Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier: XM3tM4NpdIqbnfuDnmjstGjPDTZemhluYpR/eYp34RQ=
Subject key identifier: 13:5F:43:D8:2B:4A:E2:80:1D:57:AB:56:AB:5E:F3:7C:8B:EE:0C:77
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 0196C15DA1B95385D29CE9AF6B12E33BB4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number: 0CAD
Signing time: Sun 11 May 2025 22:01:00 +0000
Manifest this update: Sun 11 May 2025 22:01:00 +0000
Manifest next update: Mon 12 May 2025 22:01:00 +0000
Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: UmfokLRdLD+p769sNHFVP7l84LUyM/E+FKXqcjCGpuc=)
2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:a1:b9:53:85:d2:9c:e9:af:6b:12:e3:3b:b4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: May 11 22:01:00 2025 GMT
Not After : May 12 22:01:00 2025 GMT
Subject: CN=135f43d82b4ae2801d57ab56ab5ef37c8bee0c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a5:cc:54:ae:d4:ce:9f:21:27:bc:f2:45:9b:
0b:65:32:fe:05:92:03:0a:6f:71:2d:11:e3:48:0b:
c4:59:69:98:cc:df:01:ae:8a:1e:f3:99:33:b9:3c:
c3:1b:da:38:80:5b:bb:e4:45:40:6c:a9:94:fa:c4:
09:9d:a2:56:f0:9d:2f:f3:81:8f:5e:3b:94:4d:93:
f1:98:fb:cf:e5:97:e9:e3:27:92:e4:7b:d0:96:99:
f3:67:64:c4:05:f0:ea:75:9e:c4:79:ef:4e:b1:93:
2a:fe:70:c1:57:6f:eb:b9:d5:0c:81:ce:ca:8d:3e:
20:16:9b:61:2e:9f:cb:ed:c8:91:ec:d1:bf:bd:26:
00:d9:ea:31:a9:bb:3c:06:ce:26:94:6a:45:08:42:
a2:d6:64:c0:81:4c:b0:1b:c9:31:a7:f9:1a:39:0c:
2f:c6:cb:70:1d:7d:59:82:a0:fc:a4:cd:e7:89:e0:
9d:e3:6a:fe:78:54:48:d7:1e:6c:4f:50:6a:45:aa:
60:e4:a7:4e:65:b3:0e:74:94:5c:1d:8f:d6:98:95:
8a:8a:07:94:5b:77:40:fb:e6:08:eb:f3:be:f9:87:
83:30:c1:56:ad:d4:53:40:3e:39:e8:88:ee:f9:e0:
04:5a:c0:f5:2b:1b:0b:5d:89:8c:a6:59:a3:f6:68:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5F:43:D8:2B:4A:E2:80:1D:57:AB:56:AB:5E:F3:7C:8B:EE:0C:77
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d4:8f:6b:e8:25:f5:f3:05:bd:74:d8:af:1f:65:81:65:8e:
9a:d9:04:cf:4c:71:fb:06:2c:c2:37:5f:e0:b5:75:c8:e4:62:
9c:2f:fa:56:ea:ec:6c:60:6c:15:d9:e4:a8:77:51:99:99:5f:
29:e0:17:89:a3:08:c8:90:a5:e4:6e:09:11:fd:af:5e:4e:c2:
3f:45:d4:44:fd:7b:64:4c:ec:52:0c:06:66:6d:c9:a1:5e:26:
ae:bf:df:30:fd:67:52:fd:b5:ef:f5:bb:71:96:5b:79:4c:16:
bb:f2:51:97:67:b8:3c:44:2c:83:35:4d:0f:bb:7e:b9:c2:ae:
ea:a3:10:e3:9d:f8:f3:6d:d1:82:cf:0a:7e:df:27:f9:3e:8f:
bc:c9:eb:b2:0e:21:84:22:66:d8:78:07:41:77:d8:56:54:ee:
65:80:f0:35:cc:97:36:ef:de:35:0e:65:4a:ad:b5:ff:da:fc:
fc:89:76:38:86:92:bf:97:b6:54:52:19:88:12:69:ad:11:35:
a0:0d:53:8e:7a:69:e4:68:d1:ea:89:85:27:17:b0:fd:75:1b:
77:fc:a6:38:20:20:43:1b:8b:af:d0:ef:d5:e6:9e:4f:c4:1e:
cb:31:be:26:d9:bf:e4:9c:5e:8c:16:35:22:98:06:42:2b:7f:
ae:a7:94:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:18:53 2025 by rpki-client