Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
File: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft (raw, json)
Hash identifier: 6iacbuv81W6lTZ0Iybgs925QKrPOKPUmvJUqIDe/M1E=
Subject key identifier: 4E:C3:CD:EA:86:1A:20:AB:6B:39:39:61:49:09:48:D4:48:5C:90:5E
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial: 01967B32B83F1C34DEB2EFB10F181B4DB396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 07:00:43 +0000
Manifest this update: Mon 28 Apr 2025 07:00:43 +0000
Manifest next update: Tue 29 Apr 2025 07:00:43 +0000
Files and hashes: 1: 1-y1Ne5UH69xAclnQXN8UNFZ6fbA.roa (hash: DMlPQL5W5NIfofMivrzJcYQP+Q8OdiiG+2ZjJ0SbGWs=)
2: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl (hash: MMKxv0vU0QbFxc7QPb9+OJERKpbQmdgo9JWgfMgL5DM=)
3: gP1adqpN3jFkt9OdAVoyA-6IhBE.roa (hash: LIhJSQT5pr5zAf/JFHVd3amDAMZCN7LCkj2NZQ4RFrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:b8:3f:1c:34:de:b2:ef:b1:0f:18:1b:4d:b3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Validity
Not Before: Apr 28 07:00:43 2025 GMT
Not After : Apr 29 07:00:43 2025 GMT
Subject: CN=4ec3cdea861a20ab6b393961490948d4485c905e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:9c:aa:a7:fa:23:97:27:75:b7:62:22:cb:
e1:02:36:ba:3b:73:02:6f:cf:ee:fb:0a:33:0c:29:
18:6d:0a:e3:ef:84:b1:9d:bf:44:91:8c:54:f7:f3:
39:43:3f:7a:0d:3e:aa:7c:97:0b:98:ad:70:6d:79:
60:16:73:8c:b2:98:d9:0d:86:78:ce:c6:b1:5a:6f:
b2:ef:4d:0d:e8:35:42:9b:9f:44:bf:d6:3e:b8:64:
94:85:8c:be:64:26:78:30:ba:a2:7d:2c:91:17:24:
f1:86:e3:69:6e:fa:1f:4a:dc:a8:9d:b7:02:f1:4a:
c2:cd:56:cd:6b:62:de:cb:ed:2f:53:a5:be:5f:ee:
fe:b9:cb:47:3f:c9:67:e6:d0:7c:80:bd:88:f4:6d:
fe:cd:5f:bc:e3:47:cc:4c:de:49:2a:55:86:d2:5b:
a9:64:66:83:3e:7f:a6:74:66:58:25:f7:71:9f:a1:
5f:f0:cb:4e:c2:a6:25:17:1a:94:1c:3c:58:9a:5d:
85:eb:1b:48:5c:14:52:4e:4b:74:62:49:08:6b:e2:
e1:bc:72:3b:a4:3f:b5:44:df:94:58:13:78:55:f5:
68:42:21:98:f6:ba:63:b2:97:db:52:cf:14:fb:a4:
60:9b:6c:2e:07:af:87:56:ee:77:3d:ee:59:7f:ad:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C3:CD:EA:86:1A:20:AB:6B:39:39:61:49:09:48:D4:48:5C:90:5E
X509v3 Authority Key Identifier:
keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:7f:70:df:39:1d:bf:87:c4:d8:2a:b7:e9:61:91:92:d3:56:
99:a2:02:2d:83:74:9f:ba:54:96:6d:f2:0b:5e:73:c8:92:c1:
05:30:4b:52:33:d3:cf:b0:8c:8c:1e:76:08:a0:62:02:57:a5:
1f:8d:46:05:f8:73:e2:de:f4:96:75:e4:0c:8f:bb:9c:b3:4b:
4a:ca:4f:6b:9f:f5:97:00:7b:67:f0:ce:dd:b1:c1:cc:c5:5e:
b4:ba:90:fc:17:ae:44:c4:e2:5c:bb:48:4f:fe:71:9c:96:dd:
1a:0a:98:f6:15:c9:bd:41:73:67:2b:2b:59:16:6b:35:57:63:
6c:3c:db:b6:01:6d:ce:02:f8:a8:70:d1:31:cb:a7:28:aa:a1:
ad:14:58:c8:9e:56:a3:bc:19:c0:28:ad:cd:65:bc:5f:47:1b:
6c:b3:f5:ae:ad:99:71:fd:b4:9b:7b:70:64:d0:bd:12:e1:06:
b2:af:fe:a1:86:86:ca:28:e5:1c:34:b4:0f:52:7b:52:2c:8a:
68:c0:a4:b6:52:a9:9a:20:da:e9:10:53:f4:df:3d:5c:0d:4b:
0c:12:d5:68:07:96:ba:d0:17:c7:59:97:a9:e0:6d:ca:77:82:
32:70:0b:7b:83:a0:d5:cf:ef:f4:63:2e:b4:03:72:e5:78:9c:
b7:7b:04:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:32:17 2025 by rpki-client