Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
File: ddoOY-skfZoLE7TLNt1nJJkgu8o.mft (raw, json)
Hash identifier: /ODshwRZrSOrjNyGfQ58a20CMNAvwY9/SXHcyzLHwjc=
Subject key identifier: 01:1B:2C:15:4B:E2:39:2B:BF:75:59:4D:00:3B:3B:B9:4C:18:A3:41
Authority key identifier: 75:DA:0E:63:EB:24:7D:9A:0B:13:B4:CB:36:DD:67:24:99:20:BB:CA
Certificate issuer: /CN=75da0e63eb247d9a0b13b4cb36dd67249920bbca
Certificate serial: 0196D58945AC17780B55FA305FD29CD15EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
Manifest number: 1543
Signing time: Thu 15 May 2025 20:01:05 +0000
Manifest this update: Thu 15 May 2025 20:01:05 +0000
Manifest next update: Fri 16 May 2025 20:01:05 +0000
Files and hashes: 1: Qij-xPisZGBBqpNgu1KPeAhYyeA.roa (hash: 0qt3Er+wn2Xj8MdmWfSXDbZ9aYW82PDchwg6o4/NTxg=)
2: ddoOY-skfZoLE7TLNt1nJJkgu8o.crl (hash: B4AoVYwG4JkidU6qjGtD4yHlHLYG9fxRTCDincvoG9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:89:45:ac:17:78:0b:55:fa:30:5f:d2:9c:d1:5e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75da0e63eb247d9a0b13b4cb36dd67249920bbca
Validity
Not Before: May 15 20:01:05 2025 GMT
Not After : May 16 20:01:05 2025 GMT
Subject: CN=011b2c154be2392bbf75594d003b3bb94c18a341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:d2:3c:f2:1c:9e:b6:a0:e6:16:91:c1:42:
f0:68:6a:9c:45:a5:d8:ff:02:60:cc:35:0b:5d:95:
c1:00:e9:36:ff:a5:c5:84:60:34:04:4f:de:fe:3b:
1e:e5:94:bf:15:2e:54:5e:ad:0a:ac:fa:50:94:e4:
f6:c0:6a:5d:35:05:21:c6:b4:4c:29:17:c4:4b:de:
25:97:25:e8:f1:b7:47:d6:3d:c7:3a:e7:44:9e:30:
bf:c2:87:dd:6a:80:fa:82:1e:98:41:67:ad:7a:ff:
95:e8:a0:b6:f6:36:71:a4:5b:c8:e9:ac:53:81:79:
de:e5:b3:fc:89:c4:9a:f3:a3:0f:aa:ac:91:1b:1f:
14:6b:27:be:f2:34:56:51:fc:26:2f:69:1b:2e:eb:
c4:99:8c:2a:29:fe:f9:ab:42:3a:fd:7c:6e:61:84:
2b:20:81:a8:3f:21:5b:e3:b0:0b:7b:ae:95:14:df:
f7:7b:70:55:39:8e:7b:4a:a4:69:27:1a:2b:11:0b:
c7:89:f4:25:a0:28:23:1d:d8:c9:96:3c:2f:86:ac:
c3:5e:53:ae:2f:b8:bb:da:7d:7b:77:bc:57:45:5a:
74:db:7b:37:c3:88:b0:e8:9c:2c:0e:30:0b:ea:fd:
5e:bb:c7:01:4d:07:da:64:14:22:65:c6:f0:02:3e:
c5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1B:2C:15:4B:E2:39:2B:BF:75:59:4D:00:3B:3B:B9:4C:18:A3:41
X509v3 Authority Key Identifier:
keyid:75:DA:0E:63:EB:24:7D:9A:0B:13:B4:CB:36:DD:67:24:99:20:BB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddoOY-skfZoLE7TLNt1nJJkgu8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4b5c19-821a-40ce-9168-df4a3173522b/1/ddoOY-skfZoLE7TLNt1nJJkgu8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e1:2d:37:a4:6d:c3:66:41:da:b3:22:25:94:6b:d8:65:d6:
3f:69:ef:44:68:71:f3:87:96:40:29:54:be:aa:59:ff:bc:a4:
7a:b8:37:b9:a2:96:ca:b9:b3:4e:fd:ea:e7:cc:f6:bd:09:91:
60:16:26:40:72:2b:ce:d5:37:f1:cb:e8:ae:a8:6b:b5:c2:a3:
79:f8:d3:a2:04:69:07:10:bf:27:4f:ca:9d:e7:bf:c4:75:23:
2d:55:c4:6b:a0:c9:c5:23:17:25:ff:17:57:eb:e9:a3:a9:c8:
31:6a:4c:20:dc:11:f8:ec:95:56:ed:ec:33:17:7a:ca:1e:e1:
07:d5:6a:9b:1a:35:05:5c:31:8b:aa:aa:65:d5:d4:9e:bd:d7:
dd:92:46:db:5d:e5:51:df:f1:a7:e4:d0:ef:7d:39:3c:cf:57:
91:04:ab:a1:aa:2f:88:5b:92:ee:54:b0:23:ae:94:4a:ea:2e:
26:ce:a2:8c:bf:22:e1:3c:31:bf:ba:af:dc:ca:34:a3:b1:8a:
59:e5:3c:4d:68:4d:a2:a4:23:7d:b9:17:8b:fd:69:13:43:d6:
31:ae:ca:b4:d7:e5:c0:30:ff:c3:f2:fb:e7:df:91:d0:2f:7a:
37:09:39:33:15:05:6f:a8:ad:37:57:35:ef:ac:d7:44:a4:a1:
dd:38:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:49:21 2025 by rpki-client