Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
File: DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft (raw, json)
Hash identifier: trJjuB+gmbXv9Kk/cNlG8qN4JLQcbN9+AkV9AYBi8zo=
Subject key identifier: 6A:91:72:4B:C2:3E:43:6C:83:C2:FF:25:00:0A:B0:F1:BE:5B:C7:D3
Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547
Certificate serial: 0196C9174DD8D51ED2B7498290F07BEFB04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
Manifest number: 14A7
Signing time: Tue 13 May 2025 10:01:09 +0000
Manifest this update: Tue 13 May 2025 10:01:09 +0000
Manifest next update: Wed 14 May 2025 10:01:09 +0000
Files and hashes: 1: DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl (hash: 2KDmlBqTNKHWiQLZc4loBJUWDylAucXBHuRnpY2V0fA=)
2: fvo32ZlXLNUWfNKLhRu-uClyC2U.roa (hash: bzkWT3EH+ccZpwHViIEHvMRRGrNUoXsGOv/sbjZrV0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:4d:d8:d5:1e:d2:b7:49:82:90:f0:7b:ef:b0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547
Validity
Not Before: May 13 10:01:09 2025 GMT
Not After : May 14 10:01:09 2025 GMT
Subject: CN=6a91724bc23e436c83c2ff25000ab0f1be5bc7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2b:80:f3:06:b0:91:ef:31:f4:4e:c6:cb:22:
1f:31:3f:6c:50:1d:db:73:a4:99:1f:39:cc:58:e8:
4c:03:78:12:d1:0e:e4:72:b7:39:11:2e:c4:89:31:
02:d6:60:9d:05:8f:1e:33:5f:c6:6d:77:2a:91:15:
94:2d:e5:91:6f:7a:b7:37:01:85:56:cf:28:60:a6:
9c:f6:eb:32:14:4f:af:6a:fd:5d:70:37:bb:ad:cf:
69:c0:60:86:f9:60:99:e9:f5:f8:99:6a:28:94:97:
a9:99:19:c8:f2:62:12:e3:ef:58:ea:88:f8:1b:49:
c0:f4:b6:7f:4a:67:a3:70:2f:78:a8:52:35:c4:ba:
bf:ca:8f:5e:2a:2e:be:a5:ce:b8:9d:62:b7:78:7e:
4e:b2:3d:40:25:e1:be:c4:e8:1a:99:c7:77:de:13:
74:3d:38:b8:5f:21:08:03:11:c5:6e:cb:fe:ff:10:
85:5a:31:79:12:2f:af:c7:01:ce:7e:82:a8:16:2d:
cf:1a:cb:4b:63:81:05:60:5f:01:d2:46:70:46:b2:
2b:d9:ff:75:e2:83:d7:e8:d6:d1:9f:29:5a:bb:f9:
f4:b7:fd:97:95:9e:ea:63:5a:73:ba:0f:bc:47:1f:
f8:d9:8d:6f:51:82:76:96:28:7e:a0:29:76:f7:ce:
29:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:91:72:4B:C2:3E:43:6C:83:C2:FF:25:00:0A:B0:F1:BE:5B:C7:D3
X509v3 Authority Key Identifier:
keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:13:21:08:ae:63:de:95:8c:8f:e9:95:34:31:b7:ff:1a:ae:
06:8d:36:59:9e:69:db:2b:f7:c2:10:03:43:ed:fe:c3:57:bb:
cb:e0:cd:55:da:e9:6c:46:b9:1c:3b:d2:21:81:d6:48:2c:eb:
50:d8:d1:0e:43:0e:cc:4f:6c:d2:0e:f9:6a:d1:bb:7d:ef:b7:
1b:62:43:12:df:95:e6:c8:af:4b:6f:69:30:df:21:62:11:3e:
41:1c:c9:dc:63:87:16:eb:bc:7d:4e:18:55:9f:3c:33:5a:5e:
c2:1c:14:00:5b:08:6f:52:b8:db:a2:28:d4:46:32:3f:f2:f2:
1e:f1:ac:64:45:a7:1b:7a:fd:da:8b:44:c9:69:46:de:72:a2:
c7:d7:b5:48:95:62:bc:10:8c:b9:d3:79:1a:da:6f:70:08:c0:
9e:09:78:cb:d0:00:4c:f5:5a:49:aa:dc:c8:4d:8b:88:1a:f0:
93:ec:9a:1c:52:30:55:7d:f3:a6:3c:6e:6f:35:8d:96:25:6f:
f3:44:fb:7e:5a:7d:55:81:5e:58:3f:e3:ec:38:49:4b:66:2f:
91:90:98:94:f2:81:62:94:c0:72:10:6f:4a:6d:91:b7:1a:8e:
fd:03:8a:75:f3:7d:51:a9:32:d0:ce:56:15:67:01:05:96:f5:
c3:70:6e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:15:47 2025 by rpki-client