Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier: PY2AdPJEQTy4hRV3oWQmuRm9rFUNAvLRYhhx9oGPMuw=
Subject key identifier: 56:1A:FC:18:FE:90:B3:9A:F9:31:EA:55:BA:3E:3D:9B:40:8E:5A:02
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 019683FF811EC1A4C2AAE21AB01CF10DA087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number: 0349
Signing time: Wed 30 Apr 2025 00:01:22 +0000
Manifest this update: Wed 30 Apr 2025 00:01:22 +0000
Manifest next update: Thu 01 May 2025 00:01:22 +0000
Files and hashes: 1: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: 3pkPwxOfcTiCLgWpKfAIVXVyttYh/3S+o3o1ibmghC8=)
2: DsQ3XuL18x6JXJPIAS7Bywor1FI.roa (hash: YgD4/obT5P1W7ZaQyQBLHDkI0d6d+gx0ix2vsYYOe7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:81:1e:c1:a4:c2:aa:e2:1a:b0:1c:f1:0d:a0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: Apr 30 00:01:22 2025 GMT
Not After : May 1 00:01:22 2025 GMT
Subject: CN=561afc18fe90b39af931ea55ba3e3d9b408e5a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fc:ef:2d:1b:a3:ba:f2:7f:93:6d:08:a1:04:
ec:b9:0d:55:89:e4:e5:ab:8b:01:93:77:23:08:fb:
36:30:ac:63:8d:2a:99:04:93:ba:c1:c3:34:3d:2b:
31:40:81:1e:42:79:3b:8b:7e:87:74:0e:92:15:07:
20:ce:db:17:d1:82:b4:4a:21:c6:1d:22:03:56:7f:
eb:06:4c:fe:bc:b5:1b:e2:bc:2a:26:aa:57:98:b5:
9d:80:36:6f:c6:5f:b9:ab:d5:8b:1e:4a:b6:50:b2:
46:0f:1e:b8:0f:76:8f:f1:bd:2b:62:23:87:4c:3f:
0c:b9:d7:d8:ca:88:08:4f:3a:5d:31:97:9b:a2:4f:
73:d7:93:c7:78:74:b1:87:0c:3c:2f:f1:5f:a0:1c:
bb:6d:48:ab:98:1e:c2:aa:64:60:a4:27:ed:1a:09:
8f:e8:50:02:03:23:57:90:ae:bf:ec:86:cd:05:7a:
3a:12:7f:71:84:92:a0:ef:c2:61:e8:66:77:78:81:
a0:6c:c8:b5:a5:90:e0:5f:fa:81:fc:5b:d4:d1:37:
55:14:59:63:f5:23:d9:a4:95:96:72:d2:9c:46:0d:
23:97:25:75:12:a8:5f:b4:63:9d:e3:df:82:f2:eb:
48:54:1c:e3:ad:6d:04:b1:14:ee:27:53:87:ff:ee:
ee:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1A:FC:18:FE:90:B3:9A:F9:31:EA:55:BA:3E:3D:9B:40:8E:5A:02
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b2:1a:fa:d4:c4:e6:74:22:06:40:4d:c2:7f:bc:2e:2e:3d:
7e:1f:99:2b:16:16:69:12:cc:95:76:51:65:fb:09:c1:f6:d7:
96:8a:92:a7:94:e0:95:45:f2:86:58:7a:52:0a:3e:70:aa:fe:
d8:a4:f1:5e:94:9a:be:f1:0e:2d:3b:87:31:28:04:85:de:3a:
54:ef:b9:2d:af:9f:fc:d5:12:1c:d2:dc:1d:2d:26:0e:0e:2d:
e7:f1:1c:c3:1f:c7:6f:fd:b5:fc:fc:57:c6:a0:dc:cf:44:b9:
9c:5e:cc:63:3d:e8:74:d5:f6:c6:72:ec:34:95:b7:f8:8f:39:
b4:2b:4a:e9:be:14:c9:b3:68:35:1e:d5:f5:5d:4e:f0:ab:70:
e4:f0:c0:2a:c0:3f:ff:b0:85:15:fc:d9:f9:2b:54:52:fb:49:
88:a1:65:f9:5d:a4:3d:88:70:80:65:59:ac:8f:8a:de:42:3e:
62:9d:eb:78:a3:e5:1d:14:8e:92:c6:d3:5b:d7:11:39:4b:86:
a2:39:b6:55:00:19:18:a2:05:21:57:2a:28:de:ed:06:5b:31:
5c:00:9f:22:9a:26:22:12:05:54:4c:66:4d:45:3c:45:17:95:
f2:5f:f2:06:f9:3c:81:3c:3d:dd:9e:fa:98:ab:a4:58:f7:39:
7c:2b:a0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:30:29 2025 by rpki-client