Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
File: DdbvvlRnHXGlkFHimiRIzWr41Gc.mft (raw, json)
Hash identifier: 9fRuG8Sfiwibsxf0uaabCUyFZ08zv84b7NE78cJLugM=
Subject key identifier: 6A:98:FF:21:76:6E:E8:CE:43:69:EF:01:6F:12:E8:AD:82:F2:DB:C2
Authority key identifier: 0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
Certificate issuer: /CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Certificate serial: 01967755DC2F2A48B16DB83FB4FE78DBD632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 13:00:37 +0000
Manifest this update: Sun 27 Apr 2025 13:00:37 +0000
Manifest next update: Mon 28 Apr 2025 13:00:37 +0000
Files and hashes: 1: DdbvvlRnHXGlkFHimiRIzWr41Gc.crl (hash: G2XZ/0OUg2/EaNQ7+Dfqm71XDu3PknHcnZ8VMXiGs9U=)
2: OjPZ4w3uav1AVJBNGLzE1iWEjns.roa (hash: RZ3Fh/xDlYW1Zzf/BAcP7d2zU9c7pD1bl+u8+XwewFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:dc:2f:2a:48:b1:6d:b8:3f:b4:fe:78:db:d6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Validity
Not Before: Apr 27 13:00:37 2025 GMT
Not After : Apr 28 13:00:37 2025 GMT
Subject: CN=6a98ff21766ee8ce4369ef016f12e8ad82f2dbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:2c:6e:1f:2c:cd:38:63:40:ef:53:e2:5c:
ea:d0:45:7f:e6:f1:07:35:f3:e6:f1:4d:3c:05:8d:
d2:3b:b9:30:ef:71:4c:e9:54:9b:4b:68:5b:41:6a:
af:a8:0c:fd:04:8c:6a:6d:63:df:eb:43:9a:23:7c:
44:b4:94:b4:1f:4e:f4:78:1e:de:18:a5:a4:6e:e7:
bb:07:6e:9c:e2:7b:f9:11:d3:cd:f6:5e:7c:8b:b5:
6c:b3:51:5f:a8:ea:63:ca:49:c7:b7:68:60:b3:71:
e0:b0:2b:07:02:ea:19:96:5b:f3:41:b4:20:45:09:
3f:0e:58:71:11:92:cd:cf:47:eb:14:db:ad:5f:fa:
f3:93:29:7b:22:a3:5b:f6:96:7d:e7:25:9a:55:9f:
60:f5:1e:e0:8d:70:b0:88:3f:85:ef:e1:ec:e1:ae:
81:d3:4a:ac:fc:b9:1a:dc:b0:df:16:4b:ab:aa:58:
71:18:82:c1:cd:9d:c0:96:40:d0:f6:69:cd:8a:63:
01:47:58:f2:a6:65:6c:6c:8c:ec:f9:2f:98:ba:0f:
9a:c6:08:91:3f:f9:72:c9:bf:c0:3d:62:cd:e8:8c:
b6:fc:24:9e:e1:39:8a:06:95:c6:79:09:11:da:c1:
f2:44:55:5b:c8:db:cc:66:99:8a:fc:69:c3:fa:33:
21:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:98:FF:21:76:6E:E8:CE:43:69:EF:01:6F:12:E8:AD:82:F2:DB:C2
X509v3 Authority Key Identifier:
keyid:0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:88:25:b1:0d:18:bb:1d:90:e6:2f:c0:67:c0:8d:68:9b:ac:
66:79:7f:85:fd:38:4b:1a:78:69:26:6a:b7:bb:6a:9e:2a:0a:
13:83:f9:7b:10:78:28:0e:f0:47:62:49:fb:d6:0d:f5:73:dd:
b2:48:ee:85:86:b8:0b:a2:5c:b6:f8:fb:81:50:13:a2:ef:f0:
1e:08:9b:dc:27:19:bb:25:0d:2f:1b:30:19:41:42:11:12:22:
03:31:1b:20:ca:82:99:21:63:bd:29:07:f7:2b:e0:98:04:a0:
3e:d6:77:ad:a4:82:16:2f:93:27:9d:98:c2:50:77:ca:5a:0b:
8b:25:f8:3a:7c:bf:67:52:e6:db:b7:fb:cd:d2:ac:e7:57:de:
d9:96:d6:55:19:5e:f1:f3:9c:15:2e:58:a6:a4:87:1a:1d:94:
3a:77:ff:1c:00:36:6b:25:c8:88:1f:8d:88:b4:5c:75:40:fc:
51:e7:46:f2:99:17:f4:5d:4c:5e:b5:97:9f:be:01:3b:8b:0c:
6e:b9:4b:4b:cb:43:c1:75:4a:af:ba:d8:ba:df:ec:79:fd:35:
45:b0:d2:43:e9:bb:26:44:e5:fd:97:a8:92:dc:77:16:08:72:
a1:c2:c1:89:3e:dd:f5:b1:d1:4a:f9:17:b3:62:b0:dc:3c:f7:
d4:4b:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:54:23 2025 by rpki-client