Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: ykLAntJK8vSpT4GswIeBbffK8X2gEDTWJsoFmKGBz4o=
Subject key identifier: F7:1F:E4:C8:5D:27:7A:E2:7F:C5:16:BA:54:0A:52:6E:B1:3D:7A:DA
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 0196C53AAAB8B47FF3E6EEA8444D8A805CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 0212
Signing time: Mon 12 May 2025 16:01:18 +0000
Manifest this update: Mon 12 May 2025 16:01:18 +0000
Manifest next update: Tue 13 May 2025 16:01:18 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: RNxxeZejr2gZAmiV+m8AV3KxQrGGAvu/xP0WapqvPxg=)
2: rtEx3Op6iiS7UiDW09qCJKnWeDg.roa (hash: 2wI3hDpLjlRGiKeHXtROGiZLVSVg2X+p2EcwYyyykiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:aa:b8:b4:7f:f3:e6:ee:a8:44:4d:8a:80:5c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: May 12 16:01:18 2025 GMT
Not After : May 13 16:01:18 2025 GMT
Subject: CN=f71fe4c85d277ae27fc516ba540a526eb13d7ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3c:40:9d:ae:c3:78:7d:94:31:d0:66:50:23:
40:d8:a0:3d:7d:82:13:0b:2d:26:48:35:e2:b0:19:
7d:50:1c:ad:ea:0c:79:7c:02:c4:e8:4a:e9:60:69:
c3:b4:75:28:a5:98:d2:6d:96:d9:24:97:d1:41:4b:
be:91:c6:ad:58:0a:7e:5e:44:26:a1:b0:79:e7:0e:
1c:b3:68:7d:1c:96:1a:df:75:f6:cf:3a:32:88:d1:
78:13:f9:92:5c:76:a7:a2:40:ed:9b:e5:e8:b7:00:
ab:4c:d1:62:32:43:82:d5:1b:f1:db:71:87:94:5c:
e6:25:28:44:f3:94:6d:d9:00:e7:c6:93:ff:bb:2d:
7c:d0:f5:2a:37:5f:23:f8:91:cb:2c:7c:a7:cb:fd:
55:4a:43:6e:75:ff:a8:db:d2:82:c6:82:2c:1f:9d:
6d:9a:36:92:ce:c4:52:44:e8:c9:eb:e1:61:38:a2:
fa:ef:9e:01:ad:47:32:87:13:ec:7a:bb:88:c1:19:
bb:26:54:ae:09:91:dd:33:ba:b5:9b:c4:4e:cd:5b:
a8:e7:c2:37:73:3e:8d:ad:ad:7f:a6:dc:b9:76:a8:
f9:72:56:67:f0:16:e1:43:6e:55:c6:44:8a:be:70:
e1:f1:f0:3c:3c:0e:7a:56:87:77:76:f5:ca:70:d2:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1F:E4:C8:5D:27:7A:E2:7F:C5:16:BA:54:0A:52:6E:B1:3D:7A:DA
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6c:04:05:ab:bd:de:86:7d:e3:b5:1c:77:51:ec:59:b6:8e:
6d:7d:42:3a:04:75:db:ab:1c:03:58:ce:53:59:ff:1a:98:c9:
39:c8:49:a6:f6:3b:0b:76:21:77:67:b8:29:55:32:76:56:28:
aa:45:b9:da:fe:ce:ad:6f:a7:30:53:3e:68:ea:15:58:f1:44:
e6:77:27:e3:44:09:71:4d:50:b1:68:bc:53:dc:5e:2c:0e:40:
5f:b4:b3:81:a4:cc:26:9f:b1:ee:db:c7:7c:2a:39:ef:2c:4d:
e7:81:22:d0:b8:b3:c4:66:38:ee:73:14:6f:02:34:4a:6f:35:
35:1e:27:38:49:1c:90:22:e4:e4:d3:ab:43:91:57:95:c4:e1:
40:1a:a3:42:77:1a:b0:38:23:da:85:2e:12:99:45:86:3b:b3:
27:ac:91:06:39:93:94:20:e2:86:3b:a6:3a:2b:45:36:69:27:
54:d1:e9:23:f1:c7:c8:2c:be:8d:d7:71:76:70:23:a7:d3:b3:
0a:ea:7c:c0:b5:87:60:33:2b:b2:38:e8:8b:e2:58:0a:2c:e4:
95:b6:03:4a:6e:74:89:bd:87:3b:59:47:44:85:0e:5d:4d:80:
ea:76:df:68:df:27:bb:d5:d1:c2:29:ec:a0:18:23:1a:bc:a1:
b2:20:ec:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:18:44 2025 by rpki-client