Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json)
Hash identifier: mBoBK4PPrDQHx1nykezuLQx3aeEyzZ92XHIMAUwaDYw=
Subject key identifier: 28:D9:34:B5:5E:B4:17:D3:28:AD:98:B9:AC:D3:E6:C9:E0:E2:74:04
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 0196C7965C4DE651BC82802C2467A48AA8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
Manifest number: 03C8
Signing time: Tue 13 May 2025 03:00:41 +0000
Manifest this update: Tue 13 May 2025 03:00:41 +0000
Manifest next update: Wed 14 May 2025 03:00:41 +0000
Files and hashes: 1: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: 6BptoDbaYsnrCxipgawaETk0N0kw7IUsoGy+MYwY7H4=)
2: VDPfxaZNYgN6f0mgtDD2wmc6NUg.roa (hash: 0dxJ0L7unUdYddqR9bLGYECF59D15vEhelIex1V/ecQ=)
3: sllzpkHFh9mOLjlCML4tbQK0pwU.roa (hash: E6feljoCdpMR0hz/J2bpGEFeQDlLz1z/a780M0tQTGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:5c:4d:e6:51:bc:82:80:2c:24:67:a4:8a:a8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: May 13 03:00:41 2025 GMT
Not After : May 14 03:00:41 2025 GMT
Subject: CN=28d934b55eb417d328ad98b9acd3e6c9e0e27404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:ad:04:24:ea:13:e3:17:7a:64:79:b5:b8:c9:
8c:58:b8:64:c9:73:ac:44:6d:9d:c2:19:75:21:83:
d9:20:4a:79:2c:60:9f:15:96:e2:ce:f7:b1:96:8d:
ec:d6:72:be:af:bd:2e:17:04:dc:1c:9f:8b:00:e2:
32:3d:0f:dd:a9:35:4e:90:66:c8:53:05:4e:6d:0f:
ac:41:d4:b1:9b:b9:fa:56:33:0d:a3:31:85:89:e8:
3f:7d:da:6f:fa:56:6c:d9:2f:37:f1:ab:8a:be:df:
61:ec:af:62:76:70:02:53:86:38:9b:c8:0d:83:97:
70:72:78:12:01:5e:30:c2:2f:77:98:ba:53:5d:38:
59:89:0b:c0:09:fe:a1:68:79:47:f0:67:1d:a0:93:
77:18:14:72:68:42:b4:0d:b2:b2:5e:ab:57:da:2d:
79:e9:6c:8e:54:94:a5:67:ab:be:eb:10:78:36:d5:
e1:27:28:bd:87:c9:93:84:21:d5:92:87:78:6f:7c:
c3:f0:7d:8c:ea:04:3d:1e:a8:a3:30:e2:f7:e6:74:
24:66:47:78:1d:da:d2:de:b4:29:f9:67:28:c6:af:
2a:e6:66:b3:fb:de:83:54:86:0e:3b:fd:93:e7:25:
f8:6b:28:fc:23:23:fb:ae:94:96:43:e0:cb:b1:55:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D9:34:B5:5E:B4:17:D3:28:AD:98:B9:AC:D3:E6:C9:E0:E2:74:04
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:89:87:74:46:5b:84:bd:78:8a:2f:4d:7b:61:f8:18:89:b9:
6f:f9:bf:f4:32:34:47:a2:60:8f:65:f5:64:51:80:80:04:35:
d0:d1:13:e7:a5:d9:34:8c:10:6d:23:20:e8:dc:fa:04:91:9a:
94:1c:ea:d0:20:ed:2d:c4:08:8f:bd:55:63:be:1b:22:ea:86:
ce:ef:33:39:de:94:af:74:2e:7a:f6:96:ab:97:2f:26:4f:f7:
fb:1f:66:3b:d6:70:04:32:06:e5:fc:85:18:f8:44:cb:d0:6c:
6b:87:ad:55:65:f0:2a:e6:96:a1:87:20:33:f6:80:3f:bd:58:
5f:19:4d:bb:fe:bb:0d:5d:61:e7:18:a7:14:2c:35:e7:fb:70:
7e:9d:e8:2e:8d:df:6e:6b:cb:f0:f5:b1:eb:78:a5:80:7e:be:
fb:00:42:fb:3c:ec:2c:29:23:f2:84:3e:87:4b:19:ce:86:00:
94:76:b1:89:05:5b:e0:36:38:d5:bc:44:f1:d4:ef:63:bc:a0:
e4:03:55:73:9f:12:aa:b5:08:ab:22:e7:c7:a8:37:60:86:fc:
b9:68:2f:11:96:c2:0d:5c:3e:eb:5c:88:be:64:45:af:bb:0d:
eb:91:06:69:2d:88:6e:b0:0e:ca:d2:11:af:8a:3c:01:9d:90:
33:c4:3b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:07:34 2025 by rpki-client