Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
File: DigqFcGl0VS72ocrNXYHqR-VCqU.mft (raw, json)
Hash identifier: XnxKzsxp88/T2hn10QOemA+o+A6Tn3QV51ozptXeedo=
Subject key identifier: ED:CB:43:50:22:B2:45:8F:A4:80:BA:CC:18:C6:8F:FC:71:87:9E:43
Authority key identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
Certificate issuer: /CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Certificate serial: 01967D214ADB2FFBD965F5C9D16CCB807C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
Manifest number: 1139
Signing time: Mon 28 Apr 2025 16:00:55 +0000
Manifest this update: Mon 28 Apr 2025 16:00:55 +0000
Manifest next update: Tue 29 Apr 2025 16:00:55 +0000
Files and hashes: 1: DigqFcGl0VS72ocrNXYHqR-VCqU.crl (hash: 7fAMsheISH3JkIQGFjTdqzXLfcL9bdFjnHdXz5ufsfk=)
2: to47JCc_e9Qrrg2tVbeiwG63wsQ.roa (hash: tHKJZVV0X66uh963WSmhjzD4IRWkIMFnLIgcHV2NkJM=)
3: u3O0A5kbS_BKPuygQ5bEuCuWEmM.roa (hash: EFUICxjgOr4/W3Yre79DXYxTO7h614siVS4H6ARHwaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:4a:db:2f:fb:d9:65:f5:c9:d1:6c:cb:80:7c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Validity
Not Before: Apr 28 16:00:55 2025 GMT
Not After : Apr 29 16:00:55 2025 GMT
Subject: CN=edcb435022b2458fa480bacc18c68ffc71879e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:ea:80:f7:14:5f:3b:45:31:4b:18:f3:6d:
7f:53:80:0e:06:7d:c1:f7:92:95:4a:86:d5:47:cf:
23:0e:3c:97:36:0b:3f:c9:4f:b8:7b:00:38:37:48:
76:7d:b5:fe:1e:ec:69:7e:64:dd:3c:c6:1d:f0:be:
af:d7:30:f8:df:89:af:90:78:76:c9:33:c6:45:66:
fe:ac:ed:c6:44:a8:b1:ef:c7:c6:fc:15:fe:b5:04:
a4:bf:6f:93:c9:60:1d:80:4f:85:9b:a2:02:d9:ce:
f7:9d:33:d5:4c:96:73:a5:e2:6b:90:e7:7a:2f:3c:
95:7e:e7:96:5f:ac:ae:e4:de:3f:0e:29:ec:05:b0:
0c:b6:a8:33:3b:84:18:5d:43:a2:46:bd:02:d6:16:
23:1a:b9:06:69:d1:19:1b:b0:ed:cd:aa:b5:9e:7d:
27:c5:32:12:c8:49:c5:7d:8a:b1:87:8c:a8:18:4c:
12:38:db:ec:7b:47:02:bd:2a:3c:dd:d5:d1:2e:5f:
cc:2a:3c:1f:f8:96:6b:3d:3b:1d:12:46:a4:b9:44:
36:6f:2f:0f:f2:5d:9c:d4:a3:0d:e3:cd:13:05:29:
c3:df:10:ef:f2:3e:94:75:d3:f8:f0:24:7d:eb:1a:
2a:ba:6b:f2:4c:96:c7:58:4a:74:3f:c9:cc:60:bb:
96:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CB:43:50:22:B2:45:8F:A4:80:BA:CC:18:C6:8F:FC:71:87:9E:43
X509v3 Authority Key Identifier:
keyid:0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ba:c5:2d:16:37:18:74:03:fb:9a:2c:b4:e1:b2:2d:ce:1e:
27:9a:93:97:df:38:01:ac:30:b1:82:57:e9:a1:45:20:07:37:
52:41:59:54:79:be:13:d2:4e:c4:05:a8:83:bd:9d:26:ab:52:
72:02:ec:4c:76:83:ae:6c:67:90:35:e5:bb:4e:dd:dc:57:ad:
5a:0e:63:63:4c:65:38:09:55:d1:75:33:b2:39:75:71:ad:db:
0a:f3:59:dd:ac:06:0c:55:4d:86:4d:74:16:db:d3:62:77:33:
de:28:ce:a7:65:75:c3:2c:cd:2c:f9:96:2e:15:43:90:27:cf:
13:96:31:97:af:34:2a:6a:ae:9d:96:5f:85:96:19:9b:41:38:
e8:c2:d3:90:d3:eb:ec:1b:bf:b7:35:c1:5d:e4:c2:e1:24:95:
cb:fc:62:ab:b7:33:6f:53:7d:4e:6f:3e:f6:58:ed:32:81:e2:
f5:2f:4b:9f:41:0a:9a:98:b0:b0:a5:ad:3e:9a:91:bc:51:38:
54:57:1d:de:52:39:9b:02:2d:5c:b3:70:0e:6e:99:4e:3c:42:
6c:53:62:1d:79:6b:a7:aa:44:c7:f6:54:88:52:04:38:93:eb:
c7:02:46:fc:48:24:12:44:65:5b:dc:c0:65:d4:1f:d2:ac:56:
5c:cd:89:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:28:46 2025 by rpki-client