Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier: hA61/Mzk/XTCpBxEPSzakZhEjkGGMtitDw7f/u7KxIo=
Subject key identifier: D5:4A:CF:38:48:25:84:24:0F:22:85:B7:BB:C4:92:F3:95:01:18:48
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 0196A01AA12D67A89EC729674D91678A12FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number: 12EA
Signing time: Mon 05 May 2025 11:00:21 +0000
Manifest this update: Mon 05 May 2025 11:00:21 +0000
Manifest next update: Tue 06 May 2025 11:00:21 +0000
Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: qVTYH5PIBtO8K7uY2gDoaL9Ab5nCErXE4cj8SJE4vrs=)
2: ka4zet-SkUrSnEvI5_4fHR-JIQI.roa (hash: EBw/ap+q2JTBNlcLQGiKoKAynchkYNGQi71a58xmflM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:a1:2d:67:a8:9e:c7:29:67:4d:91:67:8a:12:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: May 5 11:00:21 2025 GMT
Not After : May 6 11:00:21 2025 GMT
Subject: CN=d54acf38482584240f2285b7bbc492f395011848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:f5:c4:52:db:31:d5:17:51:f9:d1:bf:f9:
87:ac:c1:17:fb:bf:a5:e7:78:17:38:bf:6d:6d:39:
b6:b8:b8:5c:ae:cf:d9:2c:19:d4:f7:7c:da:94:ad:
5a:8b:d9:70:0a:ab:d6:1f:7f:54:0c:50:fd:43:4e:
51:28:34:75:09:8a:c8:43:93:65:e6:db:2a:1d:48:
af:8b:d6:95:cb:3f:ac:a1:8c:6e:0c:d8:ff:3d:a6:
c5:f1:0c:22:26:bb:c7:6e:b3:35:c0:dd:3b:bc:af:
29:f3:43:8f:9e:75:a6:73:c6:03:63:bb:fe:0d:e6:
db:20:fb:a9:ad:52:82:18:0b:4a:ef:43:f8:d9:f2:
53:ac:3e:d5:5d:17:d1:93:24:58:ed:ee:45:34:b2:
a2:cb:67:c1:75:b3:ea:10:0a:7d:ea:5a:8a:9d:20:
6b:7b:12:83:e1:af:b7:bc:16:08:09:a6:59:2b:80:
60:cd:32:b9:8f:d0:f0:7b:c4:e2:62:e8:af:b3:ff:
07:d9:d9:53:65:dd:c4:60:b1:66:56:d7:ef:43:94:
99:2e:5a:ef:4e:7b:93:c6:a7:96:53:5f:22:9f:8a:
d7:e1:79:2a:df:99:9e:5f:55:6d:8d:f2:51:f5:a6:
e9:58:17:ad:f8:16:4f:a2:3c:2d:86:d8:93:b8:76:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4A:CF:38:48:25:84:24:0F:22:85:B7:BB:C4:92:F3:95:01:18:48
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4e:b6:26:68:bc:12:05:59:63:aa:df:61:d1:5d:75:6b:51:
58:2a:19:c3:06:47:d6:ec:1e:a9:74:88:b4:33:7d:da:42:aa:
4a:43:3e:92:ae:1a:43:55:b5:6f:d5:3f:87:8c:4b:bc:fc:b1:
37:fe:13:27:1d:99:56:5e:21:ad:00:a4:33:5b:6e:e6:ca:16:
94:08:d6:f8:8f:8e:b7:1a:8a:be:72:51:66:ee:9c:b8:d1:8f:
bc:8b:e7:ae:6d:a7:d1:53:a8:c5:35:8e:ea:70:ef:cf:c9:d4:
cc:df:3d:e6:b2:af:a7:0e:1b:cb:8e:dd:f6:a5:66:39:8f:7e:
18:76:c5:bc:13:d2:a2:9c:50:e3:18:c7:a7:ca:45:eb:8a:0b:
6e:5d:cf:d5:ca:8b:cd:69:45:64:23:7b:08:08:20:b6:4a:46:
75:db:13:be:0d:68:99:46:ae:ca:3a:a0:1b:af:eb:14:9c:cc:
75:1c:8a:d2:76:12:1c:d4:f7:3c:90:c7:05:e1:47:e6:8a:00:
e5:f5:e4:07:95:0c:fa:3d:50:38:ac:0a:58:74:01:a0:ed:e5:
64:91:69:0d:bf:e0:71:ba:b9:a2:59:7e:23:b1:95:b3:0a:43:
2b:03:f4:0d:b9:a3:5f:66:58:7e:29:12:44:a0:91:20:a7:0e:
47:04:7f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:46:50 2025 by rpki-client