Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier: 4Y1cwwDjJ1otCJspAjdNj6g5DHp8AWAxHiLIZDCaD50=
Subject key identifier: 03:58:1C:D7:B4:C9:0C:F3:FB:46:1A:90:AC:74:66:11:3F:75:03:14
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 0196914C820CAFF67D5B156578AA3C1DD95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number: 151E
Signing time: Fri 02 May 2025 14:00:32 +0000
Manifest this update: Fri 02 May 2025 14:00:32 +0000
Manifest next update: Sat 03 May 2025 14:00:32 +0000
Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: szboalC66lUf9WIK8dPTSd96Bet0D+kIhQ9u+l0NPD8=)
2: WtAp0tL-l96y_gbMlR5puzdruQc.roa (hash: xRGTdhiVzbN5no9s0pfriVSMuD8OBdniQOQSDlzn9q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:4c:82:0c:af:f6:7d:5b:15:65:78:aa:3c:1d:d9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: May 2 14:00:32 2025 GMT
Not After : May 3 14:00:32 2025 GMT
Subject: CN=03581cd7b4c90cf3fb461a90ac7466113f750314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:80:6e:e8:95:45:92:6c:55:4e:dd:04:d8:ab:
aa:0b:9c:70:3f:ec:5f:05:7b:b2:d4:22:cf:59:37:
21:ea:db:60:47:7d:65:00:9e:c3:6f:dd:49:90:91:
ef:5d:f8:da:52:0a:bd:f8:b7:ee:5e:4c:50:7d:b9:
59:1d:9d:57:a8:e8:05:c9:45:22:da:b8:ac:52:5e:
5c:0a:d7:63:1b:31:7d:1e:8e:d6:69:d8:87:68:ba:
cb:f0:51:3a:04:67:6b:f2:06:5d:99:d2:eb:2f:cc:
68:7b:fc:83:c6:e5:d8:50:76:42:6e:ed:06:fb:10:
a8:ad:77:2e:37:02:f0:b6:78:3b:69:6f:77:ea:33:
53:00:ed:b9:0e:00:31:fe:7a:9b:a6:33:3e:2b:33:
8d:05:0f:7a:59:87:3d:27:76:a6:ee:0a:85:ea:7f:
41:37:08:15:42:fb:f5:5d:3a:75:27:f9:6b:b3:18:
c0:a9:52:44:01:49:71:2b:75:7a:d9:60:db:b4:3a:
09:6b:17:05:53:1c:4c:b1:3b:b4:ba:d2:94:95:84:
1d:d7:cb:c7:71:3f:99:55:1a:5f:22:e1:2a:3d:2b:
ad:01:bd:f1:f1:6f:fa:db:54:81:e8:81:40:e8:0b:
35:31:0a:1f:a7:de:f7:6a:fb:19:45:b5:c8:2d:20:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:58:1C:D7:B4:C9:0C:F3:FB:46:1A:90:AC:74:66:11:3F:75:03:14
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d5:5d:41:f1:5b:8e:1e:1a:2d:35:76:0b:4f:9a:16:45:2c:
42:45:97:8a:6f:44:14:73:b1:41:1f:2f:14:fc:a2:96:d9:3f:
a3:2f:20:bb:dc:26:95:7f:f4:b1:71:f3:50:51:a2:61:c1:e4:
2b:ea:26:0b:22:bf:e8:a0:8c:c0:c2:1d:cb:6c:9e:d8:11:08:
e1:b2:53:f6:aa:a7:28:ac:49:cb:e1:fb:99:0c:e1:6b:97:c3:
bf:1c:2f:57:5c:fe:75:e2:32:0d:d8:36:e6:37:1c:95:6e:71:
8f:bf:7f:05:d1:7d:36:50:39:8c:88:29:2e:d9:0a:d9:00:18:
f6:b2:c0:b5:4f:46:56:46:d0:3e:5a:96:93:41:7a:12:c1:25:
49:8d:c9:ac:df:ed:48:02:e6:f4:b2:aa:3a:0a:aa:b5:7c:9b:
ea:d4:6c:65:fb:95:b9:e1:30:08:89:fd:9e:3b:96:27:20:a9:
51:81:2c:9c:d3:a8:4f:f0:8d:b4:f3:c7:98:37:25:34:31:41:
e9:66:57:91:03:74:be:80:fd:0b:8d:d8:e3:ff:cf:24:61:62:
fd:30:64:51:97:81:2b:ec:5a:1b:58:30:f5:62:04:fa:bf:23:
d6:e5:56:37:d1:11:04:29:3b:9f:dc:3c:f3:c4:bf:3b:a0:e9:
b6:bc:7b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:54:01 2025 by rpki-client