Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
File: DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json)
Hash identifier: 2mn1aO81GMAQZYSpjb4YV1XmEdMp2SC2TWhNNqwxkr0=
Subject key identifier: 63:CF:36:D8:3F:A0:85:B1:83:90:B0:26:29:95:40:AA:8F:13:06:EB
Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
Certificate issuer: /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Certificate serial: 01969ED0F9DBA9D1CB0807F1534184CCF574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 05:00:17 +0000
Manifest this update: Mon 05 May 2025 05:00:17 +0000
Manifest next update: Tue 06 May 2025 05:00:17 +0000
Files and hashes: 1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: /+U5eC16587Jng4rBkO8s92RVW8VRQyjfIgFkCBX4tg=)
2: YeUbav6EAp2mAnn2v72RBK_mFZw.roa (hash: 6lsjmApYWIJWgcJbH7Xr/EBHcstui66uMy/hUDB8r3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d0:f9:db:a9:d1:cb:08:07:f1:53:41:84:cc:f5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Validity
Not Before: May 5 05:00:17 2025 GMT
Not After : May 6 05:00:17 2025 GMT
Subject: CN=63cf36d83fa085b18390b026299540aa8f1306eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:8b:34:e6:db:9c:85:a0:4d:e1:9f:70:1d:
c8:9e:f5:f1:8f:a6:c7:64:03:c6:b3:d7:47:53:4f:
f5:58:62:60:53:1b:f0:7c:01:1a:39:3a:0c:45:8d:
f5:10:02:9b:ef:2d:8f:4a:a5:7d:de:63:98:35:7d:
94:8b:a5:39:2e:e0:ad:55:ac:1c:26:49:59:1d:fb:
4c:60:63:34:b4:7d:11:37:6d:02:c4:f6:ec:5b:df:
30:ee:85:24:9b:a9:c4:55:27:63:8c:15:83:e4:27:
a5:f8:ef:26:9c:f0:90:3f:21:9f:5c:d1:b6:9c:85:
49:8f:18:56:21:3c:d8:9b:50:27:86:41:23:3a:2f:
37:57:6c:09:5b:bf:77:dd:96:f0:c2:88:17:65:5d:
f6:39:54:36:15:b5:ed:2a:14:d5:4c:c0:3e:c7:5e:
c0:6a:4b:ea:f9:9f:e1:bc:c2:3f:a8:4d:b7:36:96:
7a:f1:c8:cb:b0:c6:2f:47:35:62:3c:36:a4:42:75:
a2:4d:2e:29:7a:76:e8:61:70:59:dd:a7:dc:0f:9d:
fb:66:96:18:2a:5e:f0:f7:00:86:ad:8f:21:b8:30:
3f:22:23:00:d1:eb:51:02:95:2d:35:26:51:f7:8a:
e2:4c:ab:e1:59:10:3e:27:12:0f:17:29:a0:93:1c:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CF:36:D8:3F:A0:85:B1:83:90:B0:26:29:95:40:AA:8F:13:06:EB
X509v3 Authority Key Identifier:
keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:94:3e:f1:fe:cb:3e:2c:68:bd:ff:8c:a0:12:d4:44:6a:b2:
82:94:c2:3b:6f:3b:8f:57:6b:df:7d:50:a5:45:2f:c8:74:f0:
79:af:20:ec:ee:a6:44:19:51:c5:d4:78:1a:eb:b0:15:de:0d:
8c:00:20:28:6e:0d:58:0e:a8:79:e6:eb:9a:66:be:bc:20:1d:
80:96:57:33:e4:1d:6b:45:db:54:69:50:c1:b4:81:ae:c7:37:
14:e4:21:59:91:23:80:16:ea:d8:05:34:fd:03:4a:f8:31:fc:
71:5c:17:81:5e:a8:5a:21:d7:17:7c:62:d6:43:da:2d:8f:61:
12:2b:ef:49:0f:07:af:b4:7c:fc:4b:b0:12:4b:33:f8:9e:ee:
7f:3f:85:1f:39:d4:29:78:72:2c:d6:f1:a7:4b:cd:44:95:83:
6a:51:dd:4e:a5:0b:79:07:d0:6c:8f:e1:62:b9:a0:bd:9c:f8:
94:79:65:c6:86:83:5d:e2:93:8a:00:6a:a3:66:9b:d0:ee:0c:
2e:8a:c7:26:dc:7d:e0:4c:4b:16:34:dd:3b:33:cb:13:7b:1f:
e6:ab:77:e2:11:e8:e2:ed:55:ea:bc:71:95:ee:f2:3f:04:36:
cb:7b:79:fa:f7:8c:60:6a:28:01:41:a6:47:42:06:17:04:bc:
9a:bc:76:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:11:28 2025 by rpki-client