Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/dOTD4A_D7u6TartSfjUuSvA96Js.mft
File: dOTD4A_D7u6TartSfjUuSvA96Js.mft (raw, json)
Hash identifier: IM/ajJKzUq3w5zD5JwzsmzhEd1qiaYkhV21fA+LpVr8=
Subject key identifier: DD:AE:E0:64:DA:4F:E8:32:A2:1A:08:7E:33:27:DF:D2:D0:42:5A:35
Authority key identifier: 74:E4:C3:E0:0F:C3:EE:EE:93:6A:BB:52:7E:35:2E:4A:F0:3D:E8:9B
Certificate issuer: /CN=74e4c3e00fc3eeee936abb527e352e4af03de89b
Certificate serial: 0196BF6F66DD6E57EC8DDFD2E27ECB87D859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOTD4A_D7u6TartSfjUuSvA96Js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/dOTD4A_D7u6TartSfjUuSvA96Js.mft
Manifest number: 060C
Signing time: Sun 11 May 2025 13:01:11 +0000
Manifest this update: Sun 11 May 2025 13:01:11 +0000
Manifest next update: Mon 12 May 2025 13:01:11 +0000
Files and hashes: 1: 4iizaOWv92HAURMQhMzwpM2GEpo.roa (hash: rW6XLFbBeUapd8kmjyoQ2PnXovsPjc0B/QhXcyyX2cs=)
2: dOTD4A_D7u6TartSfjUuSvA96Js.crl (hash: MFjxudiNE/wUTJeVYE3S7f9CRNbx+AR94c/oVC2zUl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/dOTD4A_D7u6TartSfjUuSvA96Js.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/dOTD4A_D7u6TartSfjUuSvA96Js.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOTD4A_D7u6TartSfjUuSvA96Js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:66:dd:6e:57:ec:8d:df:d2:e2:7e:cb:87:d8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e4c3e00fc3eeee936abb527e352e4af03de89b
Validity
Not Before: May 11 13:01:11 2025 GMT
Not After : May 12 13:01:11 2025 GMT
Subject: CN=ddaee064da4fe832a21a087e3327dfd2d0425a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:11:41:cb:a9:ab:a8:e2:7d:e9:09:f1:07:44:
98:05:76:96:11:02:58:a5:db:3c:24:b0:aa:88:26:
15:fa:2a:7c:4b:3e:7c:b7:d9:78:2f:20:39:3f:a9:
7c:55:04:ff:16:f9:55:df:7c:6a:96:84:09:76:01:
69:ef:ba:1e:20:67:85:40:58:ac:c0:01:11:ce:70:
ed:e7:e5:71:9e:af:22:68:94:84:f7:54:22:3c:29:
d4:01:e9:5e:d0:27:2c:a5:c5:5e:21:f1:51:df:b8:
19:cf:b4:a5:41:e4:ec:68:b1:2d:3f:bc:1f:8f:4e:
d2:5e:b8:a2:a0:d1:6e:3c:e5:cf:b5:b6:84:65:1c:
2a:b1:21:6e:19:63:c4:ff:ca:04:a1:72:dc:73:4b:
81:c6:18:a4:17:7e:5a:21:81:1f:6d:03:35:62:2d:
78:d2:16:4a:c8:8a:39:53:67:de:99:93:1b:bd:08:
b0:51:c3:2b:17:f8:1b:d3:ac:2b:41:54:1a:6e:29:
fa:f0:43:5f:a6:4a:c1:7f:5d:1b:93:ac:38:82:78:
e5:2c:ea:e6:8d:a0:8e:86:93:2b:6b:04:e5:af:c4:
a2:c7:85:71:2d:b9:e2:96:26:9a:10:cf:47:3f:a5:
1a:6a:1e:70:2e:cc:90:79:6d:3b:62:8d:14:d1:74:
50:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AE:E0:64:DA:4F:E8:32:A2:1A:08:7E:33:27:DF:D2:D0:42:5A:35
X509v3 Authority Key Identifier:
keyid:74:E4:C3:E0:0F:C3:EE:EE:93:6A:BB:52:7E:35:2E:4A:F0:3D:E8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOTD4A_D7u6TartSfjUuSvA96Js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/dOTD4A_D7u6TartSfjUuSvA96Js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/dOTD4A_D7u6TartSfjUuSvA96Js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7c:c1:4b:fb:e4:f9:58:16:2d:b9:69:62:83:54:b7:2b:f1:
52:79:4a:70:0a:dd:77:2a:4f:04:dd:47:9f:68:ec:a6:fa:0d:
12:47:72:06:d2:54:c4:c2:99:e5:97:a0:bf:21:81:8c:c1:31:
35:d7:0f:2a:00:1f:8a:a5:e9:84:3f:10:6e:9a:46:59:b7:cf:
0e:2b:fd:2e:a8:0b:da:da:8f:f8:4a:41:e7:db:f4:32:67:f7:
68:38:19:0e:14:c6:a0:aa:e6:b6:0b:3c:47:96:74:0b:83:a1:
5f:17:85:17:c6:a4:30:ce:8c:ae:2a:d1:2d:80:7c:54:10:bb:
16:df:12:cc:90:9f:a9:db:a3:12:c8:70:cf:4e:5e:a9:27:dd:
17:42:ef:3c:3d:92:eb:79:f7:6c:a4:fe:79:6b:21:9a:61:33:
6d:27:6f:0e:98:22:a1:4f:5c:f7:2e:06:ab:59:41:15:61:50:
36:f1:c4:7e:48:7e:be:c7:9b:8f:9e:fb:d5:d2:82:c1:43:d9:
e3:22:34:58:0a:25:a0:2f:0d:63:01:12:86:c2:2f:19:c8:8b:
2f:54:38:41:5f:82:4e:84:b7:15:e9:b8:fd:34:92:a8:2b:39:
88:16:d4:5a:31:b1:6c:00:8f:ab:ba:fb:f1:78:d9:b7:51:1f:
29:1d:a0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:09:16 2025 by rpki-client