Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
File: 0deIJuFxfsmT62TdEYeHawZej1g.mft (raw, json)
Hash identifier: 6MjMW0Zyy64f9NqV+qCdQzk4pkxk9znEX6hpIjURNYM=
Subject key identifier: 24:3A:82:22:3E:2F:21:27:0F:F8:A3:23:C5:08:D4:13:5F:C2:FD:20
Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
Certificate issuer: /CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Certificate serial: 0196A3C102B7E8A1796194512B3CA84D97D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
Manifest number: 0CEB
Signing time: Tue 06 May 2025 04:00:57 +0000
Manifest this update: Tue 06 May 2025 04:00:57 +0000
Manifest next update: Wed 07 May 2025 04:00:57 +0000
Files and hashes: 1: 0deIJuFxfsmT62TdEYeHawZej1g.crl (hash: hwn3uJVQJDurRICxSFI3FrKaeXsQuefRU6eecV6WTYI=)
2: iNP53awYopMvAC4_B7BQl71kOxY.roa (hash: bB0RVg76/44F7S9NnPgzE3dfYBZqeAvXewkbyz58CrI=)
3: lsnXG1QZQcE8MO7Sy6Rk0--VHVo.roa (hash: H6uKA8IXZMicdWaKzhjJe9pvq8QiwubQ+Jp2iPiiq2o=)
4: tO7FKCFax-gtGeKJuusgZ6pHQQ8.roa (hash: o1Lh17vyaKAVv+dEziVl9qAFWYzZNADmVMYgNFzVQxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c1:02:b7:e8:a1:79:61:94:51:2b:3c:a8:4d:97:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Validity
Not Before: May 6 04:00:57 2025 GMT
Not After : May 7 04:00:57 2025 GMT
Subject: CN=243a82223e2f21270ff8a323c508d4135fc2fd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:3c:8a:9a:03:a2:83:02:b6:22:69:fe:70:
3a:c7:eb:8f:9c:40:09:aa:5d:c5:e2:9a:7a:5a:0e:
e4:2f:59:46:2e:1f:55:7a:07:e3:18:68:32:58:a0:
00:b7:17:18:5e:19:3d:fa:91:d2:35:3e:c7:b4:ec:
53:7c:b5:e4:da:b7:4b:13:d3:f0:78:a4:6d:e4:5a:
0b:da:d2:4b:39:b0:84:a0:ec:75:aa:bf:03:a3:4f:
92:50:cc:4b:8f:b8:74:65:24:68:06:c9:a4:0e:93:
f0:57:8a:8a:7b:d4:9e:ae:17:2e:57:42:4e:53:51:
12:68:27:e5:87:d2:e8:d1:b8:2a:d7:ca:fd:6d:52:
71:86:af:56:6b:17:c3:f5:68:8b:f7:40:70:72:d2:
8c:eb:6d:7c:ad:ca:57:b7:2a:28:7c:ea:96:93:82:
4d:20:7c:14:e1:61:17:1f:6b:7d:19:83:26:97:c7:
53:cc:21:f0:2c:38:ae:4d:58:2e:a3:a8:5c:60:61:
55:f1:55:2b:c2:c3:e7:d4:16:61:44:6e:ea:05:d3:
62:3e:06:fa:6c:2e:5e:b6:f6:aa:35:6d:79:a6:f1:
b2:6b:0c:98:09:97:d5:35:11:fb:aa:9b:6c:28:4a:
4e:76:d8:79:32:a6:25:f5:19:c3:0f:d7:43:bc:75:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3A:82:22:3E:2F:21:27:0F:F8:A3:23:C5:08:D4:13:5F:C2:FD:20
X509v3 Authority Key Identifier:
keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7a:01:cc:16:26:90:dd:4c:09:77:72:a4:de:0a:9e:f1:8c:
3a:fc:39:c5:fa:09:29:23:e8:f9:dd:86:c5:81:46:75:9e:a0:
b2:d8:57:b7:7d:e9:a0:e2:2b:0c:c8:7a:ba:81:b6:d9:fd:90:
b0:3e:60:d4:59:26:53:85:bd:5a:34:a1:c3:ec:8a:52:35:2d:
a9:2d:7b:09:a2:2e:ae:ca:c9:1e:b8:56:ad:d3:fa:64:05:78:
47:a9:e1:6f:25:3a:c6:71:3b:eb:9f:74:9a:10:6b:3a:df:e6:
d3:1d:12:b8:64:bb:2c:fa:ec:00:56:65:b2:60:af:df:0a:0b:
9e:28:18:ea:82:05:69:e4:db:6f:ab:8a:7e:64:2a:54:f1:b5:
ae:aa:16:b4:6c:f5:80:37:16:4e:3e:94:d5:c6:64:23:0a:09:
29:89:31:72:83:1e:76:f4:b8:24:e2:c7:3e:89:14:84:82:13:
d6:95:6f:21:b7:87:46:47:e6:17:a2:b1:52:25:dc:6e:08:25:
55:b3:95:bb:27:be:d1:ea:94:9e:06:f8:b5:85:75:41:39:bc:
2b:5b:dc:3c:65:4e:8a:ca:ff:22:31:c2:d2:f6:21:8c:91:03:
5b:b7:db:3b:35:e4:1b:50:f9:1c:6d:a8:61:18:19:dd:04:c2:
a6:77:a3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:32:59 2025 by rpki-client