Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
File: DUHQpubfLhjCVnMjaNbnaCiTExA.mft (raw, json)
Hash identifier: HmPWNLPQhAre9nmiM5qBEHaiqbnXOiILmT7Xv4cBDAY=
Subject key identifier: 58:E5:B0:DB:44:C8:2D:78:FD:F8:99:E1:9A:A2:FF:D7:9D:78:9D:4D
Authority key identifier: 0D:41:D0:A6:E6:DF:2E:18:C2:56:73:23:68:D6:E7:68:28:93:13:10
Certificate issuer: /CN=0d41d0a6e6df2e18c256732368d6e76828931310
Certificate serial: 0196760BF89E0A97D77D8B2ABD2C5008272B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
Manifest number: 0E56
Signing time: Sun 27 Apr 2025 07:00:18 +0000
Manifest this update: Sun 27 Apr 2025 07:00:18 +0000
Manifest next update: Mon 28 Apr 2025 07:00:18 +0000
Files and hashes: 1: 5yn4zHauZM75VAijpeMoQrgxCO4.roa (hash: XNQWDr0wgLOmyX40wHgFFl4XUTUYTIzKWa/lVOSFR8o=)
2: DUHQpubfLhjCVnMjaNbnaCiTExA.crl (hash: UU+Y16tZzXVfEexZGHbNpttoCsC74efvCIj1Bx1CtiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:f8:9e:0a:97:d7:7d:8b:2a:bd:2c:50:08:27:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d41d0a6e6df2e18c256732368d6e76828931310
Validity
Not Before: Apr 27 07:00:18 2025 GMT
Not After : Apr 28 07:00:18 2025 GMT
Subject: CN=58e5b0db44c82d78fdf899e19aa2ffd79d789d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:9f:9c:d6:78:16:bb:ff:32:22:bc:cb:54:
5d:81:82:da:47:36:34:6b:69:7d:6b:b4:0b:e4:4d:
ac:12:1f:8c:6b:82:bf:59:8b:1a:47:b0:67:9f:49:
28:3f:c5:18:9a:8a:da:bf:29:3b:40:21:a0:80:a1:
f0:63:87:07:19:9a:0a:3c:bb:5a:ee:23:fa:44:59:
52:99:18:b9:af:d0:98:4a:88:13:53:7e:ab:f7:a9:
41:a3:ed:5d:86:c3:f0:8b:71:72:9b:f7:f5:31:a6:
aa:6d:a4:cc:dc:ee:93:c2:07:2e:6a:48:d3:d7:a8:
6c:57:cd:0b:39:3b:ec:20:a3:4e:8f:1e:f7:c1:2f:
33:5e:1b:a0:23:94:31:5a:42:90:b5:ac:ef:63:67:
fe:0f:69:8d:59:59:c7:16:8e:ab:86:21:23:6a:09:
31:96:25:6a:4d:cc:ef:66:dd:89:f6:85:06:29:0f:
5b:66:22:80:c0:71:09:c7:b1:f5:5f:f0:dc:b3:51:
35:d7:71:70:47:31:96:b6:24:86:33:71:33:97:ba:
63:37:7d:69:fd:de:04:55:27:0f:eb:7d:97:8d:5a:
5a:7e:b3:c5:25:fb:9d:e6:20:69:ad:a8:6c:6a:81:
8f:d8:80:4e:f7:bd:f6:3f:d0:86:f6:77:23:30:38:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E5:B0:DB:44:C8:2D:78:FD:F8:99:E1:9A:A2:FF:D7:9D:78:9D:4D
X509v3 Authority Key Identifier:
keyid:0D:41:D0:A6:E6:DF:2E:18:C2:56:73:23:68:D6:E7:68:28:93:13:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:80:25:ac:a3:49:16:60:ce:27:09:5b:a4:f4:49:89:40:45:
59:8d:33:e1:23:e1:b3:c8:a8:3d:6e:79:f0:21:3a:f5:30:36:
d1:e0:d1:39:c3:85:8d:a2:eb:a0:62:da:99:72:19:59:b4:e0:
54:b6:e5:1b:8b:00:43:73:95:30:78:fb:9d:29:57:9a:7c:b2:
3a:c5:7c:ce:d1:95:c5:b4:6b:f4:30:fd:18:f8:ae:aa:d3:ff:
7d:71:95:ff:a8:71:dc:18:8c:f5:67:98:37:29:d0:0f:24:f9:
12:ec:2e:9a:61:98:0f:c3:d3:ee:c3:d1:00:7a:1d:25:ac:bf:
0c:ad:fd:4c:d3:87:66:59:42:25:df:14:2e:e3:7e:d3:9c:6e:
ee:46:16:87:cb:1d:23:ed:53:b7:c8:9f:a1:cd:9d:83:9f:2d:
39:b8:9c:1c:09:5e:eb:78:ea:35:83:35:6f:3e:a0:3f:de:68:
9e:a3:5a:87:88:75:b6:5c:c5:4c:7c:84:4e:94:55:d5:6c:99:
1f:11:0b:20:bf:e8:82:e1:0a:ed:ab:df:d4:23:f5:ae:49:1d:
79:72:5c:db:ad:e1:89:06:76:48:1a:30:58:c4:3b:41:e0:ad:
87:68:a6:0b:7b:a9:9e:90:95:f1:99:36:4f:88:19:6b:b9:63:
20:29:b1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:44 2025 by rpki-client