Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: MVq8/UrlVQKyYnlcIO/h0NxKnPAKyt0AGhqhN6rss0s=
Subject key identifier: EF:46:B3:42:1D:D4:2B:5B:CD:64:FD:1A:68:0C:37:FD:C4:5A:16:B1
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 0196CE3D4CFF858298F62D9E6D9C5F09C0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 021F
Signing time: Wed 14 May 2025 10:00:45 +0000
Manifest this update: Wed 14 May 2025 10:00:45 +0000
Manifest next update: Thu 15 May 2025 10:00:45 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: iI90yZqa+eKq+6Nc3Fj+Z2nZw/zrlLrluLmvGS4+C30=)
2: NOYTh7ZlTxAFEDHg6RZrbrrgktU.roa (hash: tsOnlXCMm1Zkvk7dgvDTsJOertYGX+iBxLbtlWab/tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:3d:4c:ff:85:82:98:f6:2d:9e:6d:9c:5f:09:c0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: May 14 10:00:45 2025 GMT
Not After : May 15 10:00:45 2025 GMT
Subject: CN=ef46b3421dd42b5bcd64fd1a680c37fdc45a16b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:ba:36:04:4c:30:ac:e3:3f:3f:bb:dc:b8:
24:fa:eb:cb:8d:f0:d0:3f:9a:c5:f8:fa:0f:6d:43:
6a:dc:50:34:15:12:e3:da:73:64:44:17:6a:91:ae:
47:5a:1e:b3:68:0c:3f:ee:4a:60:b0:f9:72:bf:27:
7c:89:53:04:ed:80:06:52:9f:78:f2:90:f4:17:df:
c5:ed:4a:7b:91:05:d8:88:cd:80:69:32:63:15:61:
b6:bd:b2:47:0d:e6:0b:7f:21:34:76:36:c0:cd:74:
04:c6:e3:f7:50:cd:76:86:2e:81:b6:5a:ee:20:6b:
dd:9f:c2:a6:7f:e7:df:36:00:3a:8f:27:0c:41:3d:
4f:41:2c:b5:34:72:81:ba:91:b3:96:bf:80:97:10:
3b:7c:cc:73:3c:bb:b3:ae:74:4b:53:c1:4a:93:50:
f5:c0:ed:fb:b4:cd:30:fc:07:d0:39:77:f5:a7:49:
d2:1d:ac:ed:a8:b4:2d:f0:52:9e:e1:41:56:95:0c:
48:5f:42:32:6d:f9:09:02:ad:06:a0:fd:cd:a0:f5:
1b:bc:0a:72:3d:81:fe:31:4b:02:e3:08:d4:cc:37:
fe:c2:66:79:77:bf:e2:e8:8b:68:b5:9e:b2:96:39:
3e:cb:2e:ec:28:26:75:3d:13:9b:af:09:01:6c:59:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:46:B3:42:1D:D4:2B:5B:CD:64:FD:1A:68:0C:37:FD:C4:5A:16:B1
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9e:6b:f9:8d:00:d1:45:3f:01:bd:9e:8a:f8:d9:1b:ff:8f:
72:f4:0f:42:fe:4c:89:90:c2:ee:c9:35:17:79:c2:3c:9f:26:
e7:d9:5d:0b:60:d3:cf:70:70:20:ec:fd:97:67:e9:24:ce:f5:
24:d0:1a:39:bb:a9:ad:cb:22:27:e6:4c:69:c4:e4:46:cd:86:
22:5c:36:4e:4a:e8:35:34:d1:1e:93:99:51:10:85:71:31:0d:
ee:04:70:8a:0c:88:9e:e5:cb:22:54:e5:8b:48:06:ae:34:54:
04:3b:f7:85:47:6a:5c:96:00:82:09:10:62:65:4a:07:2a:4e:
30:c0:c3:c1:5a:bd:ff:c6:b3:c2:25:a9:5d:47:5f:2f:ac:84:
b7:df:51:f9:d2:dc:b4:1e:46:32:df:9e:71:fc:48:2f:52:09:
12:84:dd:d9:62:52:6e:cf:30:9d:06:85:1e:7b:06:98:fe:ef:
62:f2:7c:34:ef:0b:9c:d1:3b:5b:41:33:d1:74:50:5f:ed:3d:
84:01:30:09:ed:3c:e3:b7:b3:b2:f7:aa:79:0d:c5:7a:81:35:
b6:c0:8f:5f:cb:3d:77:3b:9b:65:13:38:e8:be:c1:41:de:27:
f0:ba:e7:dc:3d:77:9c:61:4e:2f:81:06:3d:70:6a:0c:45:d8:
05:fc:18:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:38:07 2025 by rpki-client