Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: wRHS6llAV+go4BKRBlLdjKmif6eUxtN0m0AyAVCrxe4=
Subject key identifier: 08:96:A3:13:82:43:C9:54:72:2F:2B:98:3B:0A:07:D4:8F:42:B1:C8
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 019682B522F2764D7AC353E52E1A5E17B803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 0324
Signing time: Tue 29 Apr 2025 18:00:31 +0000
Manifest this update: Tue 29 Apr 2025 18:00:31 +0000
Manifest next update: Wed 30 Apr 2025 18:00:31 +0000
Files and hashes: 1: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: TncFEpIWjocsfp4qZSECTNWLYpejWrnu+pATLwBl3NM=)
2: yErW5kNKHDcTg-fzTjTLkaeTdfs.roa (hash: kizhklattplgXfiOmItfgbUnFHeiT1NCHm8Wv3r0lL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:22:f2:76:4d:7a:c3:53:e5:2e:1a:5e:17:b8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Apr 29 18:00:31 2025 GMT
Not After : Apr 30 18:00:31 2025 GMT
Subject: CN=0896a3138243c954722f2b983b0a07d48f42b1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:6b:ff:f1:a8:91:b8:95:5e:a1:1d:28:6f:
7f:65:2d:28:ff:6a:38:e7:c8:73:1e:38:22:5d:3b:
21:44:48:ac:20:c0:c0:9b:4f:e2:36:d3:ed:75:5b:
2d:c6:28:bc:e1:37:40:93:2a:cc:49:d7:62:28:7f:
cf:99:dd:2a:99:35:d3:d7:55:f6:cd:4b:5c:ba:76:
42:23:a3:f0:b4:d7:1d:d2:e5:ca:f6:1b:59:fc:a4:
59:1f:e1:12:1e:23:6a:eb:9b:1a:40:cb:c2:8a:99:
f8:f6:f3:44:8f:48:96:75:7b:cf:49:a1:4e:71:1e:
de:51:b3:b3:43:06:d4:2a:56:ee:be:b0:8e:27:c0:
35:86:26:bd:44:ce:4c:e9:5f:fe:bc:48:d7:cd:ed:
c6:be:17:a1:7c:27:f9:b3:36:a8:dd:0d:06:f8:1a:
fc:53:ee:7d:71:d0:cb:64:ae:72:96:f6:76:c6:7d:
f3:32:b0:ad:cf:f8:18:af:b4:65:45:d1:32:50:ff:
22:99:fd:17:b9:15:8e:91:6b:f3:e3:bf:45:a4:8d:
d2:17:ce:c1:76:61:26:c1:ec:86:0e:69:63:5b:a2:
45:7d:2e:31:33:4a:5a:4e:f3:69:62:bf:f3:b8:d6:
47:de:8f:4f:99:43:66:ed:dd:8e:27:98:73:a8:20:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:96:A3:13:82:43:C9:54:72:2F:2B:98:3B:0A:07:D4:8F:42:B1:C8
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e3:7b:f2:eb:a4:d5:f5:f7:9e:98:ed:66:53:a3:74:4c:c1:
7a:59:9b:f6:d0:d9:1c:d1:c8:0f:6b:3f:99:a0:aa:d6:04:ac:
13:14:10:d0:3f:36:76:b3:71:d7:75:3c:9b:68:63:55:94:29:
b2:eb:90:18:34:b9:3c:fb:a2:83:aa:52:7b:f9:75:d9:21:a9:
e5:4b:7e:18:7c:27:cf:a0:9c:7c:f3:a1:2e:27:a9:79:f7:ca:
b2:af:05:69:87:94:88:14:05:30:82:a3:e6:52:91:ab:0e:81:
70:68:13:9f:33:0e:a4:e9:1d:53:9d:c8:21:2e:86:a9:83:05:
20:4b:a3:79:62:2e:77:d1:29:d8:98:c4:2d:05:79:e4:ef:8b:
22:ef:13:92:22:02:8d:32:fd:d6:ba:35:2f:d6:0e:6c:e4:3f:
2e:1c:34:4c:6b:14:7b:59:ac:c7:3e:ca:59:c3:2c:f9:d6:f2:
87:e6:18:d7:53:9c:c0:77:93:1d:ec:1d:71:ad:14:ba:2f:32:
0f:30:58:a1:a0:1e:d6:e0:af:64:3b:4d:81:06:7b:1d:c0:f9:
fa:da:55:fe:34:9d:ea:0d:fd:ac:23:0e:85:ce:92:45:88:a6:
11:d7:5d:9b:b0:9c:07:0f:c1:91:42:2d:65:39:b2:b1:bd:8b:
dd:c0:70:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:38:01 2025 by rpki-client