Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
File: DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json)
Hash identifier: lpDM4TZqUO+yikzoy6uJI6UYmeAHsHKjj9kF11YeSqY=
Subject key identifier: 44:38:40:E4:D8:17:DF:28:AD:F3:B3:69:70:4A:76:C0:5D:F8:68:DD
Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Certificate issuer: /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Certificate serial: 019684A3C22A13857E0120FF368E2EC0576C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
Manifest number: 11DD
Signing time: Wed 30 Apr 2025 03:00:46 +0000
Manifest this update: Wed 30 Apr 2025 03:00:46 +0000
Manifest next update: Thu 01 May 2025 03:00:46 +0000
Files and hashes: 1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: O/m4fiVIv3bwuuSCE5E0rPEEDzWlGyaJhrKx/RkAmws=)
2: ZWVOs3WDW-rx5m7taQu6I2WYx7Q.roa (hash: yPh81fsK4TJM83HFw4j8d9BB5tZUMJFngOFcn+J9UgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:c2:2a:13:85:7e:01:20:ff:36:8e:2e:c0:57:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Validity
Not Before: Apr 30 03:00:46 2025 GMT
Not After : May 1 03:00:46 2025 GMT
Subject: CN=443840e4d817df28adf3b369704a76c05df868dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:e7:49:fe:a1:2b:72:52:e0:a9:9d:fd:e2:
5f:4f:7f:e3:d2:a7:06:fe:46:1a:30:d4:8b:15:a3:
89:e0:34:9c:2c:25:e4:f7:09:a1:ae:e6:fc:ff:10:
a5:88:5d:6d:6a:72:2e:4a:d6:e4:f2:3a:95:13:18:
65:e6:83:86:04:03:a3:25:ad:b3:36:3a:6a:8e:be:
ac:b1:4c:7e:a1:69:de:cb:08:a0:d3:b2:2d:07:07:
46:8a:6b:7c:7c:31:24:64:9a:18:21:75:66:bb:2a:
43:90:ed:c4:e4:4d:ad:e5:48:51:51:12:0e:6e:dc:
b7:ee:6c:e8:1a:52:d8:a6:8a:71:46:79:e2:03:a1:
46:8b:a0:0d:f1:fa:ea:00:28:29:20:21:5d:15:0a:
87:a8:ad:c1:09:0e:e2:81:d9:ea:ce:7a:65:33:63:
06:3f:46:89:96:52:58:af:cb:7f:21:2d:92:d5:dd:
33:ec:67:67:0a:72:06:35:da:77:58:6c:35:c6:ee:
92:6d:cc:c6:ab:0d:07:73:e9:fa:6c:6c:c2:a2:1a:
ff:35:49:08:f8:56:88:ad:db:f1:51:de:46:d1:8a:
7d:79:42:3c:2c:ee:7a:08:24:c8:cc:39:4f:0d:6e:
88:8b:a5:24:e1:38:6a:1b:b0:af:cf:12:4b:ac:34:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:38:40:E4:D8:17:DF:28:AD:F3:B3:69:70:4A:76:C0:5D:F8:68:DD
X509v3 Authority Key Identifier:
keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:aa:35:8e:6e:3f:71:48:18:53:97:93:02:51:f0:53:f0:9c:
2f:05:64:4f:9a:54:07:50:ec:f0:de:78:39:f9:6c:d0:62:6e:
bd:f6:7e:57:13:ba:51:b1:a5:71:8a:bc:5a:c5:27:cd:11:46:
3d:0e:1c:70:a8:71:ab:d6:db:d5:4c:74:77:29:79:89:97:80:
1e:ec:56:8e:da:71:36:77:3c:e6:ed:79:ce:52:bd:30:ba:66:
2f:ae:11:87:f3:3a:b8:0f:b0:3c:2f:ad:2c:08:8a:34:79:27:
0e:20:b1:62:ef:a4:4d:14:99:ce:38:4e:7b:0d:12:0f:6b:a8:
c9:f3:70:bf:9e:4b:28:aa:56:67:f9:77:6b:3f:5c:21:9c:eb:
f8:60:78:d7:bc:bc:aa:fc:ca:64:d7:f4:2a:ae:6e:16:63:35:
72:34:d2:4c:08:fb:5f:67:50:b2:63:99:32:7f:74:2f:8b:c0:
2b:f4:4d:33:53:56:ac:42:84:38:0a:e5:79:96:0c:cd:4e:26:
89:e4:5d:89:92:17:e9:18:08:a1:a5:70:4b:48:d5:85:1e:e7:
ac:39:25:02:a8:c6:ef:4a:0a:f2:7d:90:c0:dd:f2:80:67:8a:
f1:5d:d5:be:a2:c4:87:60:23:96:ef:e7:c6:f8:b5:24:6d:86:
e5:64:74:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:54:56 2025 by rpki-client