Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
File: DVX6KmKDfbmv5EI-TBGelJmyG0M.mft (raw, json)
Hash identifier: Qb/Olz5BJzSoUprWJD7/s+NCZh9JFIbpjbp5bWVLv1o=
Subject key identifier: ED:81:A9:B6:DE:29:63:CE:41:EC:51:B2:AD:6F:24:0F:DB:2F:07:92
Authority key identifier: 0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
Certificate issuer: /CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Certificate serial: 01967CB330A33EDCABFA953C823439F494DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
Manifest number: 067D
Signing time: Mon 28 Apr 2025 14:00:40 +0000
Manifest this update: Mon 28 Apr 2025 14:00:40 +0000
Manifest next update: Tue 29 Apr 2025 14:00:40 +0000
Files and hashes: 1: DVX6KmKDfbmv5EI-TBGelJmyG0M.crl (hash: MzxgP5A3uvXQYg3eBC6GD24grKkPxHeF41kwQYeTjts=)
2: GXOLHwEFu0p7gKJgkJ5kY6IvzIE.roa (hash: pAl+GrJaPPBbeJpVI3BoizE0NzXiXcJyNH8QYeo2rB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:30:a3:3e:dc:ab:fa:95:3c:82:34:39:f4:94:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Validity
Not Before: Apr 28 14:00:40 2025 GMT
Not After : Apr 29 14:00:40 2025 GMT
Subject: CN=ed81a9b6de2963ce41ec51b2ad6f240fdb2f0792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:23:3a:fd:3c:5d:f5:49:e8:df:26:5f:c8:4a:
e7:52:8a:f8:24:c0:67:c4:a6:b1:c6:14:d3:f4:4c:
a2:6f:92:16:6e:19:4c:69:7a:f4:6a:3f:4c:a9:96:
27:54:9d:78:e0:53:8f:0d:c9:9a:91:d5:14:6b:d6:
dc:fd:36:3f:4c:00:b9:af:5a:24:78:89:d6:73:14:
53:fb:17:21:f4:a4:96:8f:e5:12:65:f4:4b:43:d1:
dc:0b:1b:87:d1:79:a9:2c:e3:b9:a2:0b:23:74:67:
fa:48:c4:56:da:ab:a8:d5:79:e1:a2:ad:34:a9:31:
1e:23:6a:5e:b0:fd:63:14:cf:4c:c4:3d:06:d9:86:
5d:cf:ae:7d:78:a0:30:7b:85:fd:21:1e:c3:19:b7:
21:57:5b:36:c1:03:6d:8e:b7:ed:1e:f5:43:12:5c:
71:2d:b6:fd:aa:56:d7:44:87:ad:6d:28:3a:c8:ea:
a8:ef:7e:70:f3:d0:9f:79:1d:0d:48:2b:e4:d4:33:
79:8c:bd:fb:38:75:14:cc:52:10:fc:a9:00:d7:93:
a6:08:83:2e:42:d4:ba:e7:bf:c3:14:4b:44:d9:de:
4a:02:78:49:cc:ee:b2:5a:ce:01:2e:a8:fa:f6:03:
c0:1b:82:59:28:cd:d8:9c:38:36:4b:f9:13:be:c7:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:81:A9:B6:DE:29:63:CE:41:EC:51:B2:AD:6F:24:0F:DB:2F:07:92
X509v3 Authority Key Identifier:
keyid:0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:95:71:3c:59:22:dc:f0:8b:2f:9d:28:2c:86:1f:c7:df:0f:
c6:8b:48:2c:24:aa:23:19:6c:5e:93:e1:ef:e4:32:80:63:c4:
09:7d:e7:21:c6:ad:f5:fb:53:41:61:ae:04:ac:97:f5:b4:dc:
d8:32:a1:3e:a0:51:c7:8d:f6:62:1e:c5:05:3b:ea:1a:7c:44:
dc:0a:b2:1f:f9:4c:52:ae:70:a7:d7:38:ef:92:4b:54:43:ce:
36:53:d3:7d:b0:fb:30:0f:ba:17:f0:34:c9:35:9d:d1:8b:5e:
77:d2:ca:27:58:9d:39:ce:16:eb:1c:ce:55:55:03:67:f5:c2:
c6:42:11:ae:9a:dc:9d:c0:46:3e:6c:e7:8b:c6:75:db:7e:e9:
a1:4c:50:a4:68:00:ee:fd:2c:3f:63:e9:8e:73:c3:b8:9b:56:
03:8c:f1:3e:7f:37:19:da:9d:70:30:3a:c5:7a:fb:5a:43:d6:
7d:ea:4f:f0:6c:ce:c7:bf:38:10:4c:0c:8c:56:69:63:41:3a:
05:89:ce:18:be:3d:48:0d:ca:02:db:b4:58:7d:ab:7a:c0:31:
97:c6:e3:03:22:d4:8f:08:66:52:b2:54:c5:77:de:2b:ec:1e:
5e:50:79:e0:60:be:c9:a2:9d:1b:b4:7d:78:cc:31:be:c4:d4:
c5:18:9e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:01:45 2025 by rpki-client