Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier: cnW91EdB51NPWRAVlGCQ8bnBKVV1bLn5OsVORQb4xFA=
Subject key identifier: 70:BC:3D:0D:DC:A1:AC:6A:B9:70:42:BC:D8:4D:EE:79:D8:AF:26:23
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial: 01967EA18A6C4D9FC16315F6A57F84FD71E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number: 032E
Signing time: Mon 28 Apr 2025 23:00:38 +0000
Manifest this update: Mon 28 Apr 2025 23:00:38 +0000
Manifest next update: Tue 29 Apr 2025 23:00:38 +0000
Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: ROq7LSN34ZlF2xo+G36FYGox6CtCXKA2P+odI2GuKAo=)
2: H09sImQpPd7oxswyyMfYCrHeDVg.roa (hash: F88ZTfKzhXNpAdlmJ7zmMSZP6dr7sViXeL2PLZiWpvA=)
3: Xy-GvzWZoQ4DZimCZXffSq7urSs.roa (hash: ueXh7ktY0jc26A3LbRVHrwaonrcTqoMtDjp0hV9hqJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:8a:6c:4d:9f:c1:63:15:f6:a5:7f:84:fd:71:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
Validity
Not Before: Apr 28 23:00:38 2025 GMT
Not After : Apr 29 23:00:38 2025 GMT
Subject: CN=70bc3d0ddca1ac6ab97042bcd84dee79d8af2623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:49:d3:33:62:1e:85:13:b7:dd:17:a5:79:
82:07:a8:30:44:91:a8:b1:c4:42:80:ad:e6:41:0b:
bd:26:6b:4d:1e:49:9c:0f:f0:00:5e:a9:d8:32:3f:
af:d5:b7:b4:ba:0c:83:36:23:69:4e:fb:dc:05:b5:
16:5c:c9:60:4d:6e:3d:c5:c9:8b:71:ae:fd:cf:a2:
99:be:50:b0:f6:30:a4:39:12:d4:25:c1:c9:c6:0f:
f4:c1:e8:10:33:53:4a:da:9f:ec:e4:a4:47:b1:c9:
1a:90:87:a8:15:06:57:36:e9:92:b9:ea:21:80:6e:
55:ed:43:5a:8d:2d:06:b3:72:56:40:54:0f:01:14:
ac:09:70:70:04:de:29:39:c7:65:93:31:9c:6d:49:
ed:4d:50:2a:fc:a9:d3:c5:af:ea:f1:b4:08:a5:a2:
52:e6:ae:12:5b:46:85:58:5c:d0:72:ca:c7:9d:83:
7c:a9:bf:aa:40:27:98:28:10:78:91:31:30:71:cb:
a7:ab:09:7e:07:bc:7a:45:9d:86:20:9d:51:a2:56:
71:5d:0c:7d:c5:63:c7:ae:98:95:17:ad:d5:78:ee:
f4:74:a0:54:e4:ef:6c:e1:c5:7f:00:e0:4c:27:7d:
ac:c5:a0:90:e5:8f:ad:05:35:e7:59:8d:ff:bf:af:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BC:3D:0D:DC:A1:AC:6A:B9:70:42:BC:D8:4D:EE:79:D8:AF:26:23
X509v3 Authority Key Identifier:
keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a3:4c:75:cb:e2:80:07:95:42:49:39:de:7c:06:8c:91:3b:
dd:0a:eb:92:b0:f2:e9:3a:c8:52:c0:4e:15:22:62:9e:35:df:
08:ca:14:a7:b2:52:17:ba:c7:ff:5c:5b:99:0b:e8:7c:6c:61:
33:d6:de:42:25:5b:3a:b4:2f:f7:0c:1e:0e:ef:22:c8:77:08:
ad:a5:d2:b7:ed:cf:8c:24:a5:d7:7d:48:ed:50:eb:c0:62:f3:
d3:22:ed:8f:ce:d1:74:d3:0f:03:50:f7:10:87:83:a8:d8:61:
3c:80:1b:d9:d6:fe:4a:e9:0f:c9:00:39:40:8a:7b:d5:b6:3f:
5e:67:2d:43:36:18:79:ab:0b:46:77:41:cc:c8:34:8a:5b:24:
f5:ca:4e:28:6f:8b:59:51:fc:7e:55:10:78:4f:78:96:4b:f1:
1b:2b:23:3b:30:de:33:b1:a5:64:a2:ef:2e:f2:e9:af:5b:16:
d8:00:ed:0e:33:95:ac:10:45:7e:92:8e:2b:87:0a:a2:41:69:
c4:9e:3f:1f:bb:15:43:fa:0c:51:7d:87:83:89:6d:79:c1:76:
9b:fc:3b:db:f9:12:c3:42:d3:11:5b:52:1f:15:a6:c2:41:8f:
4e:a7:56:dd:7c:b1:58:fd:f2:f0:2a:17:7d:eb:4f:ab:66:6b:
ac:af:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:44:50 2025 by rpki-client