Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
File: djizYCRf5EsXV6ael3oV4H-q9ps.mft (raw, json)
Hash identifier: VxzN9RWh6nF3+EEXM2IyUyhh7t+ySwLmoszt+Hucm4A=
Subject key identifier: D0:FA:92:70:B3:47:FC:DE:52:4B:43:AC:69:1C:51:22:08:31:89:8F
Authority key identifier: 76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B
Certificate issuer: /CN=7638b360245fe44b1757a69e977a15e07faaf69b
Certificate serial: 019678D6BA13AEDF9C80B4ADB5E0E40409A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
Manifest number: 6B
Signing time: Sun 27 Apr 2025 20:01:00 +0000
Manifest this update: Sun 27 Apr 2025 20:01:00 +0000
Manifest next update: Mon 28 Apr 2025 20:01:00 +0000
Files and hashes: 1: djizYCRf5EsXV6ael3oV4H-q9ps.crl (hash: 8H+7p9vMyuMIy5UANCiiBljQG+RgvLkuLzYePuCMi1M=)
2: gSGKFe1pn3_5E4Q7YRW3hV9F-dg.roa (hash: Gfi8XtFBl7a2jBdHmK+GtPDHztaG0pAxvqWau8U6T/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:ba:13:ae:df:9c:80:b4:ad:b5:e0:e4:04:09:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7638b360245fe44b1757a69e977a15e07faaf69b
Validity
Not Before: Apr 27 20:01:00 2025 GMT
Not After : Apr 28 20:01:00 2025 GMT
Subject: CN=d0fa9270b347fcde524b43ac691c51220831898f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:21:8a:6b:b1:fc:cd:88:58:20:d8:da:da:1d:
8c:be:71:a1:d7:50:ab:27:90:c2:5c:d4:92:e3:97:
91:f0:06:e7:9a:1c:fd:63:07:9b:dd:63:d5:cb:53:
ab:b8:8a:b8:41:44:17:fa:58:5a:d2:73:f2:e3:d0:
53:a7:ae:4e:fb:d0:0e:ca:ad:09:fc:a3:cb:4c:08:
07:ff:7b:d9:2d:fe:c9:89:85:09:a2:c7:72:94:a6:
d8:84:4d:a7:01:63:e5:c8:07:ea:6e:7f:11:c7:78:
37:22:68:c8:e2:f5:b6:72:49:75:fd:9f:47:7c:08:
d7:b2:c8:9f:df:39:dc:6c:c0:03:cd:8d:22:da:c7:
37:a1:be:b2:00:d2:42:24:03:ba:aa:77:53:8e:f0:
27:0f:18:e1:d3:a6:db:e9:96:eb:1c:90:50:85:87:
95:52:bb:0e:86:4f:e1:ca:d8:6d:56:1f:6d:e4:cf:
a8:43:fe:48:7c:5d:bd:7b:65:30:4b:ad:8f:91:1c:
23:f1:70:46:8f:49:c9:27:9d:f1:65:83:d4:cb:13:
57:39:f3:2b:97:86:9b:07:ba:9c:b1:82:e1:03:0d:
74:2e:66:16:98:63:bd:dd:3a:e3:23:bd:ba:c2:e2:
bf:e2:34:95:c9:87:80:db:2e:c8:d7:04:e6:9b:98:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FA:92:70:B3:47:FC:DE:52:4B:43:AC:69:1C:51:22:08:31:89:8F
X509v3 Authority Key Identifier:
keyid:76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:da:f4:67:ab:b6:a9:9f:69:5c:e5:72:3c:1e:88:0d:dd:65:
bc:41:ae:c6:42:84:e3:ac:df:49:c4:ae:06:86:71:56:2b:aa:
13:28:6d:b4:50:ce:32:91:16:fa:4d:76:fb:03:f2:1c:dd:42:
37:ed:41:9f:65:1f:fe:b4:d3:e6:0d:e8:9e:1b:4c:15:6e:36:
67:d8:2b:47:61:fe:e1:6d:a3:4a:e5:54:44:61:c4:1a:75:c8:
fe:e6:e6:62:0f:17:61:d1:03:e9:11:de:c3:c2:b2:fb:d3:81:
f3:3f:1f:dd:02:aa:10:0d:0e:90:11:15:6a:1c:df:eb:85:39:
3d:74:0a:62:99:a7:5c:2e:d0:30:42:d4:77:cd:ef:22:70:ea:
a3:af:59:88:8a:1d:c0:1e:95:13:be:02:67:0a:d2:e0:f9:70:
5c:7a:89:5f:c5:ee:a9:20:7c:5f:b7:66:4d:ec:d6:fe:ec:2e:
d9:6a:ee:dd:87:bf:48:02:88:c0:9f:49:ea:3d:e6:64:be:d4:
de:9b:1c:d7:40:a7:0f:f4:00:68:47:fd:5f:6f:86:1e:40:a4:
94:dc:7b:2e:ae:bc:35:20:47:cb:01:80:55:e8:15:a0:9c:c7:
1c:4a:69:36:b5:bb:d7:30:c7:11:d1:35:92:4e:15:9b:2b:cc:
ae:41:99:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:56:44 2025 by rpki-client