Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: StNVzWaCtDH9gTFZ76BSzHbYo61VhtQ24xI8Bj3Vufs=
Subject key identifier: 5E:65:77:AD:91:EF:C8:41:6E:C7:EB:EE:96:10:60:0A:5F:14:A9:AD
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 0196783135047A9850937F79578E73827D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 17:00:12 +0000
Manifest this update: Sun 27 Apr 2025 17:00:12 +0000
Manifest next update: Mon 28 Apr 2025 17:00:12 +0000
Files and hashes: 1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: Zy4lvMtoxc9nwO4Tpk13STAHdNNGzLUg28UTg1CEd8I=)
2: PGpk2qjaEHATBO5WJqpwQvvo-t4.roa (hash: sxUY6k6RZnsEb5wstWgn4/zoH8gCs5vVrsT2wup6jP0=)
3: flUmY1UuhQ4umekHZTdOQbHf_3c.roa (hash: +LH2doQCe/pHrWkfv/54Ur54xmP0ZJEt0aBXtrY/eUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:35:04:7a:98:50:93:7f:79:57:8e:73:82:7d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Apr 27 17:00:12 2025 GMT
Not After : Apr 28 17:00:12 2025 GMT
Subject: CN=5e6577ad91efc8416ec7ebee9610600a5f14a9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3d:31:86:32:b5:56:9f:2b:1b:d2:2b:12:1d:
7e:45:d8:27:ff:5f:1b:8b:2f:b5:28:67:8f:c4:58:
54:b4:f4:7e:24:3c:23:e3:c3:6c:a6:0d:2c:a3:a8:
be:a9:24:fb:f0:57:3f:fc:cc:e8:d9:c3:5b:66:da:
da:cd:f2:1c:42:c9:be:ea:6a:ac:ab:ea:e4:37:3c:
65:0a:1d:8a:73:f9:52:1c:cf:aa:5a:13:92:ca:90:
36:46:ba:52:51:65:04:38:2f:82:93:a2:aa:c8:94:
79:01:05:f7:88:fa:87:8a:8f:0e:c8:ec:02:fe:3c:
f1:1f:77:65:91:48:9c:21:bc:bd:e9:7f:74:97:d2:
84:79:72:aa:71:ca:88:58:15:36:33:8b:56:cb:cd:
b5:3c:7a:4b:c6:1e:c2:ec:c5:fb:8a:73:32:1e:c2:
68:41:fa:06:04:a3:54:3f:ad:d9:f8:d7:68:b2:ad:
45:1f:a9:b8:02:27:03:e7:6a:03:55:eb:29:75:ce:
69:f2:5c:6e:10:29:7a:a6:2b:1c:d3:b4:e7:c4:22:
92:ce:54:85:ec:fb:a0:19:a5:6a:34:42:00:59:86:
22:4e:c4:3a:7c:46:c2:df:a1:53:2d:3f:14:14:36:
46:e5:df:68:40:c7:6f:fa:eb:fd:84:6e:09:33:23:
b5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:65:77:AD:91:EF:C8:41:6E:C7:EB:EE:96:10:60:0A:5F:14:A9:AD
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:91:37:b9:d9:6b:a4:70:d3:9e:8c:cd:9b:1c:73:8b:cb:91:
79:d5:b5:2a:17:a0:1e:8a:cf:84:98:64:b5:34:26:94:51:ea:
e0:f3:ee:bf:39:e3:06:e5:06:4f:1c:90:94:ea:89:0d:b9:25:
80:e0:49:99:ce:c7:5c:88:1c:1b:fc:53:29:30:5e:24:3d:b0:
8d:36:4e:7e:f2:04:36:95:52:c7:18:99:b1:a1:91:66:54:90:
f0:ce:3f:89:1f:b1:11:00:34:7d:65:43:40:85:10:51:3f:23:
6f:58:9a:4c:ac:e6:76:d6:39:47:21:53:e2:29:c2:95:91:f9:
a9:56:87:93:c0:af:c9:a8:56:a4:fc:29:55:30:43:cc:d7:3d:
30:c5:b8:62:a2:af:a1:4b:d7:ba:b7:36:ed:34:cb:2a:38:47:
45:b2:17:5a:fa:64:25:30:ab:4f:e9:26:1b:cd:de:9d:f0:b6:
cf:a6:54:6d:8e:e4:fa:f2:09:c8:39:6a:a5:82:f9:4b:4a:7c:
f1:7b:0a:0c:99:95:02:e1:73:64:ab:57:0e:2d:72:4b:61:30:
87:53:19:79:ce:bd:99:11:41:40:f3:3e:4e:0f:f4:95:83:4f:
22:e4:41:82:76:23:d2:0a:38:4c:7f:2e:c7:58:eb:47:03:37:
fd:35:d0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:14:08 2025 by rpki-client