Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json)
Hash identifier: /sTCtjk3enLO7lrbZD+ugu9jIwfr4ftlPI850ulh158=
Subject key identifier: 6D:8C:89:61:C6:08:1D:79:69:69:A9:45:79:02:BD:29:4D:9F:C8:A9
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial: 0196D39ACCD97E7AA301E5E116682B222BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
Manifest number: 0C5D
Signing time: Thu 15 May 2025 11:00:59 +0000
Manifest this update: Thu 15 May 2025 11:00:59 +0000
Manifest next update: Fri 16 May 2025 11:00:59 +0000
Files and hashes: 1: 0CytvhJudNwvmE_qIywCHCo6NeE.roa (hash: 88aZ7TRUqfxW9sX6erHIjwQ5v2GdVw5BH0X6fcp/TYs=)
2: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: gt5riY8mmCWyexqE/a6hvW8dIDfS9H4jsYRJj8KLf20=)
3: KrKK6KlWrbwro0xZGJbZRZAIMbY.roa (hash: mLgmMH2GpuH6gYsfQafOR8wiybY64hDgIvWRNRviit8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:9a:cc:d9:7e:7a:a3:01:e5:e1:16:68:2b:22:2b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Validity
Not Before: May 15 11:00:59 2025 GMT
Not After : May 16 11:00:59 2025 GMT
Subject: CN=6d8c8961c6081d796969a9457902bd294d9fc8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:a3:21:73:da:cd:29:7c:2c:06:bb:7c:35:
30:39:08:4e:9e:77:35:53:7b:44:0b:f1:bd:07:19:
6d:2a:c9:12:67:75:f7:0d:0f:8a:83:6c:f8:a5:69:
b2:77:ef:88:ef:74:ed:a5:2d:c1:a2:17:47:4c:0e:
f9:17:e0:98:03:92:12:7c:a7:ef:be:14:8e:c8:12:
d4:e6:d5:97:e3:26:87:78:07:31:8e:5a:f4:c6:2f:
04:b4:42:60:74:4f:b4:ef:f0:8c:50:0d:21:cf:80:
4e:8f:5f:9b:1e:e6:64:00:20:95:91:fd:40:b3:b4:
d8:d2:a6:b1:cb:38:69:89:28:8b:16:85:80:a5:d3:
94:4a:af:80:23:92:19:e9:13:64:37:8d:3e:eb:e7:
23:cc:1f:12:2d:d9:69:dd:24:36:ac:e5:1c:40:57:
c5:12:68:ed:27:c0:ea:ba:87:73:75:3c:f0:a4:b6:
87:95:7a:58:72:94:26:5b:fd:1b:61:e0:65:c2:c3:
b9:de:a5:ec:df:5b:17:44:e7:e9:91:a9:f8:f4:32:
e2:50:db:f0:ac:ef:c2:68:bf:b0:ed:28:7e:32:f9:
37:d7:65:1f:84:cf:aa:51:91:45:b3:80:53:27:0b:
d3:0f:b5:f8:95:ad:a0:4c:07:e4:b5:79:b9:68:6f:
f4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8C:89:61:C6:08:1D:79:69:69:A9:45:79:02:BD:29:4D:9F:C8:A9
X509v3 Authority Key Identifier:
keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:46:41:19:a6:a0:ff:b6:09:85:dc:f9:64:ad:c1:19:49:5c:
cf:5f:fe:37:76:0b:41:cb:41:d2:85:5c:bf:2e:83:5a:43:7b:
09:65:7b:a6:97:98:4c:1e:b0:ae:4e:bb:37:64:d7:cf:60:6d:
a0:d2:19:16:85:02:9d:0a:02:25:7a:6d:1d:6f:ea:49:0e:f2:
c3:54:72:ac:df:40:85:c8:b1:2b:d0:86:c2:e3:e8:a1:ef:91:
aa:2a:19:76:0e:d4:eb:28:f9:0d:a0:45:87:c5:0c:c3:a8:27:
a9:fd:c5:38:ff:73:96:a6:fb:33:06:62:c7:ee:e6:70:59:d2:
35:18:19:20:69:c8:dd:28:16:90:a8:6d:04:27:7e:06:6f:e9:
46:31:8e:1b:bd:e3:b0:8b:31:a6:f4:67:2c:00:ff:37:4e:d3:
f2:87:74:0a:a9:0b:b1:6a:67:bd:84:34:45:4c:0f:42:d8:61:
aa:44:e8:f6:fc:85:93:2c:19:aa:87:ac:24:34:46:da:a2:67:
ac:cc:f7:3b:da:5e:74:4b:fa:15:d6:82:95:8f:40:13:42:c1:
cf:b6:a6:6e:fd:64:3a:1e:2b:d0:da:d3:cd:b1:ca:2b:e8:d9:
9b:67:1a:14:0e:e0:4b:34:d4:1c:23:a6:6f:07:e2:e0:55:e9:
ae:14:20:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:09:15 2025 by rpki-client