Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json)
Hash identifier: AimqLBavD3ZJifDuIdIR3jL3XH/UPA4x55+F3hPcrJI=
Subject key identifier: C4:2B:F8:35:BE:18:12:9F:5D:9A:ED:34:27:03:B2:8C:55:8B:C6:AD
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial: 0196C013DAD670B79B097765C13B3096462A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
Manifest number: 153C
Signing time: Sun 11 May 2025 16:00:48 +0000
Manifest this update: Sun 11 May 2025 16:00:48 +0000
Manifest next update: Mon 12 May 2025 16:00:48 +0000
Files and hashes: 1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: wiYJBaOkW/flHpfPIGT0r2gOJlmRK1y0zxkHPuWcDcE=)
2: UfRDoAWDKGsXBQFJZfp7lG85sGU.roa (hash: 9M4lkZntB8nlVH2p7zUMp7EJK070pmxoOnJnaHWBY5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:da:d6:70:b7:9b:09:77:65:c1:3b:30:96:46:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Validity
Not Before: May 11 16:00:48 2025 GMT
Not After : May 12 16:00:48 2025 GMT
Subject: CN=c42bf835be18129f5d9aed342703b28c558bc6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:69:9d:a8:f8:1b:6f:33:13:be:00:fe:b4:
b7:c2:ed:19:15:81:5b:ef:6f:e0:6d:8a:97:b9:37:
24:11:fb:55:dd:f9:38:59:94:25:bf:24:65:1d:1f:
da:18:ea:eb:7e:3d:f0:54:c8:57:73:5f:da:51:10:
67:93:b9:e9:8d:80:9e:d8:c0:71:26:67:bd:2e:cd:
fd:50:9d:98:ae:43:5f:f0:36:e4:da:78:83:c5:ef:
98:8f:b1:83:6e:09:49:a8:bc:db:58:34:48:68:18:
cd:19:0c:50:b6:c4:7c:5b:75:c3:b2:81:ec:cc:3e:
ca:cf:a0:6b:49:d5:06:10:c3:aa:b1:15:2a:b3:71:
ba:52:1e:3f:20:d4:d3:1d:a7:96:35:48:9f:55:b1:
95:d6:a7:a2:c5:55:7c:4b:a5:ca:50:10:70:8e:93:
9f:a5:44:1f:4b:db:72:16:fd:75:c3:28:0c:93:bd:
8a:74:36:28:c7:7a:20:cb:8c:4e:07:f1:fa:9a:ea:
8b:49:96:bf:f7:59:95:ac:17:cb:85:2a:5c:51:c7:
9c:7b:56:8a:8b:af:c6:7f:34:5a:12:44:18:65:7c:
af:a4:9a:29:ad:99:7d:a2:1d:27:21:b5:cc:c1:dc:
2f:43:e0:96:71:c8:dd:40:fc:2c:4f:1f:e4:0b:1e:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2B:F8:35:BE:18:12:9F:5D:9A:ED:34:27:03:B2:8C:55:8B:C6:AD
X509v3 Authority Key Identifier:
keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:2f:76:30:26:c4:e8:4d:94:95:82:a0:27:13:82:03:74:2b:
de:49:f8:00:0c:7c:e0:ae:7b:35:a8:b4:24:16:02:7a:4a:0d:
04:92:aa:f9:87:bb:90:91:31:ed:af:d1:4e:c3:d1:ae:f4:f0:
2d:e1:99:cb:eb:3d:85:67:01:86:a3:01:ee:d0:ad:b2:81:94:
51:10:79:b0:70:af:9a:e3:f9:be:1e:6c:e6:b8:63:ca:ec:7f:
ba:18:ed:a5:18:f1:d4:53:de:dc:31:95:58:34:81:22:91:ab:
ce:d5:a3:05:d7:5b:39:a2:b4:4c:8b:fc:e1:44:06:9f:e2:f0:
44:75:ab:98:25:41:41:e2:e6:9e:b8:56:1e:bf:8f:76:43:e6:
0d:0e:9c:1e:f5:a9:05:64:a2:b2:fe:65:e7:be:98:ff:b6:50:
49:70:ac:5f:99:6a:41:eb:a5:65:52:75:1a:6c:dc:02:b5:f7:
21:b4:c6:49:dd:0b:27:c6:7c:4a:59:77:8e:43:a1:66:17:ac:
b4:32:f9:b6:d7:5b:af:52:64:de:48:11:77:1a:4c:35:d2:ec:
30:b5:22:1a:95:85:2a:18:93:08:44:bb:f9:7b:7b:59:eb:f2:
2a:1e:5f:82:83:0e:fb:e2:5d:ed:da:b1:45:e1:34:f9:82:04:
ac:b9:1b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:07:22 2025 by rpki-client