Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: GAPFmGwz1ao33Sw5x+LXA85mB7zMZNwurJl6goqqZLM=
Subject key identifier: 74:2C:49:BE:F6:E8:27:4D:56:3E:B7:A3:1F:76:72:A0:E6:2E:E2:80
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 0196C26FB74A36FE9091BB70AD08CBEA74BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 03DB
Signing time: Mon 12 May 2025 03:00:23 +0000
Manifest this update: Mon 12 May 2025 03:00:23 +0000
Manifest next update: Tue 13 May 2025 03:00:23 +0000
Files and hashes: 1: A_Ig0V6t3ntCxD7PTccbnIguTs8.roa (hash: x63polo4t0dGd0M1xxigrw4CFjSi7R4AExIbYtwQIRY=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: GBz76arLypeL4gNm/2+0Ak2jAiICIfOQEry0NZrrC/Y=)
3: Zj1rmMEpOraplrkaquOM2ubO6Mc.roa (hash: oIS73RHQscBvRjMMzd2FUWBDj9UGJrVmsW4v2M6hJEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:b7:4a:36:fe:90:91:bb:70:ad:08:cb:ea:74:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: May 12 03:00:23 2025 GMT
Not After : May 13 03:00:23 2025 GMT
Subject: CN=742c49bef6e8274d563eb7a31f7672a0e62ee280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:0a:8a:f4:8d:1d:87:a1:37:e7:9b:f6:1d:
1b:ea:4a:0e:f4:12:d2:24:64:30:b4:59:7e:b9:85:
6f:a4:68:aa:62:22:4d:45:33:ca:56:c1:ad:d9:d3:
66:c4:1b:b3:e4:0e:93:0a:88:1d:06:71:6d:76:9c:
b1:78:31:26:94:2a:57:41:d7:93:9b:84:f2:2c:08:
80:b3:77:f8:ca:ca:8f:37:0d:bd:78:b2:6b:86:83:
2d:4d:a5:d3:64:6f:82:09:cf:71:7e:b1:32:d8:13:
4d:b2:e3:21:ce:c4:2c:60:54:eb:77:7e:74:16:cf:
97:18:ce:5b:10:47:d7:a5:be:a6:8e:6e:62:0a:64:
d3:0c:95:b2:d5:2b:90:d0:ac:ab:16:00:ad:dd:f4:
43:8e:30:f0:08:c2:0b:7e:42:af:b4:ce:63:56:f0:
a0:dc:49:58:ae:78:99:7c:fa:d4:8d:dc:27:57:44:
1a:ba:96:2a:b6:c9:70:6c:c0:34:1e:d9:f8:bd:89:
06:c4:13:e1:e5:d5:8c:5e:ca:ed:ab:27:01:d7:dc:
0f:29:ec:c2:63:84:99:03:dc:e2:04:63:eb:38:87:
52:16:a2:a7:4f:6f:c2:8c:23:71:a4:a8:3d:7e:7d:
31:fe:f7:84:34:11:c0:82:9a:88:8b:89:47:24:9a:
32:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2C:49:BE:F6:E8:27:4D:56:3E:B7:A3:1F:76:72:A0:E6:2E:E2:80
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:60:36:ff:70:00:73:a8:c5:0a:fd:00:06:94:b6:64:dd:3c:
38:81:54:cc:36:bc:82:0e:97:21:81:e7:1e:57:5a:0d:71:7d:
96:f5:66:f2:b1:cd:f8:f6:50:35:99:64:d0:6a:8f:46:36:7b:
92:f6:6b:7e:d0:1f:67:d2:c8:5c:e4:b9:3b:72:62:8b:70:be:
00:92:88:79:75:33:a1:58:8a:41:ce:51:11:cc:6c:8f:be:08:
b8:39:be:db:35:d2:7e:0a:93:c1:b2:2b:95:35:c9:99:be:02:
4a:84:da:9f:23:e3:96:37:46:b1:59:fd:b7:89:b6:03:9c:2b:
eb:93:b5:39:f4:28:a4:c5:50:9f:ba:e5:18:c4:e3:57:07:4c:
76:a1:4d:c0:e7:bb:40:5f:e4:c6:59:a9:7c:fd:b3:45:31:53:
0a:ed:38:a1:9e:b2:d1:ff:a1:82:06:cf:d4:93:62:5e:d6:2a:
ed:aa:c7:2d:6d:89:1a:d0:b9:bc:3d:57:f4:35:8a:c3:d5:47:
f5:75:56:8a:42:4a:4d:56:e3:67:cd:9d:72:20:7a:10:99:1a:
44:c0:a5:3f:94:5f:90:aa:72:3f:30:2a:80:9b:a4:63:9e:f2:
f9:3d:77:9a:d3:4e:88:05:28:d4:81:f2:8d:3c:1f:c8:de:52:
44:6a:80:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:56:12 2025 by rpki-client