Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier: xI1P1cJVnk/ScOoZeltJYkFjwxH0opWo0GVfkZ7Es+0=
Subject key identifier: DB:81:A4:B6:C6:EB:F6:6B:C4:C5:01:B4:C9:E2:60:38:2E:E2:B6:23
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 019679EA0D64A9A1C0063DF0345ED086EAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 01:01:43 +0000
Manifest this update: Mon 28 Apr 2025 01:01:43 +0000
Manifest next update: Tue 29 Apr 2025 01:01:43 +0000
Files and hashes: 1: 3_-hgw-hEPZjrdcvbmBPfyZjJX4.roa (hash: 32NxwfNK1ZaYklZXBKeX9wsuxMzcdx3YENya2fUqH/0=)
2: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: /DqbWgonYjibqW893xrNN3w5H2OcNyW58nY6sZypX0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:ea:0d:64:a9:a1:c0:06:3d:f0:34:5e:d0:86:ea:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: Apr 28 01:01:43 2025 GMT
Not After : Apr 29 01:01:43 2025 GMT
Subject: CN=db81a4b6c6ebf66bc4c501b4c9e260382ee2b623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:61:9d:14:be:01:a7:2e:f7:47:92:bc:df:
1f:b3:89:54:d1:a4:81:a2:ae:c1:f9:2e:44:db:d2:
62:ea:fc:86:b6:61:bf:d4:f0:b1:bb:0d:a3:19:cc:
37:7c:50:5d:27:c2:3c:05:f7:6c:de:de:c8:7d:83:
03:5c:79:c3:83:02:27:46:57:16:6b:25:99:32:90:
89:02:c0:97:37:8c:0c:0f:b2:57:d8:68:97:0c:75:
9a:ad:06:f4:53:a9:a7:d2:38:bd:db:ae:08:8a:d3:
da:c5:98:b8:ca:99:bc:ac:28:62:30:0e:11:e6:e5:
b6:af:89:31:24:a5:08:17:6f:ba:41:63:84:5c:e3:
b6:21:71:d0:b8:a8:1a:53:35:15:f0:09:00:9b:bf:
b9:04:15:69:76:84:35:c8:57:58:9a:26:34:f5:f3:
21:b8:09:a5:3d:3e:0e:12:0e:cd:99:50:7f:56:a2:
9f:6e:fe:1c:c3:05:13:47:2f:b0:38:70:b1:55:84:
bf:bc:68:0a:e4:9e:0b:b0:14:d1:1c:9f:da:1a:a7:
a4:4c:1d:f2:c7:b0:82:8b:4a:7e:72:91:92:d9:6b:
47:1f:7b:4f:80:6b:1c:f4:0f:8b:7d:df:75:08:6b:
b2:bd:89:0d:6c:24:c1:4c:12:00:2f:1b:e4:25:c6:
ca:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:81:A4:B6:C6:EB:F6:6B:C4:C5:01:B4:C9:E2:60:38:2E:E2:B6:23
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:78:49:25:35:a6:b7:82:51:3e:5b:83:85:28:d6:96:1f:c3:
5a:83:f2:60:04:1e:13:ae:16:df:b3:e3:a6:c9:ad:6b:4e:57:
6e:4e:22:49:d3:0f:0e:3a:8f:da:b2:75:9f:0b:a2:5c:38:80:
db:7f:63:bb:f4:41:0a:6a:4e:16:d8:43:61:ef:b2:08:64:75:
4a:dd:2f:43:7e:c2:73:54:7c:95:cd:8c:7d:4b:15:81:da:43:
57:01:9b:ed:40:2c:92:2f:e0:74:d6:e4:f6:86:d2:8d:80:a9:
95:3d:20:c2:89:d0:b1:05:ed:df:ed:71:ca:60:ed:a0:13:13:
34:2a:5c:a7:73:c0:26:00:d3:5a:0e:df:4b:51:96:e8:ea:5c:
4c:53:a7:93:20:25:af:3a:90:ad:7c:a8:0e:0f:b0:8e:58:1e:
44:a6:81:c6:08:a7:dd:23:21:54:9d:93:1a:58:8c:15:31:7f:
0c:6a:58:39:d1:1c:52:e9:0b:0d:78:90:12:a2:e2:10:93:4a:
6f:ac:66:88:05:ad:f4:aa:59:66:76:b5:39:66:b8:dd:07:b2:
cd:6c:f7:94:e0:b7:db:6f:ae:f3:40:26:e6:20:36:2a:4b:57:
5a:7b:71:2d:5a:f3:64:7a:89:49:ce:3b:24:0a:7e:b9:50:63:
95:07:37:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:48:13 2025 by rpki-client