Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier: AgzXDrEumGaewJpCHL+nId5fA4bzdbg9EKyNXwsInZU=
Subject key identifier: 2A:1B:70:21:E5:80:B4:85:33:EA:29:75:A0:D4:71:68:D6:C6:04:9D
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 0196ADD620B9864E0DB0A315BC43A2F1120A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number: 0C5D
Signing time: Thu 08 May 2025 03:00:13 +0000
Manifest this update: Thu 08 May 2025 03:00:13 +0000
Manifest next update: Fri 09 May 2025 03:00:13 +0000
Files and hashes: 1: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: Gl/UkvSwDVTH3ayCwgAP9KLC6cbMb+ZcV1Y3L066QPI=)
2: MNtx-M1QVv5z_3qcN6vxhaOotfc.roa (hash: px53xNqq/MugnV+199J7ZDHhE5FdBcLFsMKgKSEziic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:d6:20:b9:86:4e:0d:b0:a3:15:bc:43:a2:f1:12:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: May 8 03:00:13 2025 GMT
Not After : May 9 03:00:13 2025 GMT
Subject: CN=2a1b7021e580b48533ea2975a0d47168d6c6049d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:ca:02:e6:0e:40:bb:fb:6e:88:4f:f1:c6:
2d:b9:15:f1:a0:2a:0e:ca:f4:9d:48:f4:1a:1f:46:
6c:92:01:aa:03:3f:fd:fd:48:38:01:d4:05:46:b7:
f1:2f:32:29:fb:b4:b6:34:47:e6:d5:c3:17:14:4b:
af:c8:81:22:ef:1e:8e:a0:08:14:54:2d:66:57:5b:
a7:71:0f:e1:c3:82:e9:97:1d:a9:55:71:12:96:cd:
5e:89:61:cd:7b:df:c9:10:2d:ae:12:ca:8f:60:33:
b3:ad:e1:32:45:97:8d:7c:f6:ac:81:d8:45:f6:b5:
88:84:fb:c8:65:a2:e9:66:02:ce:90:d2:4f:5b:e0:
24:8a:d2:0a:af:5e:fd:ae:f3:c8:b4:2d:ab:48:da:
d8:fa:09:ad:68:6d:6d:4a:ff:9d:3a:aa:cd:f9:e8:
d1:71:12:13:38:a3:85:b0:a3:5c:87:68:de:80:2b:
35:7b:39:de:e0:4d:1d:82:97:e0:1a:27:24:c6:b7:
fe:36:de:1e:73:36:af:e2:a1:90:8e:3d:69:c6:d1:
fe:22:37:3f:89:0d:d7:10:c5:5d:90:8a:17:4d:c9:
3c:0f:5c:62:cb:3c:63:f1:2d:80:23:7b:55:f7:8b:
ed:b4:13:24:47:4f:fb:7d:b3:1f:64:c7:62:7d:ed:
c2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1B:70:21:E5:80:B4:85:33:EA:29:75:A0:D4:71:68:D6:C6:04:9D
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f5:a2:9d:4a:f3:b8:48:30:3a:c7:e5:62:45:b0:32:54:72:
e3:21:30:08:38:11:ef:b7:80:58:ed:fc:4d:9b:fe:4c:27:48:
ca:32:86:80:33:d5:48:00:26:16:26:b0:3f:75:96:a2:5f:b1:
0b:5c:a1:d3:c3:20:47:66:37:5f:b4:ca:a2:40:a5:56:e1:d5:
05:7f:f5:8b:20:c8:f6:f0:61:aa:be:bf:55:3d:c6:58:d7:ba:
34:90:9d:07:6e:cb:25:f8:aa:aa:3e:05:8d:c4:05:53:17:a5:
78:83:12:f6:b2:e6:1e:9d:64:92:1a:e9:4b:30:a8:f4:b2:1b:
ca:d8:c8:10:51:7b:ac:10:eb:97:55:e5:2e:ed:9c:aa:a9:80:
95:60:03:23:58:46:e6:e5:dc:3d:2f:3e:e0:69:29:46:3a:cb:
d6:21:0b:cd:60:27:af:1d:9e:f9:8b:04:91:f0:c7:90:bf:6a:
4c:dd:e5:b6:27:16:ec:09:d4:25:fc:21:b4:f7:e2:73:4c:80:
ac:39:1b:23:54:51:bf:c5:1f:00:5a:33:52:e0:f0:24:0f:02:
08:3d:39:da:0c:1c:6a:7b:ac:e0:b6:be:19:70:89:f0:86:ea:
00:2b:22:76:7c:94:d6:f6:3b:ba:8a:37:75:49:b4:a2:53:c6:
a7:53:38:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:34:44 2025 by rpki-client