Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: J7h1NeFHQXwGFMIOyUMcqlh5XXjedErblYc2LHztH20=
Subject key identifier: 6A:48:91:FE:B6:E1:03:80:30:5A:11:C5:36:C9:9A:EC:F4:5E:BC:F9
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 0196A4D34932D6EF6A0697ECD92387EFFBB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 0B3B
Signing time: Tue 06 May 2025 09:00:32 +0000
Manifest this update: Tue 06 May 2025 09:00:32 +0000
Manifest next update: Wed 07 May 2025 09:00:32 +0000
Files and hashes: 1: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: 6xcR0FP+zszVW8KQRU6w4Zd6Zbudu9THZieLFQwMoAc=)
2: VZiF-Ol32xpPvgDNLsgn8o2ll8Q.roa (hash: jUXaFXCucr/kHxmzz2/hS3PZ0b17pBJZMH+/2Ezk2nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d3:49:32:d6:ef:6a:06:97:ec:d9:23:87:ef:fb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: May 6 09:00:32 2025 GMT
Not After : May 7 09:00:32 2025 GMT
Subject: CN=6a4891feb6e10380305a11c536c99aecf45ebcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:36:26:17:f1:00:6f:21:0f:0a:df:9f:b4:
52:73:93:0b:bc:8c:7f:98:f6:00:a8:6d:5a:79:ad:
a8:d4:bf:60:1a:bd:a2:42:d0:81:b4:a9:bf:a3:11:
1d:12:9c:d2:78:e9:51:a9:ea:d1:23:08:79:4b:2a:
dd:55:24:c6:8a:0a:80:d9:6d:15:7b:04:27:2f:14:
c3:e0:f9:b7:87:a9:17:16:8f:bc:3d:ce:43:f7:cc:
3c:0a:e6:01:9f:09:1c:42:21:38:ba:89:e2:d3:89:
7f:4f:87:9e:5c:ea:85:74:47:3b:c8:30:3b:43:de:
e7:16:91:97:c1:44:00:20:17:1f:a8:6f:dd:36:ce:
21:90:8c:c5:73:63:2b:09:13:c5:4e:7c:df:b5:7e:
0c:12:10:41:0d:79:a6:c1:cb:b7:c6:72:e0:c4:b4:
2b:7c:af:57:76:2f:19:cb:5c:dd:89:fc:5c:39:7c:
30:d1:ea:ec:d8:2d:0d:29:62:19:a5:a2:e0:96:c4:
9b:5a:14:3c:bf:d7:d0:fd:4d:7a:12:82:f4:85:fe:
98:cb:c5:1e:72:1f:97:b2:7a:d3:07:ba:ca:f2:61:
dc:bf:7e:52:6b:a6:a9:b6:e4:5c:c8:dd:95:0a:b0:
cf:bd:0e:d3:24:89:ec:11:b3:1a:76:7f:4e:84:ea:
f5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:48:91:FE:B6:E1:03:80:30:5A:11:C5:36:C9:9A:EC:F4:5E:BC:F9
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:64:50:63:b8:51:96:62:fd:87:c5:45:b3:9d:1e:6a:c0:91:
ab:e5:02:2e:68:85:ac:37:85:50:4b:1f:56:2d:1d:a1:50:88:
d0:f6:0b:bf:e7:34:4c:5e:a0:d7:9f:d5:2b:f5:fd:6c:e3:36:
3e:99:59:c3:0e:eb:4f:2c:4f:07:cf:8d:95:30:e0:b2:17:ba:
6c:b2:86:b4:67:a3:46:0f:8f:26:48:62:7b:cf:da:6d:99:c4:
11:e6:f0:ea:41:16:8c:03:78:61:15:d8:c1:54:c4:52:a1:07:
8a:d9:e0:65:da:f5:89:f8:14:07:14:dd:3a:c1:1c:3b:2a:5c:
c4:71:79:c5:96:54:4e:7f:d6:21:77:08:bd:4f:1f:97:41:1f:
72:b6:73:d1:78:29:51:90:26:0f:af:f5:5a:1e:61:da:55:07:
8d:30:ed:da:aa:45:7d:3c:cd:81:09:f1:b8:f4:ad:54:07:e7:
cb:68:da:ca:89:5a:b2:04:92:eb:7f:28:2d:52:d0:0f:68:1d:
90:fa:17:ad:3d:20:3b:89:f6:e7:cb:cb:6a:f8:41:b9:b8:87:
5c:03:fb:c4:4b:ed:cb:6e:69:3d:33:1d:d3:d2:71:27:d2:bc:
c6:33:82:6f:b4:0b:f8:b8:84:f5:24:16:9a:b4:79:47:76:4f:
08:f9:b5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:53:52 2025 by rpki-client