Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier: P2DXPqtFlj8mckC3dlmzTPNxqe4k4hOIWuh8dmOOLzE=
Subject key identifier: 08:C2:1A:9E:11:8A:2E:18:7E:87:4C:7F:5B:2C:7D:65:0E:CE:36:2B
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 01967530A1D97BE2EE81BE8FCEAE1D1DB7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number: 0D5C
Signing time: Sun 27 Apr 2025 03:00:43 +0000
Manifest this update: Sun 27 Apr 2025 03:00:43 +0000
Manifest next update: Mon 28 Apr 2025 03:00:43 +0000
Files and hashes: 1: BTmSI3bKDyEio_o8HAFd3DpA8rw.roa (hash: 3z5V5nlo98dCHrSvU7v+ci/JP55YJA4F6NU227fMQdg=)
2: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: usx3IUerYrd/l3Gz2OV3DjhjQDHElG4+cKFpwVHf5YY=)
3: Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa (hash: qrkRzr8LSzDpFIdLrS23zNSmVx5+NOPtSLZdcnXxt68=)
4: oxi_ya_EdBtJCrjY1pYIsNptA_Q.roa (hash: /Rw4xq/Rq6iapjKpArPGVtAk2zVGOyS/eMr3PI823Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:a1:d9:7b:e2:ee:81:be:8f:ce:ae:1d:1d:b7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Apr 27 03:00:43 2025 GMT
Not After : Apr 28 03:00:43 2025 GMT
Subject: CN=08c21a9e118a2e187e874c7f5b2c7d650ece362b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c1:dd:f3:a9:3e:bf:ba:e0:56:7c:d7:93:15:
54:11:98:31:c7:a4:4f:33:f5:51:fd:73:73:76:ec:
4c:1a:6c:53:c1:3c:73:24:55:8f:b0:a7:21:f4:5a:
b2:a5:fc:de:e0:20:68:85:92:ee:8c:94:d5:cd:1c:
3f:20:74:06:97:4c:98:a6:09:72:bc:bf:d5:c1:35:
96:fe:5c:05:15:b9:c7:8a:d1:06:0b:7f:63:4f:4b:
03:a3:b5:78:31:f7:9d:d2:da:d0:62:a0:3f:43:69:
07:2b:3f:d2:5b:99:d2:de:7a:92:78:61:09:6d:57:
6b:bc:47:42:eb:12:62:fe:a9:3e:7d:2b:b2:6c:17:
ac:1e:57:c5:59:8b:30:14:cb:d9:43:43:57:42:72:
6c:41:19:cc:01:73:78:c2:1d:10:86:6c:c6:99:85:
d9:82:25:3b:74:ca:79:4f:6d:41:6d:3f:42:de:4c:
e1:da:33:66:0a:f3:4a:af:d9:45:ba:12:83:5b:b6:
dd:07:62:75:84:c3:3e:db:ca:b1:71:e3:36:cc:38:
a0:d3:20:9f:38:bc:f8:04:b9:12:3c:8f:e3:de:9b:
2c:a7:3e:15:46:ca:49:1b:42:9f:c6:85:f8:17:bd:
dd:4f:fd:18:9e:f9:24:83:77:00:97:86:33:bf:c2:
ac:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C2:1A:9E:11:8A:2E:18:7E:87:4C:7F:5B:2C:7D:65:0E:CE:36:2B
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a0:2e:42:7c:7b:03:1e:9d:c5:2b:cb:fc:d5:ee:26:10:3a:
96:62:83:fd:1e:39:d7:db:03:c3:40:d0:40:c9:b6:78:46:ff:
ea:41:ef:3f:60:7e:06:f6:99:d8:5a:b7:b9:0a:73:5e:41:d1:
1b:ca:3a:55:ea:db:39:b6:f8:ef:7d:c1:d6:ba:39:9f:39:ba:
0f:9a:cf:71:a3:c6:aa:6d:49:7c:62:a4:92:ed:b1:18:3f:b5:
24:d2:f1:77:90:69:94:93:e1:b4:c2:dc:2a:4e:b4:c4:b2:2e:
ff:49:2a:c1:64:4b:c7:d7:a9:cc:0b:44:b9:48:47:d2:a6:d5:
0c:5a:b5:90:32:98:c2:f1:07:11:fe:69:ff:d8:7a:00:f4:a3:
75:ce:82:7a:b1:28:2e:08:14:db:f8:12:e9:88:21:ed:6a:6b:
3d:00:80:87:6e:79:d5:95:bc:60:d9:2e:42:27:2a:ab:b0:33:
de:23:5a:b1:b6:50:78:2b:4c:2d:51:5a:ab:ed:ad:57:2f:57:
0f:2a:9c:d1:69:b5:9d:e9:cb:44:4f:de:1f:71:6e:62:1e:6d:
50:e0:1d:c3:13:59:c5:03:64:71:df:cc:29:0e:01:60:7e:83:
a2:ca:6c:6c:c2:33:03:5b:c7:1d:92:88:72:75:2c:40:02:f5:
f7:fb:d7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:46:33 2025 by rpki-client