Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier: XqOLiJirMqZZTuiLB7I6qsl1/KGO2xPHBuXhewquGmE=
Subject key identifier: 14:9A:2D:2E:38:09:38:98:2C:97:00:0E:11:ED:8B:CB:36:0E:8F:AD
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 01968322BCED10624BA372F4B170FFB441B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number: 12DB
Signing time: Tue 29 Apr 2025 20:00:13 +0000
Manifest this update: Tue 29 Apr 2025 20:00:13 +0000
Manifest next update: Wed 30 Apr 2025 20:00:13 +0000
Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: a08rB4Bj7iyHV51Xqzht5XY2MdAvke/gVS67EkDLEDs=)
2: ka4zet-SkUrSnEvI5_4fHR-JIQI.roa (hash: EBw/ap+q2JTBNlcLQGiKoKAynchkYNGQi71a58xmflM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:bc:ed:10:62:4b:a3:72:f4:b1:70:ff:b4:41:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: Apr 29 20:00:13 2025 GMT
Not After : Apr 30 20:00:13 2025 GMT
Subject: CN=149a2d2e380938982c97000e11ed8bcb360e8fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:a3:9d:6c:22:a8:9b:54:54:6a:96:b0:e6:
7f:ad:75:aa:60:f1:cb:6e:3a:00:e3:0e:f7:59:60:
22:f8:ff:cf:39:89:ea:f1:18:6b:37:11:6d:28:f4:
1d:4e:18:73:db:3b:62:e0:4b:b1:04:2b:33:f1:2e:
ab:7c:6f:15:2e:7b:1f:2f:ed:3d:97:18:96:46:74:
cf:c2:2e:6a:83:8e:6b:8e:1b:fe:e2:6a:fa:4a:34:
89:46:d4:4a:44:44:fa:ac:64:6e:fb:af:e4:23:bf:
bb:fe:0a:5d:40:21:14:a3:97:d8:86:13:63:9a:11:
30:e3:d3:43:cc:33:10:8a:11:5b:d9:a0:99:d0:5c:
e4:17:5e:85:a7:4a:fe:7e:70:c3:61:56:05:6e:0c:
17:48:d8:a5:85:07:7e:41:36:3a:81:7d:42:5e:4d:
e0:d0:0c:e8:ee:a3:96:51:c9:01:4d:57:f3:fd:ab:
07:6b:d0:3e:d4:62:d1:93:0c:22:f9:68:79:70:73:
23:43:e4:d6:4c:bc:ae:bd:f2:03:c5:82:28:1e:5e:
97:ce:4a:aa:e9:97:15:e5:22:38:1a:7a:8f:ff:81:
46:dd:b3:3e:b1:52:40:0a:71:d2:a5:10:ad:30:50:
3f:f6:94:7e:4c:b6:32:98:bd:4a:73:df:8c:29:f2:
06:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9A:2D:2E:38:09:38:98:2C:97:00:0E:11:ED:8B:CB:36:0E:8F:AD
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e6:70:9f:94:15:c0:ff:3c:a2:fb:77:b9:29:dc:5e:e6:4f:
85:07:75:2e:b5:9c:59:57:ba:9e:ca:94:e0:6e:03:70:17:57:
23:2a:0b:c6:ba:66:f3:a9:3f:70:0c:4c:29:df:e0:75:14:1f:
bd:21:3d:50:6e:5f:95:6f:27:2d:3f:3a:9e:1f:60:6e:c4:61:
5e:4e:a8:3d:31:18:9a:cc:ab:1f:3b:10:04:0f:b3:7b:d7:ba:
68:2f:3d:93:2f:d5:aa:ef:16:11:0a:81:c7:b3:b1:e2:9f:dc:
ea:fe:7e:1c:4d:71:55:c4:13:6b:46:a6:40:75:3f:93:af:e3:
23:d8:62:c5:f0:98:80:6c:53:0b:64:17:2a:08:7b:f5:ce:49:
a2:d3:fa:c2:ca:4f:63:8f:90:d1:68:90:ca:c6:06:45:1e:cb:
d7:92:24:a7:d7:6b:61:de:05:01:01:e8:ac:14:42:f4:c1:4e:
b7:2d:cf:17:df:98:7a:7c:aa:3b:99:61:ad:d3:f1:b4:70:89:
0d:cf:fe:5d:19:1f:f4:97:cc:f9:16:f3:68:88:2d:d9:14:fa:
16:33:31:0e:d2:f5:69:bc:2c:8a:3e:c2:d6:f2:cd:96:5a:b3:
58:93:ca:9c:e9:d2:e2:84:89:5a:23:bf:40:5f:63:9d:d9:dd:
c0:c1:25:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:29:35 2025 by rpki-client