Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: EmXs+vE7vko3JZy/Y3ysjI6fCs/VnfpUuh2coDeZaYk=
Subject key identifier: 34:89:06:6E:D5:20:12:2F:67:D5:F4:D4:D2:9A:1D:DF:B0:EE:75:81
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 0196BC001094E908B9AB4D01E6B681DA0084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 153A
Signing time: Sat 10 May 2025 21:00:42 +0000
Manifest this update: Sat 10 May 2025 21:00:42 +0000
Manifest next update: Sun 11 May 2025 21:00:42 +0000
Files and hashes: 1: Dk824yYieLhb3lnVQMoI_RB7E3g.roa (hash: 8CE4AzqmIW8OvhBrwxxjFMn8prAKH8KtnXAsx4//qm0=)
2: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: 7zav4FNoWdpnIABt56R93c2IBDpOEY1CTzjr5nHakSM=)
3: i_nP-RMEFWNsq8wmPatyh47z1H4.roa (hash: LMMjHpph11n+9N5yAaKIxDwK0rOXqWLUsY4TjiEcrdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:10:94:e9:08:b9:ab:4d:01:e6:b6:81:da:00:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: May 10 21:00:42 2025 GMT
Not After : May 11 21:00:42 2025 GMT
Subject: CN=3489066ed520122f67d5f4d4d29a1ddfb0ee7581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:35:a7:31:a9:0a:b2:a1:28:d5:68:2b:fd:62:
a2:39:a0:1e:c5:21:36:c4:2a:04:06:90:45:6f:fb:
c0:8f:db:2b:a2:8e:e1:88:28:e2:3b:81:ef:00:87:
d6:85:fb:3f:73:a8:0b:fd:f5:93:1b:a2:e1:af:9e:
55:6a:b9:8d:9f:9d:c3:6e:9c:c1:82:fc:37:b8:b6:
e1:d3:d5:5a:d9:db:71:37:cf:1f:2b:c0:92:8e:c0:
80:28:ab:38:05:99:96:48:7b:82:fe:b0:c4:eb:64:
fd:7f:99:cf:e1:f3:51:40:4f:f9:ae:a4:11:73:f8:
65:ba:15:af:f8:49:51:1e:81:9c:35:01:03:44:b4:
54:2c:2b:e0:5f:6b:df:56:b8:88:7b:8f:cf:29:29:
79:47:93:e1:77:f9:00:b3:f2:d8:cb:ff:2b:65:27:
62:19:8f:4c:55:a8:b8:05:60:a4:9f:b0:21:52:33:
1e:c1:04:48:d9:d9:58:1b:7e:8b:46:9e:c6:c7:b7:
21:cd:1b:5e:58:c6:58:e9:48:b9:4f:b9:19:f6:00:
c8:d6:bf:e8:86:f3:c7:f4:50:c4:87:8c:9a:12:38:
51:3a:c4:83:57:a4:c0:95:fa:94:e8:c6:5c:c0:07:
f8:77:60:e7:e7:08:4c:12:ac:d3:72:29:6d:dd:20:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:89:06:6E:D5:20:12:2F:67:D5:F4:D4:D2:9A:1D:DF:B0:EE:75:81
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a6:e1:df:8d:ee:7f:25:88:8b:d7:5e:0b:5c:56:b9:60:ab:
0a:3b:f5:4b:f8:c4:dc:92:fb:d3:38:a6:7f:9d:02:4a:ee:24:
17:ec:6d:78:16:82:68:35:39:d0:ef:9a:ef:30:30:96:0c:62:
46:ca:4f:b1:9e:59:17:af:47:0d:89:8b:35:59:b0:46:33:32:
2e:a1:69:d8:b8:7a:90:da:71:32:16:bc:58:31:ef:28:6c:6f:
a4:db:68:f5:b5:af:06:98:31:50:00:dd:27:e9:2c:a8:d3:d7:
f3:be:5b:fa:6d:e2:93:ce:09:93:57:d9:4f:20:69:09:3a:97:
f0:ee:44:f1:5d:4f:4a:69:b2:08:e7:d7:e7:ce:ab:c4:ba:27:
c1:dc:4c:24:b3:9d:56:7f:5d:2a:e7:c7:5c:69:cc:55:6f:6a:
d7:58:0a:3b:67:80:1e:6f:3c:65:89:5e:0c:c6:11:bc:2c:67:
d7:bb:c0:90:50:a4:ac:4a:c0:eb:35:7d:ea:99:7f:c2:e5:96:
bc:ab:94:d3:b9:02:8e:e0:ec:82:a7:9e:bd:6f:fc:25:04:99:
59:fd:3a:5a:d4:b7:b0:16:db:8e:ec:28:83:81:fe:a8:a7:e8:
95:ae:a4:2c:eb:de:08:9e:5f:8f:a2:49:6c:b4:42:45:0f:ed:
3a:10:1b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:04:16 2025 by rpki-client