Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: Dimo7Cv05Dp2Jq4mAQwqSzAcdXR22mvcy09Jzj4dbbI=
Subject key identifier: F8:67:15:69:FC:86:03:08:A5:05:17:63:C4:E3:8F:85:14:45:DB:61
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 0196786900D21D22D647E9C5A1239C83FE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 1131
Signing time: Sun 27 Apr 2025 18:01:09 +0000
Manifest this update: Sun 27 Apr 2025 18:01:09 +0000
Manifest next update: Mon 28 Apr 2025 18:01:09 +0000
Files and hashes: 1: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: GJIJl37gBlfQaPPeU93rLObNtojvToScVNykviRwI9c=)
2: GU3WIEeqeryj-R-zsa0cMuUQBHM.roa (hash: P0OhDT05+JAj4QXmTS/0O2Bzhb6RhdbVqJWFN0gOpmE=)
3: cIkzHkYil73CUQBJR_lXOc-rvck.roa (hash: rY7DgjrJWLfJoJzDxWf7uBXP1TGyTLjuDroDK6Z0PGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:69:00:d2:1d:22:d6:47:e9:c5:a1:23:9c:83:fe:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Apr 27 18:01:09 2025 GMT
Not After : Apr 28 18:01:09 2025 GMT
Subject: CN=f8671569fc860308a5051763c4e38f851445db61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:12:f2:41:e1:4a:ea:7a:13:9a:c7:49:86:f6:
6d:ba:03:5c:b3:fa:1f:a8:e3:e0:e6:13:cb:bd:0c:
7e:b1:ef:53:db:e2:96:2e:1b:9b:11:21:25:80:36:
28:8b:03:9e:2e:1d:1d:72:bc:3f:ed:bc:b8:6e:d7:
8d:70:df:dd:e5:d2:5b:33:e9:1a:63:2a:65:59:f3:
d5:ad:be:c3:4d:fe:92:55:b7:9f:ba:74:38:0a:a7:
21:82:7d:68:57:e2:67:2a:da:21:25:2b:3d:22:88:
eb:15:0d:32:ac:05:03:7d:3d:59:7e:34:9d:d2:16:
44:1e:f9:da:f1:e0:bd:2d:0a:3d:80:e0:5e:08:4e:
32:2e:44:18:74:bd:7f:bb:3f:af:16:a8:a6:c0:90:
f3:36:33:7d:5b:fb:6a:78:f8:bf:f8:be:68:d6:a6:
6c:45:f8:b8:57:71:9c:b1:ed:d6:1f:76:6b:91:aa:
4b:04:18:25:54:69:30:f4:d7:d5:8f:7c:18:53:69:
e6:20:1b:87:01:5a:27:b0:8a:f8:8e:68:aa:3e:f8:
c8:ce:e3:2d:aa:80:4a:02:c6:77:cc:d0:d8:f5:12:
c0:3b:7b:cb:0a:e7:74:01:1e:2c:19:a4:28:dd:de:
54:27:34:a5:01:37:3d:93:a6:b1:62:42:fc:8a:38:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:67:15:69:FC:86:03:08:A5:05:17:63:C4:E3:8F:85:14:45:DB:61
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:26:91:75:c0:2e:88:54:6e:b3:bf:04:8b:bc:a9:ef:2c:33:
8d:d5:3d:db:1c:fb:dc:2a:5f:18:7a:bd:10:45:07:d7:64:d2:
05:eb:a0:59:37:5b:5a:7d:88:67:6e:32:19:78:5b:d1:51:ca:
bb:58:4e:6d:c4:45:ef:50:c1:10:14:ff:71:35:ca:1b:aa:2d:
fa:73:e8:4f:7a:c4:5b:76:76:c5:e4:5d:d5:80:0c:9f:83:b6:
fd:00:8f:57:17:38:46:23:67:d1:39:d6:e1:31:8b:12:7d:da:
f5:13:23:a9:9f:1f:d9:3e:0a:0a:c1:08:e3:54:7e:5e:5f:4f:
27:77:c4:cc:fd:bd:c2:12:3e:6a:89:38:40:4c:9c:6e:0d:0d:
85:ad:09:f4:7e:46:ad:4c:46:41:92:70:c9:f1:cf:99:ee:fe:
14:f7:1a:60:56:35:a3:81:80:42:00:83:55:5e:fe:b1:ee:0a:
7c:2e:71:c6:bf:a0:3b:f9:55:cc:e2:61:8c:18:e8:fb:9b:a9:
c7:56:ba:84:ca:77:5e:8c:79:4c:58:15:8c:81:f6:27:de:22:
d1:7e:93:f2:64:00:4f:21:df:d9:e8:fc:ec:19:f4:b1:fa:4c:
67:22:cb:a9:1d:00:80:43:c3:ab:b6:70:a2:10:a9:22:06:ab:
27:e2:f5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:55:25 2025 by rpki-client