Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
File: DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json)
Hash identifier: B4FR61KK2qQRwrT10XqPlKFGRG91w7t7zn4rjplGf3w=
Subject key identifier: B6:82:DB:4F:84:1F:13:19:D1:19:EF:36:D1:FF:F3:E4:07:09:7B:B0
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial: 0196C94D7C7C841EFA376063CED8CEE5115E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 11:00:20 +0000
Manifest this update: Tue 13 May 2025 11:00:20 +0000
Manifest next update: Wed 14 May 2025 11:00:20 +0000
Files and hashes: 1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: UuRWf17f+W969Ba7jZtEfWpmr2UfLII/c11Nm8mo854=)
2: x2MfmeFdkAhvqtMnijQj44RaTsU.roa (hash: vo8DVrtFsZbAKsU4/jySKYry7q+PSUACGGuHHoeRqBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:4d:7c:7c:84:1e:fa:37:60:63:ce:d8:ce:e5:11:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Validity
Not Before: May 13 11:00:20 2025 GMT
Not After : May 14 11:00:20 2025 GMT
Subject: CN=b682db4f841f1319d119ef36d1fff3e407097bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:7f:d2:d7:6a:fa:8d:b8:3c:7c:73:27:03:
41:15:07:e2:72:55:65:ed:36:96:f8:54:ae:5d:5d:
9b:ed:ca:49:90:21:ab:26:e8:f3:32:cf:a0:1e:74:
58:47:8b:d1:e9:78:6b:a8:15:e2:21:46:ba:f3:d7:
06:70:6f:52:8e:8e:ba:29:c7:9f:bb:e2:ba:68:68:
c9:f7:d0:60:bb:9d:0d:b5:51:89:3f:83:0a:5c:ce:
d4:c7:ad:22:d6:a2:d0:2a:eb:bd:75:a3:7a:cc:73:
45:73:de:0a:28:53:e0:82:76:7f:4c:8f:f9:2a:c3:
31:be:2f:19:73:46:74:70:f7:40:76:ea:c3:3e:07:
7f:cf:83:b2:37:93:0c:75:ac:9f:9a:cf:45:3a:36:
88:4a:24:30:e7:5e:aa:ad:21:6d:95:6f:37:2e:f7:
28:9c:f1:cb:68:05:40:4e:37:2b:df:04:3e:0c:1b:
df:0e:bd:01:a3:75:f8:62:e1:4f:4a:8a:f0:13:4e:
d0:32:58:32:d1:90:b8:9b:dc:7e:10:d9:1c:25:12:
01:a7:a3:e8:68:34:b1:8b:65:77:a2:27:e5:2f:9d:
86:c5:0b:6a:df:af:a7:05:05:82:c7:75:fa:c2:84:
48:53:bc:d7:ed:89:86:67:fb:f3:93:ad:18:48:e4:
b8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:82:DB:4F:84:1F:13:19:D1:19:EF:36:D1:FF:F3:E4:07:09:7B:B0
X509v3 Authority Key Identifier:
keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:79:1d:98:e4:c0:2c:b1:3c:10:c3:a7:b4:68:93:2b:9c:da:
30:f0:95:c7:0e:a9:93:67:cf:cc:3d:70:0c:24:d8:17:dc:d2:
29:02:2c:e7:c8:af:e3:38:13:06:ee:d4:53:2c:77:3d:6c:19:
32:08:31:45:6c:49:64:b9:30:bc:96:ba:49:2c:6f:96:13:97:
36:9b:a8:15:81:39:ea:99:e0:c0:5f:c4:00:f1:03:48:8b:be:
0a:5e:b1:0a:45:e0:82:59:23:22:3c:a1:9d:bc:20:5d:f9:6c:
e0:cc:18:53:52:e9:4b:b2:ef:5e:63:ce:a0:19:e5:f3:77:b6:
ed:54:91:26:36:33:f6:91:25:24:49:7b:52:8f:1b:76:b6:06:
48:fc:0c:d1:86:bd:1b:89:04:e3:7d:54:92:1e:18:41:42:ef:
00:29:de:07:48:43:e2:a9:bf:be:20:25:e0:5b:91:62:d1:0d:
f9:4e:07:9e:a0:57:ab:8d:f9:a3:83:90:b7:8b:63:3d:23:3c:
ee:4e:b4:ed:cd:6a:0e:b0:90:e9:b7:dc:8d:e3:c4:2d:08:7f:
d8:b9:66:b9:7a:ca:70:ea:21:5d:88:ef:84:76:b3:99:cd:6c:
c6:9f:1c:01:e2:4f:38:3b:38:7b:77:f2:d9:2d:14:f5:18:25:
c9:5c:38:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:39:30 2025 by rpki-client