Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: 1KeE1lz3AIRKjCBUm0BPKrkSlHLT9LK63lnFssvTKjI=
Subject key identifier: CF:39:C5:60:75:2D:1F:FE:6C:9F:09:A3:D4:62:C2:BF:F7:36:7D:AF
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 0196759E71D0481CD0AED75D24EAA6A00F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 05:00:40 +0000
Manifest this update: Sun 27 Apr 2025 05:00:40 +0000
Manifest next update: Mon 28 Apr 2025 05:00:40 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: 9QzL5k8pTurVXjxqMsisP4CcjrRNcBmPLU7Q1c25jck=)
2: Z7WQLysLOr9KTXHt3eRvtbiWeZo.roa (hash: fdaTiSBPfJFKIhyYKXlfKo3BVE4saxPRnib+dEXPrFo=)
3: ZOrfGuxYr-AGVishKANZfi1iYXI.roa (hash: LaLqBnWYlU5gFFvKLSeOrADM1iF3GbcpOkH2fyWF5fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:71:d0:48:1c:d0:ae:d7:5d:24:ea:a6:a0:0f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Apr 27 05:00:40 2025 GMT
Not After : Apr 28 05:00:40 2025 GMT
Subject: CN=cf39c560752d1ffe6c9f09a3d462c2bff7367daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1f:bf:ec:30:ce:80:15:fe:26:f4:82:17:70:
15:b0:9a:12:eb:2b:7b:5d:31:c2:45:fc:ad:84:4e:
d2:c8:9c:55:ac:cb:3e:88:8b:7d:43:1e:63:80:13:
7e:bf:a5:07:f6:c2:83:0b:12:56:93:6b:a0:19:8e:
5e:df:aa:88:c8:0a:47:0b:ab:5a:d0:3d:63:76:52:
3c:60:46:b8:87:a2:52:57:7c:3e:8e:88:f0:a5:15:
cc:60:38:e8:7d:5c:79:e2:79:79:f4:95:c6:bd:7f:
93:d5:d3:f0:8b:3a:7e:4d:64:78:b5:c6:90:5c:05:
ef:81:49:f9:d5:b3:a2:02:82:05:5e:c0:eb:bc:d3:
7e:45:ab:a9:39:73:b1:1d:c0:da:4d:b0:be:6b:90:
3a:a3:3c:c9:78:2f:db:e2:f9:7a:1f:99:1a:7c:ae:
35:ba:fd:b2:39:07:67:4b:15:83:1b:14:64:be:d0:
08:57:40:15:be:7b:09:6c:e2:6d:39:7b:f1:a1:73:
b6:c8:4e:0f:fe:54:29:be:b3:45:a0:05:d0:b6:11:
bc:b5:d6:1e:2f:af:4d:9a:e9:fe:36:da:db:2b:61:
c4:ab:3b:9f:c7:ef:d6:db:c4:ce:6c:74:23:5d:e8:
27:89:b6:48:f4:1f:9a:58:54:df:f4:95:8b:6d:d9:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:39:C5:60:75:2D:1F:FE:6C:9F:09:A3:D4:62:C2:BF:F7:36:7D:AF
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:47:1b:d4:43:4e:b5:68:99:b8:19:f9:a7:ff:9a:15:81:90:
6d:3b:f8:01:d8:5c:6c:77:bf:03:8b:f2:08:8b:9b:a1:3e:16:
56:8c:a1:0b:91:2e:b9:15:69:8f:d2:08:2b:06:da:63:61:6b:
14:a6:a3:60:c7:7b:ea:e6:81:9a:5e:c5:fa:5c:2e:8f:30:8c:
64:5d:e3:7c:a1:ab:23:73:bd:b8:48:38:c5:4a:9e:ba:2d:d9:
b1:43:4f:6d:a1:54:82:a1:53:96:b3:46:68:96:43:63:37:11:
bd:8a:c7:da:49:af:5b:e9:46:38:7d:5b:4a:dc:6e:e5:cd:ac:
83:89:6c:ae:24:7f:22:60:4f:42:28:6a:35:ba:24:c3:0b:64:
71:3e:6b:15:3f:b7:4a:f3:17:de:72:6a:13:f4:7c:f5:91:3c:
41:2e:de:cc:27:f6:df:6d:40:b7:2c:a4:ac:73:00:97:f1:1e:
1d:8a:fb:37:36:52:36:52:14:13:31:eb:a9:7e:8a:2f:4d:34:
95:87:7e:fb:23:2e:d4:d8:e3:c8:b7:c7:b5:03:46:9a:cb:65:
d8:d2:15:02:59:35:1a:9c:c5:90:31:bd:67:1a:d2:01:88:a3:
d5:16:d5:24:e5:71:ad:45:e3:9d:77:f5:ea:7c:82:20:95:bb:
f9:12:f4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:38:54 2025 by rpki-client