Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
File: DZ40sUlHfVXvC1lipeXgDN-1hIk.mft (raw, json)
Hash identifier: cVXcvPTUTNWz8DLlJGcTTUeZLSy9geZjNQBVl4bGOlE=
Subject key identifier: 0C:9C:4A:51:C0:6E:C3:47:51:79:21:3E:D5:50:F6:89:72:BE:BF:D8
Authority key identifier: 0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
Certificate issuer: /CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Certificate serial: 019692CD4B467C5BE4D95F28AA83DDA5B257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
Manifest number: 125A
Signing time: Fri 02 May 2025 21:00:49 +0000
Manifest this update: Fri 02 May 2025 21:00:49 +0000
Manifest next update: Sat 03 May 2025 21:00:49 +0000
Files and hashes: 1: DZ40sUlHfVXvC1lipeXgDN-1hIk.crl (hash: kVvSAmL+8A2W9nu+eDCXpVvzHOKiomYbgmW0H+pmZ5Q=)
2: WGiFR-bGPm6J5ZNuq_i5kJB6Nzw.roa (hash: 74v2TFsnggZrqZFnVMwJ7ZEDqgCLlK+dkXL3Ua1EXV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:cd:4b:46:7c:5b:e4:d9:5f:28:aa:83:dd:a5:b2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Validity
Not Before: May 2 21:00:49 2025 GMT
Not After : May 3 21:00:49 2025 GMT
Subject: CN=0c9c4a51c06ec3475179213ed550f68972bebfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:70:2a:ba:32:d3:6d:28:bd:bc:90:41:81:
96:8b:81:85:31:2f:30:fd:bc:2d:5c:fe:75:ea:ac:
8b:2c:42:b4:74:51:64:98:f1:47:d4:f9:68:57:c8:
42:d8:3e:02:5c:96:3f:b5:1f:56:ad:b4:63:7c:d3:
9b:5a:5b:28:ea:a5:09:b2:34:e5:42:f2:d0:42:59:
5f:19:2b:01:0c:cc:b7:7e:c0:30:d1:de:5e:16:f8:
f8:90:5b:ce:a7:52:83:d4:e2:8b:c0:f3:f7:29:b8:
9c:5e:86:71:5c:ef:3a:18:bd:0b:eb:5a:be:0e:f3:
6d:84:8b:17:ec:ab:1f:10:56:52:9e:fc:8a:b1:d0:
99:11:79:02:34:30:c5:46:34:14:04:4a:4c:1a:bd:
85:78:80:85:a3:5b:05:fb:e2:8e:87:50:1f:00:6a:
16:d9:8e:cc:6f:6f:00:d1:a2:f1:81:92:ee:aa:5e:
2c:4d:77:7c:60:d1:97:77:b2:bf:91:a4:92:39:18:
01:7c:ea:e2:60:1c:f4:98:bd:5e:8d:32:4e:46:80:
9b:92:91:61:67:00:66:45:be:08:64:95:07:8e:76:
c9:a5:c0:64:e1:e4:cc:d7:5c:69:fe:71:2b:a7:42:
39:73:0f:03:cd:44:a4:12:8b:4a:a2:6b:43:a0:9c:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9C:4A:51:C0:6E:C3:47:51:79:21:3E:D5:50:F6:89:72:BE:BF:D8
X509v3 Authority Key Identifier:
keyid:0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e7:99:e7:03:72:a5:66:b8:3d:db:53:94:cd:11:ae:af:2b:
63:7e:84:fd:c2:7d:de:e7:77:d8:3a:43:77:7d:b4:cb:a6:9b:
21:fa:9f:ba:16:14:1c:13:0a:af:d8:4b:e2:9c:e1:b3:7b:a5:
b4:02:d5:3a:3d:4f:4f:67:6a:3c:dd:56:21:09:ff:26:af:a6:
46:8f:08:74:5c:b4:8f:2f:3a:7f:6a:6f:8d:65:76:97:56:37:
ad:a9:5c:17:99:32:78:6f:f5:27:aa:f1:ce:cb:32:40:7e:6f:
1a:cf:d6:20:5f:db:01:d0:c6:b4:1b:b7:f0:bb:95:86:88:b0:
bc:f4:02:09:a6:21:14:1a:9d:a7:ad:98:f5:26:09:96:98:e1:
cf:b4:74:fa:78:44:52:9e:e4:06:e5:b0:0e:b5:7c:e5:ca:ed:
92:4a:5c:c8:95:ed:52:63:e8:77:31:af:ca:aa:e0:f4:29:ae:
5f:5b:74:8b:2a:94:fe:2d:a1:1e:80:12:07:44:e6:92:ef:33:
f4:e9:54:fa:ee:d0:86:08:0c:4e:86:0a:8e:69:cb:8e:e9:2f:
9d:79:1c:ee:47:19:95:76:6a:5a:aa:76:c4:b9:7e:c3:f9:ec:
11:8a:b9:dd:53:ba:7f:02:16:5d:3b:59:a0:22:eb:50:d9:3a:
e3:29:5e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:15:44 2025 by rpki-client