Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json)
Hash identifier: 4cD2Hw6wucrPWbHwhHJBfes9hKYsZCb8qnyCP62hJTM=
Subject key identifier: 1A:6E:63:64:52:6E:B0:27:E6:19:26:9B:DE:EA:F7:F6:45:67:3C:CE
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 0196AE7B389FC5F44BE2E46D65B1E19182CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
Manifest number: 1532
Signing time: Thu 08 May 2025 06:00:33 +0000
Manifest this update: Thu 08 May 2025 06:00:33 +0000
Manifest next update: Fri 09 May 2025 06:00:33 +0000
Files and hashes: 1: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: OnYsHs7tBCTc6iTLYLl1PdNZNehTn8V2bOnWxK2t25g=)
2: KXd_5OhpNxA2dAEUBM7BRlNmng0.roa (hash: naKbPeMlQvH49cTjg2nRiud0MzlhFN73NWmhIANkiB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7b:38:9f:c5:f4:4b:e2:e4:6d:65:b1:e1:91:82:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: May 8 06:00:33 2025 GMT
Not After : May 9 06:00:33 2025 GMT
Subject: CN=1a6e6364526eb027e619269bdeeaf7f645673cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:7e:b6:c2:6e:68:1c:3a:d9:19:93:3c:84:
1f:c7:19:24:44:f7:80:85:0e:6a:53:bf:94:30:aa:
d9:44:0f:dd:ee:d9:f9:1d:f3:36:3e:0a:6d:32:8e:
1c:66:2e:1d:98:90:90:30:1a:df:96:d7:a5:ef:e5:
02:0d:e2:1c:97:ea:c7:7d:f1:23:49:29:f6:3d:50:
63:59:21:92:7f:a6:66:75:b7:86:60:db:98:db:8f:
a1:7d:d2:e5:77:90:59:79:2e:fa:06:b5:27:11:28:
6a:30:3b:ff:cd:22:07:79:c5:63:29:b1:4d:eb:9c:
80:1b:ee:3f:9d:db:c5:1c:3d:ce:a7:92:e6:21:2b:
4a:cd:79:d1:0a:38:8e:69:d5:90:82:1a:25:f5:28:
ab:94:b3:2b:76:e9:3a:38:52:37:96:e1:87:34:b6:
00:91:ff:7e:f8:35:54:d0:22:72:3a:6f:37:8d:a9:
fe:f4:c4:05:06:86:5d:3a:da:c4:ab:f0:a0:b5:f3:
d3:d1:0f:44:ed:03:42:4d:c1:88:13:48:16:f0:96:
e4:69:8c:4e:f1:72:e5:87:19:a0:59:87:7e:79:8e:
b5:16:88:f1:ea:06:95:12:08:55:a2:8f:7c:39:6c:
a8:e2:9c:57:33:14:a3:ac:0e:ea:e3:90:42:ee:2f:
e8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6E:63:64:52:6E:B0:27:E6:19:26:9B:DE:EA:F7:F6:45:67:3C:CE
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:03:5c:95:ea:8b:dc:e2:b9:a9:aa:c3:56:d7:a2:ca:9e:e0:
bc:5b:28:e9:47:62:31:95:52:7c:56:24:11:32:ae:55:0f:0f:
6d:4c:89:12:2b:23:69:8f:52:50:72:5a:67:06:84:40:9e:13:
5f:2c:ea:c9:0e:30:1c:3b:2b:04:29:a1:44:92:6d:07:64:3e:
ef:8f:50:0f:6d:24:74:f8:a9:2b:9e:97:35:03:8f:9c:b7:e2:
0c:50:64:c4:29:dc:1c:e9:70:74:ce:66:aa:31:1c:66:7d:5d:
a0:18:9f:4f:60:fb:33:96:59:3f:de:c7:82:d6:cc:ad:12:c2:
4d:02:2d:03:73:e6:a0:a0:d5:e2:9e:9d:20:4f:34:fc:8b:00:
cf:97:c0:12:52:f4:b2:e3:2a:e5:37:f0:dd:a9:7a:51:4e:33:
37:53:51:42:fb:fa:95:a9:7d:9b:63:28:12:d4:49:8f:ce:39:
9b:f7:c4:96:40:d9:50:5c:c8:68:b0:f0:9f:08:6b:f2:86:3e:
03:a7:e9:6f:2d:13:82:6a:b0:fe:4b:a6:c6:cb:06:59:88:29:
8c:38:33:93:c5:00:2b:f4:c9:3d:2d:fe:a7:ae:c0:61:1e:77:
ff:da:ca:2d:df:48:72:6d:0d:e7:1e:80:f3:a1:5c:3e:63:13:
cb:d5:e0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:45:10 2025 by rpki-client