Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
File: pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft (raw, json)
Hash identifier: RmvZI8E0LsUYw/lnTz005W5ivKV7BIFvPlJ9e9EAbF0=
Subject key identifier: 02:00:28:2E:57:0E:E4:A8:68:6E:EF:FB:80:73:B4:38:AC:90:05:05
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Certificate issuer: /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial: 019680228F66251F3869E7D943EB4044D2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 06:01:10 +0000
Manifest this update: Tue 29 Apr 2025 06:01:10 +0000
Manifest next update: Wed 30 Apr 2025 06:01:10 +0000
Files and hashes: 1: 1-y3mku53CxfcZTDAjLzjGLNjKug.roa (hash: tkrqALFJZS9oKOrZg8mNnpPdOdg26RzEKwv9Z2r59k4=)
2: pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl (hash: g/8U7VoG/Qz6RMG3OVq/mIOKjDyaDDH4Ku5oQ10784o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:8f:66:25:1f:38:69:e7:d9:43:eb:40:44:d2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Validity
Not Before: Apr 29 06:01:10 2025 GMT
Not After : Apr 30 06:01:10 2025 GMT
Subject: CN=0200282e570ee4a8686eeffb8073b438ac900505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:c7:df:fd:9d:3b:f4:04:92:5c:0e:b8:07:
55:83:b4:ff:4d:f3:cb:8d:57:91:da:cd:fb:c7:96:
7a:fa:cb:88:2e:b0:f8:0e:50:b2:c0:18:47:95:82:
71:d5:6c:9d:75:02:2e:3c:2c:01:18:85:d1:49:43:
5e:7e:0a:1d:28:e3:ce:5c:af:6f:3f:5f:93:3a:95:
bb:b2:16:0f:b5:e5:8c:16:1c:6e:82:64:c5:ea:04:
8a:86:82:1e:ab:4a:fb:53:ce:f0:a5:94:13:9a:a2:
11:68:77:9d:3c:81:34:d2:8d:6e:91:44:c0:ea:dc:
1f:0a:be:dd:f7:05:f4:80:9c:f1:e7:67:e8:a6:dc:
5f:d6:ca:23:b6:6e:2a:3c:05:c8:90:ca:75:7c:6c:
c5:9f:fa:9e:44:55:35:e2:8e:e8:21:f6:7e:32:c6:
f4:a3:21:5b:01:0c:fc:a8:77:58:eb:e0:30:dc:74:
3b:c5:ab:f7:fe:39:7d:ba:25:d7:2d:44:b4:8d:35:
68:17:96:ad:ce:8b:0d:5f:b6:91:76:90:58:65:c2:
4f:bb:a8:84:40:07:b3:86:6e:59:b3:8a:c1:cc:db:
f0:72:4f:aa:24:be:40:d2:a1:a6:22:1f:3d:83:e9:
35:4c:fa:78:ba:81:d7:0e:86:df:c4:60:63:4f:c3:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:00:28:2E:57:0E:E4:A8:68:6E:EF:FB:80:73:B4:38:AC:90:05:05
X509v3 Authority Key Identifier:
keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:74:0b:0b:ea:84:f9:86:e3:01:45:d8:3f:c0:94:b6:1e:76:
83:d8:48:97:c7:6a:5c:21:4f:95:91:93:68:82:3c:b1:1a:65:
59:e4:a5:b5:49:70:0c:94:14:10:83:48:a5:2c:70:c4:cf:94:
93:7f:06:50:9f:c5:4d:f4:2e:a6:3f:81:60:99:21:b1:f9:4d:
36:0d:43:78:35:cf:42:bd:19:20:ec:e3:27:9c:17:57:61:f2:
63:52:8c:23:69:fc:6a:b4:b0:62:f5:11:16:4a:21:58:0b:76:
3a:98:c1:86:92:55:91:a7:52:72:fa:1d:cc:b9:43:9e:ea:b7:
10:a9:1a:39:5c:19:c4:3e:f8:e4:df:0d:0d:59:f4:22:85:a9:
87:23:67:c5:b9:a5:19:e3:c5:4a:9d:96:93:71:35:c5:b6:00:
a1:db:dc:e8:29:af:02:97:f6:61:ef:4b:46:6d:ab:5d:68:6c:
d6:f4:4a:bb:0f:71:39:01:f9:79:0e:2e:15:d2:03:21:63:4f:
c6:90:c0:f4:2e:87:34:ae:cb:60:77:45:1a:02:be:56:74:8b:
f9:9f:11:e0:06:4a:2c:a5:f2:78:92:e6:c6:74:eb:27:f0:85:
39:97:7c:d1:eb:42:76:e7:70:95:af:7d:17:f7:2d:1d:c5:0e:
be:c8:17:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:36:57 2025 by rpki-client