Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
File: DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft (raw, json)
Hash identifier: fe+065CBqLECpB8vByyyYXN7bDeNnPU8E+TEDF0F+JI=
Subject key identifier: 58:1B:E4:01:C3:4B:F0:A1:68:BB:E8:A2:A9:8C:CD:41:49:0C:31:55
Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
Certificate issuer: /CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Certificate serial: 019677C3E42B62DBC259471E89EF04268E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
Manifest number: 0725
Signing time: Sun 27 Apr 2025 15:00:48 +0000
Manifest this update: Sun 27 Apr 2025 15:00:48 +0000
Manifest next update: Mon 28 Apr 2025 15:00:48 +0000
Files and hashes: 1: DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl (hash: tW0WYaGV3ijpO7uMBRoQn55qPH7RSicPaN9YzV8nT9w=)
2: MkhY8Wq6vpbqUA8JYFIfnWPN1Xc.roa (hash: P1izD/bPbpYCMheG0o/h8Q5qxusjF76rS35X5Ps2VoI=)
3: lN3w_CQ-pmg0o8Uv6v-3uj3yMXY.roa (hash: yR0ABww6qrzdgsxlfyOghUNrgq+qwWXZtqgAtOQG9ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:e4:2b:62:db:c2:59:47:1e:89:ef:04:26:8e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Validity
Not Before: Apr 27 15:00:48 2025 GMT
Not After : Apr 28 15:00:48 2025 GMT
Subject: CN=581be401c34bf0a168bbe8a2a98ccd41490c3155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:f3:50:ae:2a:b2:22:6a:ce:a6:e2:c4:af:
4e:d2:56:d6:44:0a:ab:e1:d9:74:97:22:40:f2:89:
92:19:92:0f:be:f5:8a:a4:1d:41:2f:c4:5e:78:a0:
23:ce:7e:8f:45:8f:53:13:ea:9a:eb:07:09:81:fb:
d5:1a:5d:94:d7:48:9a:4e:ce:80:a9:f1:11:80:b2:
4f:8a:9f:bf:c0:58:a3:6a:01:a9:12:02:dc:db:cc:
79:8f:b0:e7:da:04:a2:c8:f7:f8:be:06:64:86:35:
94:35:63:30:8f:da:e4:7d:b9:99:63:74:12:1e:4d:
e4:33:6d:c3:64:04:cb:6b:d1:5d:a9:90:e9:dc:11:
b0:c9:7b:96:72:31:f0:dc:93:49:58:0c:10:7e:6a:
30:5f:fc:cf:a4:05:8a:89:f2:3c:74:c9:5d:67:38:
a2:f3:d8:b3:5f:e4:be:14:3f:42:96:7b:87:0a:af:
71:61:e4:b1:40:3e:9a:27:a0:8e:f6:37:79:bb:90:
a1:81:89:cc:af:a4:fc:d5:76:04:01:ac:58:cd:15:
6a:91:13:d2:c2:68:96:7a:74:28:87:35:31:00:0a:
b5:c2:05:91:7f:d8:1c:72:69:cb:9a:3b:1f:0d:19:
c1:a4:54:bb:a9:7d:7e:4b:66:11:1b:ad:7c:63:1a:
21:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1B:E4:01:C3:4B:F0:A1:68:BB:E8:A2:A9:8C:CD:41:49:0C:31:55
X509v3 Authority Key Identifier:
keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2d:f1:cf:91:16:84:43:96:48:9c:89:69:39:c1:84:f2:46:
5e:88:03:d7:b4:d3:c7:ee:3a:71:be:22:0a:ea:46:3c:ba:76:
22:ec:96:46:33:3e:b8:e8:88:43:94:d6:d1:a0:e5:a0:ba:33:
dc:12:2e:85:f0:07:fd:be:3c:ea:d0:7c:02:4e:fd:54:1d:66:
47:6e:c6:34:1e:12:6d:d1:81:d9:8c:51:82:ce:a0:5b:77:cf:
a2:3a:57:4a:f5:f4:b4:df:90:4a:6d:7a:dd:22:4e:db:30:58:
83:a8:2a:65:69:e7:d2:a1:25:72:38:4d:70:e8:f3:ea:59:91:
38:31:0b:94:68:40:25:11:4c:80:93:b0:30:9a:3a:88:e2:dd:
35:de:95:09:18:ed:2b:71:92:96:ee:a6:c0:54:ce:c8:1b:6b:
6c:f8:f8:9e:1e:f3:b7:97:ed:b0:0a:b3:be:4a:fb:54:10:e4:
f6:65:2a:9e:4f:f4:31:cc:32:1f:c3:a5:ab:62:20:9c:dc:33:
19:d5:9c:1e:1a:f4:cc:f2:b9:ab:65:73:55:4e:17:ae:92:13:
a5:2c:db:41:01:ef:72:00:d5:1f:cd:97:5d:cd:70:87:e4:82:
c5:9a:06:db:34:a6:97:72:b4:85:02:8d:b3:2c:76:98:ee:3c:
9f:79:ea:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:24:55 2025 by rpki-client