifest this update: Sun 04 May 2025 16:00:33 +0000
Manifest next update: Mon 05 May 2025 16:00:33 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: C5HqF6hgVSH+RaFqU9W5D6Qe+ckjcm3yNjNc7PHUXAU=)
2: NOYTh7ZlTxAFEDHg6RZrbrrgktU.roa (hash: tsOnlXCMm1Zkvk7dgvDTsJOertYGX+iBxLbtlWab/tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:07:1a:48:0b:06:76:5f:3b:54:44:41:aa:72:08:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: May 4 16:00:33 2025 GMT
Not After : May 5 16:00:33 2025 GMT
Subject: CN=e77342d1670cfa92173d4caf5a96328f299b9bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:28:13:db:57:b9:04:ea:8b:71:b2:06:85:
29:e3:e6:82:ba:9d:27:d9:23:06:9e:b9:bf:01:0d:
3d:1e:e2:90:0f:b1:22:2d:f4:ca:4d:ab:e0:45:af:
fa:44:a9:3a:b2:aa:74:22:47:e6:ae:4f:3a:dc:e7:
0d:1c:35:73:30:23:74:01:6b:cb:a2:34:9b:57:da:
62:85:98:e0:65:22:cd:0a:d2:5d:80:ab:40:68:86:
ea:35:f6:6b:37:6a:1f:2a:9e:10:b7:aa:f7:da:81:
ff:f9:78:49:43:06:87:42:0e:91:5b:30:64:fd:7d:
a4:1d:b5:97:29:bb:7d:23:89:34:e5:4e:2a:45:d9:
b8:16:6a:d8:66:df:02:03:ce:50:97:2a:d9:b3:60:
86:04:e0:5d:61:e9:a7:8a:64:0c:86:44:b0:ee:69:
f8:f5:31:bf:ff:6b:47:f2:ad:80:1d:41:e8:1b:01:
98:df:98:94:a9:10:23:5e:4e:b6:c2:09:1a:a7:39:
22:65:16:bd:39:e7:51:fb:27:05:1a:66:a9:d3:53:
aa:87:f1:19:af:8e:69:c3:c3:d7:f2:82:2b:63:ef:
f3:27:23:3b:8a:2e:5f:bc:32:6c:0d:cf:1e:f8:41:
6f:ca:86:47:8f:ee:43:4f:70:f7:df:f2:57:f7:2a:
cf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:73:42:D1:67:0C:FA:92:17:3D:4C:AF:5A:96:32:8F:29:9B:9B:C4
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:71:de:74:aa:be:39:94:84:ff:68:0b:5c:e5:f2:71:53:44:
e0:fd:a8:26:d4:ea:f1:49:69:19:d1:18:37:78:66:4b:04:5b:
f5:ae:4d:e1:22:b5:8c:f2:95:e0:65:2b:1b:7a:42:d0:2f:9a:
c9:ba:fa:40:8e:af:89:47:84:31:1c:0e:63:12:40:e2:32:9f:
97:ec:2c:31:96:f7:5c:01:e7:96:28:ef:60:56:32:2f:b6:a3:
a2:44:ca:a7:54:9c:82:94:b8:99:06:b5:15:79:1a:07:32:15:
f7:69:ce:30:85:6a:f9:5d:ec:00:2f:81:9a:ac:59:59:96:43:
c5:43:98:c5:a6:63:f4:a8:56:b7:10:5e:26:0e:da:04:17:22:
d2:be:71:df:f3:ce:9f:82:04:7c:0a:cb:3c:b7:4d:df:6f:92:
c9:1d:4f:f1:39:01:e4:f9:d9:b5:3a:b5:a0:a1:9e:ec:85:dd:
e6:bc:8c:65:c8:62:a0:d5:22:6d:c0:3a:73:b7:45:98:bc:a6:
46:7c:85:0b:1f:e4:e1:d3:2d:78:ab:97:67:f6:07:40:d6:8d:
96:e4:78:d3:26:79:f5:1b:90:ad:80:25:77:d4:ad:b9:ae:9b:
9e:19:69:05:04:0e:e7:5f:de:3e:49:59:b3:75:4c:bd:49:32:
f2:52:59:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 01:26:50 2025 by rpki-client