Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier: DA9p/7GUWg9hJhT0rMG+Ok112IKnNBN4MqBX1mDup90=
Subject key identifier: 3C:E0:D5:F1:DD:98:BB:13:84:89:EE:2C:CC:0A:41:3B:80:14:E9:F9
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 0196A0F6DADA64510A0908128A4736160C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number: 08C1
Signing time: Mon 05 May 2025 15:00:54 +0000
Manifest this update: Mon 05 May 2025 15:00:54 +0000
Manifest next update: Tue 06 May 2025 15:00:54 +0000
Files and hashes: 1: 9AG_khzlUq_52M_uwAyAT--X2D8.roa (hash: j5npHva08ps2FjnGO8hTZ3BTaOYOIDt9K8fTqv+VPPw=)
2: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: qzQKH3ryWGwBgvWSQ3s6YYupVk1u9mxJTqQBxo28PBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:da:da:64:51:0a:09:08:12:8a:47:36:16:0c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: May 5 15:00:54 2025 GMT
Not After : May 6 15:00:54 2025 GMT
Subject: CN=3ce0d5f1dd98bb138489ee2ccc0a413b8014e9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:19:1d:d3:b6:30:11:69:a3:7a:ed:bb:95:
4c:39:2f:d0:19:0f:18:31:63:fd:54:88:09:a9:7d:
53:97:22:d6:16:de:0b:bc:84:31:bd:25:08:15:66:
cf:80:9a:24:81:20:7c:c5:df:e2:a3:ef:99:05:cb:
43:61:45:63:40:ac:e4:41:85:b2:66:1b:a7:35:3a:
ce:1a:c2:f7:c9:d4:56:68:28:b0:7a:f1:f6:24:1c:
51:1d:94:28:00:f3:9f:bf:ce:9c:88:35:b9:85:f1:
9a:7c:b0:c3:97:84:38:a8:49:80:80:6a:e9:9f:98:
1e:69:44:96:80:81:61:3e:3e:d0:42:dd:ab:d9:1f:
8e:e3:b4:3b:92:64:67:f5:24:f3:bd:d0:3f:07:20:
d6:80:2f:0b:17:4f:3c:05:c3:85:1a:7b:3b:4c:a6:
93:d4:d5:e8:02:a1:e8:14:9d:82:3c:53:29:00:d4:
9f:f3:f4:f8:57:04:6f:c5:7b:33:98:9a:68:1c:c1:
6c:de:1d:c4:d6:05:6b:be:67:07:45:5f:fe:ba:1c:
40:c5:9a:65:ca:4e:58:bf:07:cf:0c:58:69:3c:6d:
bb:9d:f7:82:c5:e2:7e:7a:fa:db:20:e6:53:f3:d8:
a7:09:5f:7e:ba:e6:65:a4:0a:b3:00:31:1d:11:a9:
cc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E0:D5:F1:DD:98:BB:13:84:89:EE:2C:CC:0A:41:3B:80:14:E9:F9
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:db:f9:55:58:30:f7:72:85:fc:ff:27:8f:4f:80:50:c6:61:
63:44:d4:1e:d2:8a:c6:a8:f6:e1:96:a5:4f:54:62:e4:45:6d:
99:09:53:05:b0:4d:77:9d:8d:35:b7:8a:09:53:5a:f7:7e:54:
7f:2f:61:00:8d:2d:dd:ca:1d:2c:40:a9:6b:b2:df:1d:db:ed:
3e:13:c3:d6:85:aa:53:15:9b:7c:79:c2:fb:1a:eb:e7:c0:43:
77:a5:35:4f:e7:02:4a:45:d2:65:a6:aa:81:10:c9:d5:fe:df:
87:b5:f7:40:c7:92:be:89:d9:cb:27:7e:53:5b:0f:df:ae:a4:
82:6e:2e:a8:da:10:17:5c:67:51:8b:a7:77:e5:e1:e3:22:77:
f9:b4:09:9c:4c:47:3c:78:7e:85:08:16:f4:51:ba:58:4c:5a:
fc:57:0f:fe:15:f3:2b:5a:dd:04:ca:ae:a0:aa:5f:9d:29:05:
a2:8c:72:bd:71:85:3a:0a:51:7c:56:48:6f:f2:0d:e3:72:de:
a7:dc:05:b3:20:97:52:7c:91:9b:9a:86:60:d5:7b:96:85:7a:
b1:72:60:56:4e:ea:03:a3:db:50:14:b8:a6:7b:d7:5f:9d:04:
d0:d7:74:96:88:70:c6:2b:75:af:e1:3e:f3:d1:8c:88:ce:d6:
8b:67:a7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:32:43 2025 by rpki-client