Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
File: DsodW91QNE_174hKZg6C66g7wNs.mft (raw, json)
Hash identifier: ARagvcw9ZzSPVs50uBDy4mCRKh9kskqLFkgc7QKGdAk=
Subject key identifier: 34:9B:15:3E:85:6F:F9:FA:70:88:F8:BA:EF:10:AB:CE:07:EF:89:FC
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Certificate issuer: /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial: 01967D8EA66E87A9470C51E24C6EB166D7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 18:00:22 +0000
Manifest this update: Mon 28 Apr 2025 18:00:22 +0000
Manifest next update: Tue 29 Apr 2025 18:00:22 +0000
Files and hashes: 1: 4PWYJzFLE2aK2EnppYvU-q2XFOY.roa (hash: f33gLiliUjw9+UyIBB1FbTny80dDA5WlmPfCkJepk4k=)
2: DsodW91QNE_174hKZg6C66g7wNs.crl (hash: 6vlNL0KGXRQkMh2qK6V3tNDkXqnXOwpBBKO8uHf6m9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:a6:6e:87:a9:47:0c:51:e2:4c:6e:b1:66:d7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Validity
Not Before: Apr 28 18:00:22 2025 GMT
Not After : Apr 29 18:00:22 2025 GMT
Subject: CN=349b153e856ff9fa7088f8baef10abce07ef89fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:c3:49:07:66:c7:83:ee:e6:b3:13:03:85:
49:9b:e3:b9:f8:db:2f:56:40:48:b9:f6:23:56:3e:
62:7a:4c:28:79:7b:99:88:c1:89:d0:b4:00:78:f1:
70:70:d6:22:e0:48:0d:42:da:a5:23:81:63:18:6e:
c8:52:24:76:72:d3:2d:83:74:53:df:f6:98:e2:a0:
d8:99:b8:b7:c5:93:1a:31:d9:15:bc:8a:8c:a2:81:
bc:1e:e5:79:c6:6f:8f:eb:fb:e3:92:85:ad:f3:13:
f1:f9:d4:a9:81:9c:4b:e0:88:0c:24:80:78:8e:a7:
17:7d:fc:17:83:c5:86:ab:c9:0b:a0:5f:10:1d:23:
12:dc:d1:38:bc:b0:60:1a:30:20:7e:07:70:ba:ba:
e3:61:87:d7:a0:8d:b5:26:96:c4:dd:7b:8c:c5:ad:
ea:a0:1f:88:df:78:2e:fe:2a:31:bd:91:f2:46:07:
dc:07:1d:de:d4:2b:32:38:bc:fb:a5:1b:25:3e:8c:
b3:70:8e:bc:c3:20:5f:91:e2:f0:20:7c:90:72:f0:
a9:a6:aa:d3:59:ce:ff:fe:f0:1c:63:cb:c8:68:03:
8f:57:77:2a:31:20:57:f6:fc:e6:29:bc:ec:a5:9e:
54:6f:3c:a6:64:67:3a:43:b1:8a:14:f5:ae:e3:83:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9B:15:3E:85:6F:F9:FA:70:88:F8:BA:EF:10:AB:CE:07:EF:89:FC
X509v3 Authority Key Identifier:
keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b0:3e:c7:e3:e4:77:44:8d:80:8a:86:11:bd:c2:d8:33:80:
b6:41:aa:92:af:d4:db:ef:6d:71:13:c5:ac:7c:da:60:8d:db:
01:f1:f8:bf:85:5f:e2:71:0f:bf:4f:1c:45:70:25:0e:47:16:
d9:a7:b1:4a:1f:1c:cc:04:63:23:bd:3c:b0:e2:db:98:58:b8:
41:23:af:e9:4e:e7:64:ac:6b:81:f6:dc:06:fe:a8:dd:8a:53:
dc:d7:7e:a2:b2:d9:a0:4c:4c:62:ad:1c:ce:18:51:e1:18:27:
8d:a1:c5:73:cf:81:20:12:56:e4:c5:3d:a3:cd:ed:a3:21:72:
85:61:69:6f:68:d6:63:99:50:4f:05:02:d8:8d:09:73:7a:ab:
fe:52:95:ec:30:d6:2c:a0:aa:dc:d1:b4:90:9a:bf:37:05:eb:
f9:2b:14:68:af:1a:02:92:22:8d:82:41:f1:7e:78:ea:54:18:
8b:7c:2c:8f:bd:aa:a2:4b:d3:72:d0:e5:4d:e5:1b:dc:c8:d3:
85:25:6d:b7:4c:78:c9:44:15:0f:77:90:b9:b8:eb:61:a3:9c:
01:44:b4:79:f8:c8:2c:ac:70:81:f4:48:21:f4:32:e0:ea:f5:
fe:4e:97:ff:4f:7a:51:6a:57:a2:9a:d6:8a:b6:e5:66:b0:8a:
5b:47:ba:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:33:37 2025 by rpki-client