Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
File: DTIXImHJUJ5XNSE3ugGSqEhrb90.mft (raw, json)
Hash identifier: CzbPCxTolphgBd0scGJ7KvwL4z7xv4nZrK4rEnLEGOc=
Subject key identifier: F9:06:EA:A7:CD:8C:87:8B:01:24:1B:E6:F7:9E:71:4E:AA:E6:AF:11
Authority key identifier: 0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
Certificate issuer: /CN=0d32172261c9509e57352137ba0192a8486b6fdd
Certificate serial: 01967679FA1B9B8A46E33ACFF9FF963F7EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
Manifest number: 05F8
Signing time: Sun 27 Apr 2025 09:00:27 +0000
Manifest this update: Sun 27 Apr 2025 09:00:27 +0000
Manifest next update: Mon 28 Apr 2025 09:00:27 +0000
Files and hashes: 1: DTIXImHJUJ5XNSE3ugGSqEhrb90.crl (hash: gYO0lXjo89yuEeulwGuWPkj1hUH2X3wRqmy3XahAbQQ=)
2: fjriIHG0K5ESLdXlGMzPccy1eWc.roa (hash: 8Yi5eFrLfWuilXieuc7JFFDe1Ore62ncPRyz11+p5yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:fa:1b:9b:8a:46:e3:3a:cf:f9:ff:96:3f:7e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d32172261c9509e57352137ba0192a8486b6fdd
Validity
Not Before: Apr 27 09:00:27 2025 GMT
Not After : Apr 28 09:00:27 2025 GMT
Subject: CN=f906eaa7cd8c878b01241be6f79e714eaae6af11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e0:51:e5:71:40:cb:fe:3d:e0:14:7b:7c:b6:
ce:80:da:cd:23:7d:22:31:06:c1:08:ea:5b:d5:3b:
06:e9:e1:1c:b1:68:e9:9a:21:a4:12:71:d4:82:b2:
99:95:31:0a:fb:82:3e:93:ac:71:d2:76:63:0b:33:
cc:dc:c2:d5:6c:a8:54:02:0b:b5:4d:9a:59:f3:04:
dc:ec:05:95:17:66:97:4c:5c:a4:07:2c:50:01:69:
c0:65:83:88:86:70:bb:19:ac:5a:04:e4:cb:69:fd:
41:10:dd:2e:de:8c:46:a9:14:78:e0:4b:f8:ad:f1:
d8:be:49:b4:85:6c:38:53:4a:a1:56:78:a6:a7:50:
7f:65:26:25:a7:0c:e4:7f:e7:84:9e:01:c8:94:f7:
b1:b6:1b:c8:2f:d4:cf:0f:00:d7:b7:62:f1:20:f5:
b6:32:56:37:75:07:ab:5b:ad:3f:52:44:b4:69:09:
cd:c5:1e:d6:a3:36:43:9d:18:ff:4c:69:e6:6a:7c:
f5:45:71:9f:2b:a2:fb:c2:0f:13:5b:04:e7:4a:d0:
80:06:c8:1b:ef:a6:3b:39:f9:bd:39:c8:63:47:47:
60:6c:64:c7:b5:6a:92:90:98:e8:0f:1c:6c:3d:07:
4d:bd:ca:90:57:ab:d3:d6:11:08:91:f1:7c:f9:d0:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:06:EA:A7:CD:8C:87:8B:01:24:1B:E6:F7:9E:71:4E:AA:E6:AF:11
X509v3 Authority Key Identifier:
keyid:0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:dd:5d:da:88:3d:d9:f1:ea:49:85:49:94:e7:67:20:15:d9:
55:2d:03:cb:ec:f1:be:a2:4b:3b:ac:e5:9b:09:3c:33:2d:c8:
1e:72:a2:e0:f3:c9:83:1a:11:a5:40:79:90:81:e8:d7:15:fc:
61:02:2f:17:77:29:33:a5:5b:6a:8d:8b:92:12:1b:fa:7c:17:
19:35:87:76:9d:c7:4b:ff:6a:a9:db:55:e8:b1:cb:af:78:4b:
94:5c:7c:44:34:74:94:76:d1:f6:4d:e5:99:6c:38:40:f3:0c:
51:9e:9d:f5:e7:7f:73:7c:e3:77:a4:12:bb:cd:28:32:35:80:
5b:31:3b:b6:70:13:fe:4c:08:10:87:ae:0d:a9:17:fb:2b:42:
39:eb:80:38:48:91:3a:d5:fe:d9:f9:5f:35:4d:2b:6f:ca:28:
de:dd:ab:12:14:dc:b7:9a:ce:c5:23:16:73:0c:dd:b1:f4:c8:
67:79:7e:3d:6b:3c:05:23:26:f0:60:8e:34:dd:72:a3:fd:d6:
25:41:17:12:7f:10:83:6f:3f:0d:ff:cc:d8:1e:10:c7:c3:19:
fb:5a:f3:f0:c7:e2:6e:17:b3:10:07:a2:6e:76:51:9e:15:0c:
73:3c:cf:14:00:a8:7b:5f:e0:69:37:e2:37:9f:08:9e:8d:02:
17:9b:88:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:34:48 2025 by rpki-client