Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json)
Hash identifier: RPC5AotYasYAbGk9V94BMcGudfgqP+ABiSj4boVr9kY=
Subject key identifier: 59:3E:55:C9:A5:1F:B6:F3:DB:8B:60:DC:7D:9F:3D:D3:E8:75:2D:ED
Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Certificate serial: 0196C1CB06A4FBB6C3756E4AFAF037E57228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
Manifest number: D9
Signing time: Mon 12 May 2025 00:00:30 +0000
Manifest this update: Mon 12 May 2025 00:00:30 +0000
Manifest next update: Tue 13 May 2025 00:00:30 +0000
Files and hashes: 1: 79VsR-5nub7DUrhryJn99r0sSJE.roa (hash: PKoaa5fww3RYvMlarfjIhYGHHPB9uxMDQ5a1vOFmd9k=)
2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: dn9lFNwc9VJvjMfa8/vSXhscTX766NU53qKK1Y1JbwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:06:a4:fb:b6:c3:75:6e:4a:fa:f0:37:e5:72:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Validity
Not Before: May 12 00:00:30 2025 GMT
Not After : May 13 00:00:30 2025 GMT
Subject: CN=593e55c9a51fb6f3db8b60dc7d9f3dd3e8752ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:a0:8a:24:9f:30:e9:01:f9:fe:ae:67:fd:
76:ea:84:5e:33:62:b1:45:04:87:d3:2f:a4:6b:38:
be:a4:2f:ac:c8:b1:b7:7d:85:dd:87:69:59:ef:16:
9f:85:0c:a1:14:fa:4e:77:f2:d9:37:0d:56:86:1c:
44:d1:8a:54:ea:aa:4b:bc:63:a0:73:1b:5f:76:e9:
ed:d6:61:5b:5f:54:a7:97:cc:8c:95:5e:af:3b:d8:
d8:66:1e:4f:f5:b5:e0:74:40:3d:30:c2:af:7b:4f:
17:8a:21:9f:c7:13:45:88:93:52:09:85:15:b0:f8:
72:78:2b:b9:2a:fa:6b:69:2f:9a:5e:6d:2f:ba:9b:
79:fb:7f:94:37:20:d8:bb:aa:bb:ba:94:95:44:6f:
8b:b0:b5:7a:6d:b8:79:c3:ca:76:78:17:91:60:41:
18:92:f1:87:d4:71:0b:7d:d1:09:07:83:14:fd:e8:
dc:2c:13:14:31:86:a5:38:f0:6f:66:88:46:c8:27:
1e:7a:0f:f3:5a:d8:38:06:26:1f:dd:32:39:43:87:
0d:26:17:a5:e2:88:0a:2e:6d:80:e8:a1:41:70:52:
c8:df:09:5d:08:eb:80:94:d3:d1:81:dd:50:dc:bf:
5b:89:85:f7:4b:07:36:17:cb:e1:ca:ce:e0:08:01:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3E:55:C9:A5:1F:B6:F3:DB:8B:60:DC:7D:9F:3D:D3:E8:75:2D:ED
X509v3 Authority Key Identifier:
keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f7:0e:f6:ea:30:b9:72:78:8b:3b:93:ac:ad:e7:c6:db:53:
29:b8:59:78:de:fc:be:41:0e:32:3d:93:c4:fa:19:67:29:78:
a2:d6:e3:53:57:3a:05:8c:fb:15:1a:6c:b0:7f:a7:e4:c1:fd:
3d:27:ef:bb:f9:fe:a0:f0:45:e6:4a:d5:53:aa:32:84:c9:93:
9b:95:f1:94:22:ce:2e:0d:b0:01:25:f5:bc:d2:40:7c:b8:42:
6c:67:3e:2e:ac:66:ba:40:e1:d9:6e:90:38:d5:f2:ee:90:09:
2f:bb:55:f1:f7:41:06:4a:6b:d7:71:e5:be:a4:33:02:73:98:
27:b5:f3:61:85:2c:f3:38:19:db:fe:0f:05:a9:c1:a6:b6:bc:
d1:bd:ce:0f:63:72:c3:d3:36:e1:25:97:7b:15:0c:05:e8:0e:
91:d6:4e:ab:52:db:c3:d5:ed:e0:06:b3:99:5a:bc:ff:38:09:
4e:c4:1c:66:81:3c:24:52:1f:8e:0d:94:ac:41:2e:28:e7:5b:
84:8c:a4:6b:39:2d:ed:43:38:34:99:b6:8b:59:b1:f1:c9:f6:
87:65:7b:3f:6c:8c:11:22:c8:3c:41:bb:7c:b3:12:2b:fa:fe:
6c:5d:6d:6f:ce:72:7f:98:ec:78:b7:8e:10:5f:46:10:25:c5:
d1:b2:f7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:38:08 2025 by rpki-client