Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
File: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft (raw, json)
Hash identifier: vF4GJ2HG6IcgngYnLtQXQ/trV3muq3RDx5gVcQdNafs=
Subject key identifier: FF:A0:41:D2:DA:8E:9B:98:85:56:29:5F:C5:91:9C:24:6F:70:DB:B2
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Certificate issuer: /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial: 0196BB91D91E7F39F2119686EA1F5160C411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 19:00:19 +0000
Manifest this update: Sat 10 May 2025 19:00:19 +0000
Manifest next update: Sun 11 May 2025 19:00:19 +0000
Files and hashes: 1: 8o1O-t_WKzJXOkGFsMQUN6blBp0.roa (hash: KBCGb1hk/sBmmTgro2o9IaPB/nx00oBvONm6CxD0Y2w=)
2: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl (hash: 9eY+q2JZCMFfzVTNLYAMOVw9UzLm+ZiKzxjNMM2fK30=)
3: aW93vIod8bw9akpUiGgWH-EgLiE.roa (hash: qyblENK3boODcPRYexEWYW0qmMFYuF1Qh/Vo8m2KhS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:d9:1e:7f:39:f2:11:96:86:ea:1f:51:60:c4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Validity
Not Before: May 10 19:00:19 2025 GMT
Not After : May 11 19:00:19 2025 GMT
Subject: CN=ffa041d2da8e9b988556295fc5919c246f70dbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:14:3c:96:93:d5:18:6f:07:9a:f4:67:c9:1f:
5b:d6:a2:81:0c:9f:b1:ac:3e:51:a2:7f:16:10:7a:
4c:9d:5c:d2:2d:04:dd:61:02:07:c4:19:22:b8:83:
c4:11:c6:71:d1:4a:fb:4a:0f:49:49:a6:c0:0b:5f:
0d:c9:e0:eb:fe:e8:37:2a:3a:86:b5:0e:d9:00:21:
dc:22:ff:45:ff:de:65:c2:5c:e1:82:a4:13:1b:9e:
c3:1a:27:09:55:b3:2e:61:d8:10:c1:57:8e:e0:2f:
75:da:f0:c5:58:08:1d:2f:1d:b4:0d:28:dc:5b:ed:
4d:93:44:14:02:88:0b:c3:9c:23:e8:11:10:0b:f4:
af:d6:3a:3e:e2:12:87:ea:fa:f1:cb:82:d2:5e:56:
93:69:82:52:dd:ca:2a:88:68:c8:2b:d2:e3:b3:4b:
f5:b1:56:a6:67:d7:19:7f:5b:9b:65:aa:d4:04:43:
2e:be:ec:64:5f:3f:4d:ff:4b:08:24:d3:dd:a7:b5:
41:2b:94:88:e7:94:a1:7f:6d:e4:c2:f6:62:91:7b:
4d:74:e5:11:9a:0b:a4:9e:25:fe:94:60:6d:45:e9:
76:d4:16:ce:ad:22:d5:2b:ab:35:68:cb:68:0c:8d:
69:de:d1:d6:09:9a:a3:76:4f:79:7c:b6:aa:9e:15:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A0:41:D2:DA:8E:9B:98:85:56:29:5F:C5:91:9C:24:6F:70:DB:B2
X509v3 Authority Key Identifier:
keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fb:06:44:81:c5:a3:75:d8:85:b3:b3:34:fe:3a:0d:17:93:
a9:ea:be:1a:11:3e:70:3c:14:ad:b4:68:29:2b:de:09:91:4f:
67:2e:66:66:08:a4:cb:50:be:5e:ec:af:c7:9f:1c:21:4f:2c:
63:d3:38:9f:93:0d:7f:61:af:fe:58:22:dc:b6:64:e2:14:cb:
b6:2a:8f:89:78:95:0c:72:4f:d7:df:ac:0b:7f:f9:9f:17:df:
d7:0e:1a:a9:27:fc:6b:97:a3:66:69:e7:6e:ee:06:07:29:3c:
0e:2e:75:7b:7c:2d:a9:17:56:ac:0d:68:b7:0a:f0:b4:04:8f:
5c:17:fd:d3:3f:17:4c:02:70:06:bd:27:bc:e9:2b:04:29:07:
b5:1f:d9:76:1c:da:a0:9f:e7:ff:77:1d:32:03:1e:d6:2f:3d:
2e:24:6b:46:1e:cf:fb:91:70:b1:04:69:a0:b8:88:53:18:d5:
f5:4a:f0:70:20:94:17:78:d8:ac:f2:1d:b4:5c:e3:3b:61:98:
cc:45:de:c3:88:fc:0b:40:c8:8a:06:b1:3f:6d:5c:d2:8e:27:
3e:a1:48:41:78:e6:a1:a1:28:00:dc:cc:15:d1:90:eb:8c:1f:
be:37:22:23:18:86:df:fd:9b:d5:cd:8e:3b:5c:8f:17:92:bc:
b7:65:55:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:20:30 2025 by rpki-client