Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier: 7/gdKXqz4M1OAkxXcMqISMCUblnG9AkcIx7wP9rNRNY=
Subject key identifier: ED:9D:7D:14:D4:52:60:9E:A4:7F:9E:6E:0F:91:E1:79:B3:D1:23:3D
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 0196760C43C7481F754D1C96EE7962DED207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number: 08FC
Signing time: Sun 27 Apr 2025 07:00:37 +0000
Manifest this update: Sun 27 Apr 2025 07:00:37 +0000
Manifest next update: Mon 28 Apr 2025 07:00:37 +0000
Files and hashes: 1: 7XdSGfevcJJsevy7fOceWvja7nc.roa (hash: 738FMMf7Atyvq/JMYg2GIhaCbgWHQKUbxrDxkyANCA8=)
2: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: v5EdMzY00O2Etg2ha17dteTjzBRxMOnm3wElL2Vqxd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:43:c7:48:1f:75:4d:1c:96:ee:79:62:de:d2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: Apr 27 07:00:37 2025 GMT
Not After : Apr 28 07:00:37 2025 GMT
Subject: CN=ed9d7d14d452609ea47f9e6e0f91e179b3d1233d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:d6:4f:68:f4:c4:fd:99:5a:65:c7:42:5a:
33:01:e6:08:fa:84:6d:51:1f:d3:09:9b:a1:5a:f9:
b2:63:38:b0:e3:ef:54:c9:69:38:de:71:47:23:95:
5d:13:e5:05:7b:f4:d1:bf:39:71:1a:2f:a4:69:f4:
0f:6a:64:05:8b:69:28:e4:fe:94:9e:36:15:3c:dd:
5c:4c:07:41:df:90:93:d0:62:db:5d:a3:48:0d:eb:
93:b3:e2:15:8e:1d:2d:01:0b:57:60:53:24:95:14:
18:c3:86:c2:6d:d2:1c:4a:67:89:c0:25:b3:56:54:
84:f6:54:cd:1f:39:c1:d9:eb:b1:f6:90:a4:53:5e:
44:b6:ef:8a:b1:3b:ff:26:68:9c:f2:c8:2b:c3:39:
46:a0:1c:2a:e4:d6:1f:ed:fd:37:4e:54:5e:61:9e:
07:30:a3:52:99:cc:0f:43:5e:ca:b2:d1:0f:40:6e:
a7:e2:5d:e5:2a:10:48:cf:c6:d6:76:87:70:db:bc:
9f:df:46:e4:38:e0:f0:42:5b:f4:03:3f:0c:2b:4a:
90:2f:af:58:ae:59:8e:ed:da:74:73:df:58:5e:de:
85:e6:93:3f:58:50:44:6b:0b:5a:87:32:6e:ab:de:
06:c3:d3:43:b4:32:b7:cf:f2:4a:bb:1e:85:ee:74:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:7D:14:D4:52:60:9E:A4:7F:9E:6E:0F:91:E1:79:B3:D1:23:3D
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ee:b2:4d:2c:71:92:bf:5f:b2:f3:5b:cb:c1:76:04:df:1e:
38:a0:3c:fe:50:4e:d0:38:97:1a:20:c6:ac:91:ca:e9:eb:63:
31:9a:ee:f0:ba:ef:0c:c6:90:18:1e:c3:d2:62:14:50:b6:bd:
73:b5:56:99:dc:0e:c6:30:fd:d2:4f:84:ab:77:fa:88:f4:0b:
75:46:72:62:9d:3a:22:e6:6e:8b:61:2b:b0:09:53:12:98:0d:
8e:25:22:78:47:d8:ee:bc:43:18:a7:53:64:44:ca:ad:6f:a3:
a5:88:fe:42:b1:08:a9:85:20:d9:aa:84:cd:0a:a0:a1:ae:43:
46:4f:c0:78:96:31:1c:58:cb:87:19:7a:de:67:40:05:b1:78:
fc:cf:53:a4:07:51:e5:bb:f7:ea:5a:e8:78:f1:2c:cb:ee:bd:
e5:20:4e:58:f6:4b:2d:7a:2d:94:d3:72:db:b0:86:0f:ef:4b:
74:60:05:9d:55:6f:c1:e9:29:9b:ae:d1:d5:d4:43:89:01:42:
dc:15:52:58:3d:2e:6a:01:be:14:63:88:4d:ef:be:be:b1:27:
32:30:8b:29:64:6c:16:81:bf:34:cb:2c:08:6a:42:80:16:d9:
82:f7:74:52:10:11:da:f4:33:54:80:2b:d0:35:ba:56:09:91:
3a:d7:ee:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:12:20 2025 by rpki-client