Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File: d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier: hy2fYfqvGdC5yMixDcaxcqRYjchTbkafASN1gRYe6jY=
Subject key identifier: 5F:73:FD:02:14:88:41:6E:28:3A:AF:9C:11:35:C3:69:3E:DD:34:6B
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer: /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial: 0196BD126696644B18A3764C5289237B1EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number: 0C19
Signing time: Sun 11 May 2025 02:00:21 +0000
Manifest this update: Sun 11 May 2025 02:00:21 +0000
Manifest next update: Mon 12 May 2025 02:00:21 +0000
Files and hashes: 1: 3fVp55RM8WJ-CAkYXQzPen4QsPU.roa (hash: GhSbT3tbIT6J4s8weD/xKmKS+sqFk4JjUnduge7t9L0=)
2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: H7uEwwziKmii8Pk/e9nJMpjVXwLJRg/L+rEOp8I6U30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:66:96:64:4b:18:a3:76:4c:52:89:23:7b:1e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Validity
Not Before: May 11 02:00:21 2025 GMT
Not After : May 12 02:00:21 2025 GMT
Subject: CN=5f73fd021488416e283aaf9c1135c3693edd346b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:d4:b0:50:f7:1c:69:bd:44:bb:1b:72:34:
2b:bc:1f:e6:e5:ab:42:27:ec:a6:2e:d6:66:1a:69:
aa:1c:ee:d9:28:42:36:39:9d:59:6e:93:9e:35:33:
9c:f5:21:66:b6:c6:29:98:e7:ea:ab:2a:61:ef:bc:
62:af:6e:f7:44:54:17:6e:b9:ef:7b:f5:1c:b9:48:
17:d6:d0:90:a2:aa:07:b0:fc:c6:b7:23:61:8e:85:
ac:98:f5:63:b8:2a:3d:42:7d:fa:72:ed:94:fb:85:
db:9b:12:aa:e4:4b:49:c7:20:24:4f:1d:00:8b:fb:
1e:ab:d5:bf:e0:ef:85:9e:4b:d5:51:30:c7:c7:0e:
82:86:74:d0:69:c1:86:e9:33:aa:fa:23:ca:5c:12:
e2:bd:77:22:42:a2:be:ae:81:7d:65:bc:58:31:e6:
a2:bc:c1:27:9d:57:1c:51:3b:bd:fd:67:47:e4:7a:
7a:16:d3:fd:b9:14:e5:1c:89:37:ce:cd:c0:f9:df:
56:b6:d2:03:0d:eb:f7:6f:d4:ea:64:8c:40:fe:bd:
6e:0f:81:35:26:a2:d1:cc:c6:0f:13:1c:f0:d0:d8:
69:c5:e9:d9:c8:7f:1e:bc:2a:b9:67:d8:90:5f:48:
00:0b:44:1e:f4:59:a2:ab:f0:f3:c9:19:8e:b0:b6:
ed:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:73:FD:02:14:88:41:6E:28:3A:AF:9C:11:35:C3:69:3E:DD:34:6B
X509v3 Authority Key Identifier:
keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:45:05:c9:af:d8:cb:9a:dc:3a:1d:f2:39:e9:b4:08:4c:0b:
ac:bb:8f:58:71:65:d7:3a:9f:21:87:86:31:c6:38:cb:0c:62:
a2:29:06:e9:99:36:2f:5f:11:6d:51:aa:e3:55:ca:52:64:0d:
17:ce:a7:2f:0c:28:30:5d:cf:23:20:b2:00:08:d5:14:2c:da:
47:22:48:9d:bd:0e:06:85:75:5f:50:91:be:c1:e8:7e:22:9b:
46:e4:1e:44:05:20:a4:ff:19:79:59:c9:ea:ca:b8:e2:b6:48:
8e:69:e3:56:9f:cb:47:dc:b7:48:c9:6b:3f:cb:47:32:ca:63:
1e:3e:10:d5:85:df:be:9c:22:a8:d7:f9:c4:e7:e1:51:2d:2a:
1d:39:f5:5e:c1:6f:1c:99:52:42:30:02:03:19:82:58:90:08:
6b:3a:cd:ea:fd:9d:2c:33:2a:5d:0d:85:5c:2b:1c:fd:0e:62:
5d:3b:33:30:89:83:c4:9d:b8:0c:1f:b7:52:ae:67:90:0b:59:
d3:c7:68:c1:d3:36:a8:27:5e:ec:b5:36:66:f7:d5:d2:fa:00:
22:28:69:41:82:b2:76:3c:3a:68:70:e7:8c:45:d0:3c:5c:9f:
d8:60:49:7d:a0:a3:2e:52:1f:98:87:30:98:43:8a:c8:25:30:
ae:ef:2a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:35:29 2025 by rpki-client