Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
File: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft (raw, json)
Hash identifier: DKCKvv1eyI8fPJ3oEHxdib0Tth22plWFJm18s1AtG2k=
Subject key identifier: 98:41:FB:D0:38:29:14:48:D4:85:24:7D:FC:6B:4D:38:54:86:66:C8
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 0196C0EF9CF640383585C944DF0D7132BF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
Manifest number: 154A
Signing time: Sun 11 May 2025 20:00:50 +0000
Manifest this update: Sun 11 May 2025 20:00:50 +0000
Manifest next update: Mon 12 May 2025 20:00:50 +0000
Files and hashes: 1: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl (hash: Fctb4gAWn9VMN3Lz+oN//GPIdZkGsomDEPQdcIZemrw=)
2: hn0oOL_Phy31I2IYdCocfuCMl4Y.roa (hash: pL8SqciTf3yJI1mNpTYcxXjCVmcDvB9gR79xz18ukNA=)
3: n4Gl-s-Z4-ZJ7aZsYXedLjfUwYs.roa (hash: 2ovoFydr5EnhNhzcx+FRnrZsnjvX8pqDu1VDKcopbtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:9c:f6:40:38:35:85:c9:44:df:0d:71:32:bf:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: May 11 20:00:50 2025 GMT
Not After : May 12 20:00:50 2025 GMT
Subject: CN=9841fbd038291448d485247dfc6b4d38548666c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:ee:a7:60:4e:4e:ff:05:4e:44:4a:e2:9a:
94:4f:54:5b:fe:b5:2e:71:6b:ae:e2:f4:fd:9a:c2:
2b:00:75:8a:53:9a:e1:d1:0d:c8:cc:dc:2a:69:e5:
63:03:a4:73:25:0c:af:8c:52:43:09:bc:c0:32:13:
fb:a6:3c:f5:f7:d0:b5:ad:78:c6:fe:b8:f4:9c:38:
49:40:a7:ee:c5:10:6d:fa:54:a2:e1:e2:7a:dc:57:
2f:86:79:a3:52:3f:db:71:75:ad:f2:6b:18:00:28:
a2:e6:0e:a0:07:21:c1:5f:47:79:7a:52:56:1d:9b:
60:5d:db:e0:99:2b:1d:96:03:84:29:8a:9b:9a:e1:
d3:22:ef:4d:77:6d:e1:28:f0:c8:cb:9b:a4:a5:61:
4c:9f:bf:d2:38:0a:5d:96:93:ba:64:36:8c:92:90:
63:cd:f9:5a:41:b8:76:26:47:35:06:9e:02:fe:5c:
0d:9f:92:1c:07:5c:1e:a1:2c:2f:60:05:00:55:d1:
1a:4a:61:2c:0a:19:aa:a2:9b:50:aa:54:47:ad:ae:
de:94:be:69:02:7e:04:c5:92:63:eb:dc:0e:58:c4:
74:6b:a1:1d:b7:b3:bd:0e:cc:83:47:4e:a9:ed:37:
bc:da:9a:d4:85:d0:9a:a1:33:11:2d:bf:6b:6e:8e:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:41:FB:D0:38:29:14:48:D4:85:24:7D:FC:6B:4D:38:54:86:66:C8
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:91:bf:7c:75:b4:23:dc:74:58:3e:30:87:46:a8:8a:d7:56:
0d:02:79:49:5b:34:07:de:29:d6:1c:67:9c:26:4d:f1:75:f3:
48:a8:c7:18:14:49:ec:96:81:5b:ab:f9:19:9b:e8:5e:8f:82:
3a:0e:b8:2f:21:7e:72:8b:ee:ea:9c:47:5d:81:9b:81:5e:e7:
40:87:c7:fe:cf:b5:1c:ac:91:d4:90:90:7d:2a:96:c7:23:3c:
3c:0e:3b:56:5e:10:6d:c9:65:70:99:62:ee:ed:05:49:de:8c:
37:f2:6e:df:cd:e4:6f:9b:fa:1a:83:e8:fa:eb:e6:94:22:6c:
cc:61:09:fa:c4:30:f2:b1:63:ff:10:bb:58:1b:0d:2f:c1:95:
9f:82:38:b6:11:ad:dd:d5:00:ec:92:8d:c9:d0:ac:7f:69:b6:
a2:74:4e:4d:74:f2:16:38:f8:7e:73:00:44:f7:0d:da:db:a7:
9a:8a:db:97:05:f8:e7:6d:ce:a9:9e:bc:10:d2:d1:0a:77:d0:
c9:ff:e8:90:ad:93:44:31:20:c1:58:b0:32:bf:6f:c4:f0:69:
75:30:1d:16:23:80:14:1c:0f:c2:ae:45:c8:8d:d9:39:27:c7:
43:a7:4e:6e:8d:f5:c1:08:68:85:2a:7a:53:c9:f8:e1:2e:4b:
c3:97:97:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:19:27 2025 by rpki-client