Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: fNoRynILCjrzAcajyeA56VNq6opGn/X51Rg4E0HbuvA=
Subject key identifier: D8:39:7C:EF:2C:93:18:B9:19:A2:D6:9D:02:24:F0:45:C0:77:D6:5D
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 019671C213A1D765FEC5C5A76A4E4DFACD54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 0FD6
Signing time: Sat 26 Apr 2025 11:01:06 +0000
Manifest this update: Sat 26 Apr 2025 11:01:06 +0000
Manifest next update: Sun 27 Apr 2025 11:01:06 +0000
Files and hashes: 1: 1-jgtOPobXCJDbrHGNdmL9rzJbgM.roa (hash: uCWGxr32WWfEG1/b7Z2jim0tRFwDuOHUsX5k577/0+I=)
2: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: 86/he1o/gNmgHeRXNkdycLBiKnJBLCAhNLmyNViFe2Y=)
3: x3drftlfvyiEtkh0afmWcroU9Js.roa (hash: NILZn8jb2pSCwJZ594oMmV5sakNi3NDJXkj51QTnCsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c2:13:a1:d7:65:fe:c5:c5:a7:6a:4e:4d:fa:cd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Apr 26 11:01:06 2025 GMT
Not After : Apr 27 11:01:06 2025 GMT
Subject: CN=d8397cef2c9318b919a2d69d0224f045c077d65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:f7:7c:a5:0f:e7:35:51:d3:25:a4:e7:89:
fa:08:df:e6:f1:f9:50:45:fe:1d:db:33:48:43:39:
32:41:f6:e9:cf:03:39:d7:e4:27:b6:cb:b4:6b:81:
09:fd:de:27:a5:8a:32:88:fa:9d:d2:60:c8:2f:e7:
a6:31:36:c1:9c:05:28:b9:78:e0:ad:24:c4:7d:43:
66:1a:90:2b:4e:a3:c3:2c:f4:8a:c8:2b:30:ac:77:
92:56:23:a1:5d:b3:32:3e:9f:e3:c9:23:f3:28:42:
f1:23:b0:ed:69:2a:29:a5:e2:6d:fc:f1:85:31:a2:
de:9c:d9:4d:fa:82:13:9e:31:b9:e2:0b:e0:1f:70:
86:dd:f4:59:49:eb:80:b7:75:72:28:62:92:75:57:
c8:3d:b8:6b:88:61:8a:b8:91:a7:a6:36:67:3f:2a:
69:f8:e7:34:a1:d5:24:39:1f:82:e3:da:58:a4:1b:
09:55:e4:f7:78:51:24:e0:da:e3:c4:67:a6:4c:37:
eb:e0:a1:e5:31:c6:64:e9:b2:70:9a:ee:3c:72:00:
56:83:e4:89:06:6a:06:ac:c5:76:9f:13:fe:91:dd:
58:23:15:b7:a5:92:ac:33:da:11:9c:48:bc:69:df:
09:b8:4f:ce:64:d6:0e:d1:91:51:f7:e9:a7:3e:52:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:39:7C:EF:2C:93:18:B9:19:A2:D6:9D:02:24:F0:45:C0:77:D6:5D
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:31:f0:bf:0d:3b:1f:b9:3b:00:80:83:2a:a7:0b:9a:07:a7:
14:25:db:17:81:59:6b:21:2b:07:28:bb:00:22:c5:60:ab:aa:
3a:39:f7:8c:a4:b8:b9:aa:3d:ed:85:78:02:a5:8c:5e:32:5f:
17:e3:a3:ce:5e:65:e7:35:73:03:a8:70:f9:93:5a:b0:7b:2b:
58:15:5c:66:82:c0:05:e4:98:0b:df:b4:d1:fb:74:b9:cd:bd:
00:df:3e:ee:67:8c:3a:44:bc:1a:c6:65:9d:2c:fe:39:5c:eb:
e9:5a:5f:43:83:d4:fe:a6:9d:2e:8c:8e:b7:1b:0e:a2:8e:60:
43:0d:52:5c:68:0a:23:1a:cd:c6:52:01:0d:d8:03:13:3a:e5:
b4:7e:08:ae:a2:ad:10:77:35:a2:df:15:02:35:40:d8:51:de:
a2:dd:17:3d:b5:c7:30:73:8d:07:6c:28:d8:56:c8:a3:79:0f:
b1:dc:bf:c7:f2:51:4e:5c:63:3e:9a:96:7f:0f:97:82:52:d0:
c2:3a:5b:3e:d6:09:94:4b:8d:0b:3d:36:50:37:86:79:3e:fa:
b7:6f:71:65:7e:0d:a9:ac:4f:84:b6:25:ed:12:69:d0:c0:78:
59:7d:d0:31:20:26:25:cf:2c:cd:77:19:b9:64:8c:8c:95:a3:
17:94:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:22:21 2025 by rpki-client