Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: kYUWuxRjExk7ltpUh5eEe10A0YuSmnLD7N66G/IoFXc=
Subject key identifier: C9:93:7A:D7:E0:A7:D2:42:09:B1:C5:B1:7F:6F:15:DA:3B:DC:3A:CC
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 0196759E62C95F88195874689596FC4B1B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 05DE
Signing time: Sun 27 Apr 2025 05:00:36 +0000
Manifest this update: Sun 27 Apr 2025 05:00:36 +0000
Manifest next update: Mon 28 Apr 2025 05:00:36 +0000
Files and hashes: 1: 7j43t3dg2tP3DSKOOyDvFDPSQ0E.roa (hash: +Rb8Ckbhx24K2SYro30q4c7lAYAS1/PtJbtnZ0q2YK8=)
2: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: 4SbujTD/az9Prxhnsq53uctEucV1DuezkIc9qCM8IH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:62:c9:5f:88:19:58:74:68:95:96:fc:4b:1b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: Apr 27 05:00:36 2025 GMT
Not After : Apr 28 05:00:36 2025 GMT
Subject: CN=c9937ad7e0a7d24209b1c5b17f6f15da3bdc3acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:f1:91:a2:1f:83:4f:fe:1b:47:1a:8e:db:
9f:82:be:86:fa:6d:84:8b:80:16:6e:65:bf:f1:62:
19:ca:90:2e:1a:27:4d:49:dd:07:66:31:59:84:21:
f5:d3:7d:c1:fc:b5:12:95:d9:82:f8:da:45:15:8c:
91:b7:cd:d9:ef:54:45:9b:49:5c:45:bb:26:73:47:
37:04:d0:4b:12:22:15:b1:1b:01:c0:75:ec:cc:b1:
24:3f:73:da:8f:b2:72:27:44:4f:24:71:5b:d6:e2:
5d:b3:db:32:68:2f:bb:24:19:00:d0:2e:a7:c7:ae:
a4:fa:90:02:c8:20:4c:80:65:a9:ba:8c:9a:87:4b:
e8:09:ea:ec:2b:b0:bf:1f:a5:8e:22:aa:6d:1b:aa:
cb:2a:e2:f9:fa:46:c9:c2:f2:1e:34:31:30:cb:e7:
a0:61:b5:de:ae:98:04:e6:80:f3:21:53:55:46:65:
66:38:10:ae:58:4e:63:a5:b3:dc:bc:c6:88:65:48:
b8:84:34:6a:6c:02:3b:97:4b:32:36:d8:a3:41:9a:
29:9f:bf:97:f1:bb:59:9e:7a:4e:d6:b7:76:b2:e3:
18:bd:ff:1c:90:0c:1d:a9:b4:97:21:18:cc:86:72:
93:27:59:35:8c:93:c8:d1:0a:cb:0b:89:d3:e4:88:
f1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:93:7A:D7:E0:A7:D2:42:09:B1:C5:B1:7F:6F:15:DA:3B:DC:3A:CC
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:13:84:49:32:76:bb:d3:37:b7:c3:86:d7:a2:a7:dc:8b:7f:
c0:42:c7:08:06:2d:3e:2d:db:90:e6:55:cb:9a:aa:87:cc:01:
11:67:42:25:38:ff:18:cd:2f:88:ea:66:6e:81:43:c6:2b:29:
22:76:16:d3:82:b8:76:70:6b:e5:75:3b:55:31:e5:86:95:2d:
c2:de:66:62:e0:0f:c0:9d:49:49:b3:ba:9b:b0:9c:7e:7a:e8:
17:0d:4e:fc:1d:67:b0:90:12:af:fa:7e:a3:9b:bf:3e:c7:94:
d5:43:16:e5:9e:09:dd:fc:78:00:7e:a2:8d:77:a2:be:2f:3d:
25:ac:43:ee:1a:ac:a4:28:77:03:9b:b6:0e:d9:80:d5:27:f8:
51:e8:e2:7e:27:05:c5:8e:61:82:7c:4f:85:ee:a0:36:76:65:
a1:7d:e8:86:1d:c0:c7:40:6a:e1:c8:5d:aa:21:30:fd:f1:0f:
c4:d5:53:a9:75:d0:b2:b6:9c:8c:7a:28:93:52:48:9e:94:0f:
c1:7b:33:5e:96:53:d2:a5:cd:d4:e1:3c:a9:58:6c:2c:57:8d:
f6:57:4d:37:dc:4e:1d:49:2e:57:b9:46:dd:ab:0d:17:85:c2:
cf:dc:d4:b3:84:11:b2:43:c7:08:46:d2:b6:1f:3a:67:29:cb:
99:f5:e1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:22 2025 by rpki-client