Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: USRbp7OkKiMhCctwSDqKVa4MbQRkiN8flDMPOx3vEVU=
Subject key identifier: E0:A9:12:6C:82:7E:E6:18:8C:F3:44:EF:EB:23:E6:E5:62:88:90:E1
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 019673E700F06C71EEE364A77937410A3E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 1519
Signing time: Sat 26 Apr 2025 21:00:40 +0000
Manifest this update: Sat 26 Apr 2025 21:00:40 +0000
Manifest next update: Sun 27 Apr 2025 21:00:40 +0000
Files and hashes: 1: 32CQUiCUfdquX7Jbo_dmPVa4RAU.roa (hash: FAfiLPwl0dHpiVR3Uys5QcBsWLGjmkF+BWAYhU6veIk=)
2: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: TY0duk8xTJ73IsnDLDGp6YGxbKqc009PdeWulqFb67w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e7:00:f0:6c:71:ee:e3:64:a7:79:37:41:0a:3e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Apr 26 21:00:40 2025 GMT
Not After : Apr 27 21:00:40 2025 GMT
Subject: CN=e0a9126c827ee6188cf344efeb23e6e5628890e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:ac:7b:74:f8:b0:c2:55:06:84:42:17:c6:
03:31:58:e4:87:e0:ee:fa:08:78:76:fc:67:46:4e:
a3:1a:35:94:a5:2e:5d:86:14:eb:de:9a:b5:7c:aa:
88:59:b6:50:94:64:c1:60:58:48:69:cf:59:6e:13:
a9:7f:c9:34:e3:56:71:2a:87:3b:2b:a7:05:5f:ae:
c8:e8:a1:9d:09:f8:e6:10:10:d3:4f:1b:ea:e7:6a:
68:d4:39:05:2a:be:2a:d3:78:dd:57:d0:a9:95:88:
82:a1:31:8e:3b:5e:f3:7b:b1:4e:8a:fc:e7:48:cc:
75:51:35:20:83:ab:f0:cd:88:07:e4:ef:3d:17:26:
55:39:f1:df:85:f1:85:19:18:7a:0c:e7:31:fa:30:
75:6b:3f:df:00:09:f9:cf:06:65:25:49:62:1a:66:
c1:09:70:19:c3:9f:7d:8c:2c:83:a7:dd:18:db:ef:
c3:18:45:83:7b:d7:42:6f:75:75:f3:53:b4:67:e7:
c3:94:8f:ec:94:6e:1d:d8:8f:02:45:e0:0b:67:c3:
1d:67:61:84:0c:23:20:45:99:54:28:70:af:34:e7:
7f:4d:8b:ff:74:75:6e:a3:d6:ad:23:bd:b9:34:12:
97:61:ce:9a:25:40:8a:2c:60:5c:31:76:a2:5a:6f:
ce:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A9:12:6C:82:7E:E6:18:8C:F3:44:EF:EB:23:E6:E5:62:88:90:E1
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9a:82:a3:56:8a:7b:0f:ef:49:07:69:94:93:c6:ef:76:2b:
54:08:ab:20:b6:82:4b:de:31:f4:78:1f:77:ef:b0:71:a5:c5:
22:9c:4b:f0:07:78:e1:be:da:80:ca:c3:0d:0d:e6:af:43:86:
5b:be:cf:5b:0d:ae:60:02:eb:0e:2d:fb:3e:86:89:8e:39:8c:
73:b2:f5:f4:4e:13:01:53:08:62:d2:bd:1b:e9:af:af:d3:9e:
e7:b4:3b:1f:38:03:7f:cc:98:e7:b6:01:58:26:06:d9:7a:24:
02:67:8e:80:1f:58:e8:63:ed:aa:c8:39:d7:85:80:6d:fd:32:
2b:7c:29:cc:86:fc:ea:65:d9:62:c0:4f:a6:a9:79:15:c9:28:
9f:a4:f9:3d:67:95:0d:1f:97:89:15:71:b1:db:05:69:e3:81:
a8:ca:b3:93:61:c8:c1:65:c3:4b:db:5e:78:e1:5c:9d:72:8d:
03:59:84:3a:49:63:8b:86:dd:1d:00:40:e2:e0:5d:76:16:0c:
7e:2e:54:7e:e5:68:e7:a0:27:b3:5b:35:de:99:e0:63:49:73:
3e:17:98:3a:b2:e7:9f:24:54:db:8c:54:e3:79:e5:1c:88:c2:
1d:d8:35:6b:34:cd:7a:95:96:61:27:3f:94:3a:d9:82:1f:f5:
57:68:31:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:52 2025 by rpki-client