Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier: VWZ1Tef/1KIkBW+c8J8OIriHCYnkZ+SacUPVVA6KUN4=
Subject key identifier: 18:FB:30:7A:DE:DE:E9:09:52:38:B2:22:C4:57:F8:34:72:E4:E6:B9
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 019673E68CEE88817F93A8E9E9DD6E3F52D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number: 0C3F
Signing time: Sat 26 Apr 2025 21:00:11 +0000
Manifest this update: Sat 26 Apr 2025 21:00:11 +0000
Manifest next update: Sun 27 Apr 2025 21:00:11 +0000
Files and hashes: 1: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: vL+em+x/oCfECYpyj9Gdxxd6obguj1lX6DCk/bSJfds=)
2: MNtx-M1QVv5z_3qcN6vxhaOotfc.roa (hash: px53xNqq/MugnV+199J7ZDHhE5FdBcLFsMKgKSEziic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:8c:ee:88:81:7f:93:a8:e9:e9:dd:6e:3f:52:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: Apr 26 21:00:11 2025 GMT
Not After : Apr 27 21:00:11 2025 GMT
Subject: CN=18fb307adedee9095238b222c457f83472e4e6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:1a:63:ae:3e:12:af:28:b5:93:f5:07:10:
e7:06:25:0a:bb:ea:e1:fd:87:33:c2:81:88:3e:a8:
94:49:aa:03:61:3c:3f:e7:a4:5a:b4:1a:ec:66:67:
e1:c4:49:88:58:90:d0:34:c3:b2:74:01:72:92:9f:
26:20:15:9b:38:c3:13:16:a1:d6:4b:06:ec:d4:c8:
96:06:b4:e6:ba:f8:8b:83:57:5f:bd:4e:d1:30:5c:
67:bb:dd:8a:fe:b4:02:3c:72:3d:52:d8:6e:0f:b3:
90:8a:f0:90:0a:11:9e:01:94:53:c5:54:b8:0d:07:
a7:96:f1:75:42:22:bd:d3:ee:e2:08:0a:30:b6:e7:
0e:f4:38:6c:d7:c4:bf:b9:c8:42:d2:ed:40:b1:d9:
5c:b1:e9:11:5b:87:4b:52:a4:0a:b7:65:3a:19:94:
02:96:84:a3:64:d4:3f:1c:65:9f:13:6e:6a:b4:53:
7d:a7:46:0b:6e:0c:42:38:4d:be:90:4f:c3:c1:f9:
fc:38:55:b3:5a:fb:fb:3d:df:da:fe:d1:46:42:bb:
f5:83:4a:1e:ca:16:05:00:e9:4b:43:4d:2d:4b:09:
19:e2:f0:3a:b0:1d:70:bb:9d:7b:54:df:78:b4:d3:
df:4b:4e:e5:6b:f4:ad:6c:60:a6:ca:70:fc:49:b0:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FB:30:7A:DE:DE:E9:09:52:38:B2:22:C4:57:F8:34:72:E4:E6:B9
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e4:ea:01:ac:d8:62:b8:35:5e:0b:3a:e4:ab:bc:d4:1c:10:
de:65:61:81:b9:a3:ee:18:1c:b3:bd:3c:9a:88:a3:14:15:da:
f1:2f:53:c4:62:48:a4:e7:52:ae:db:5b:9c:ec:22:e1:b5:e9:
de:1c:da:9d:51:10:35:6b:a0:66:98:dc:39:c6:16:0a:25:5b:
ef:ef:d4:d0:98:b9:fa:5b:4f:8f:d0:61:50:87:22:f6:04:38:
97:7c:7c:48:45:43:05:8d:d3:b4:1c:2d:43:75:7f:70:87:82:
5d:29:bd:fd:99:a5:1b:0c:ee:ca:7b:e5:8b:ac:eb:aa:83:a1:
b7:c4:23:9a:32:e2:66:9e:fa:5c:d3:66:b5:25:34:ff:bc:ff:
e5:31:e7:0e:d8:ff:a4:64:6a:e8:12:9b:f1:ec:0c:f7:5a:0b:
ad:d7:d5:4d:0b:80:99:18:76:d0:57:4c:6b:d4:9f:34:37:51:
f3:96:8a:58:37:01:a2:a0:dd:34:32:c8:3e:22:41:32:a2:0a:
2f:2c:53:59:27:35:7f:83:47:ad:bb:de:26:3e:bf:09:46:d2:
c8:8e:4c:ca:eb:60:6d:7e:b0:d0:56:0a:e4:bb:5b:14:b6:c5:
c1:3e:0c:54:f2:b7:83:2f:f1:72:9b:f5:09:29:14:74:7d:6c:
0a:ae:5a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:31 2025 by rpki-client