Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
File: dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft (raw, json)
Hash identifier: O61Qs3lrzNWkLt6+S8tDiRNsVb1xYqE1oAoD4SPG6a0=
Subject key identifier: F2:7E:F7:2A:CC:CD:AB:DF:68:C2:FF:D3:2D:5F:B4:2E:41:DF:1D:68
Authority key identifier: 76:57:21:1F:8A:66:56:1B:57:70:FF:19:B4:71:AE:F5:11:E8:37:78
Certificate issuer: /CN=7657211f8a66561b5770ff19b471aef511e83778
Certificate serial: 0196BDB771CFBEB82F5305BF019363AA9B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlchH4pmVhtXcP8ZtHGu9RHoN3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
Manifest number: 03EF
Signing time: Sun 11 May 2025 05:00:38 +0000
Manifest this update: Sun 11 May 2025 05:00:38 +0000
Manifest next update: Mon 12 May 2025 05:00:38 +0000
Files and hashes: 1: FpqX8EZQIVTXkUnqlp9grlBeNrw.roa (hash: P8KxRj81qpEt5Z2QrlNREQ2v0IAaxfxV7ZOlUfOnKHA=)
2: dlchH4pmVhtXcP8ZtHGu9RHoN3g.crl (hash: oqv5LeKxRas29+zr49Qjv4Gbx3y7ZTwN5rhtpDAug5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlchH4pmVhtXcP8ZtHGu9RHoN3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:71:cf:be:b8:2f:53:05:bf:01:93:63:aa:9b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7657211f8a66561b5770ff19b471aef511e83778
Validity
Not Before: May 11 05:00:38 2025 GMT
Not After : May 12 05:00:38 2025 GMT
Subject: CN=f27ef72acccdabdf68c2ffd32d5fb42e41df1d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:cb:5a:c1:64:b1:d3:6c:2d:59:61:a3:6a:
f6:39:b8:1c:0a:61:6c:27:e0:86:30:9d:ef:f3:58:
a0:7f:9d:b0:66:c1:a8:89:7b:f1:a1:c8:e4:a0:53:
e9:36:3a:e4:f8:8c:6f:b3:3a:da:31:27:9d:e1:cf:
bf:ef:fd:00:1b:d6:45:ad:86:ca:a5:59:da:16:83:
2e:c7:94:a4:e3:0b:5a:00:46:1b:2b:2f:25:a4:68:
16:14:69:42:cd:7c:07:0f:9a:96:f5:31:b2:54:ba:
12:ab:4e:cc:14:3b:25:b6:fd:47:98:f9:cf:f9:14:
48:d9:5d:c4:88:fc:d1:e1:69:3f:81:a1:36:96:38:
eb:62:75:6f:3f:71:14:30:2f:66:76:87:cd:02:6c:
0b:b4:1d:dc:d3:ff:c9:dc:1f:40:ab:15:23:9f:a2:
58:f6:97:f4:36:b6:0a:41:af:ec:92:e8:23:47:7f:
26:af:6b:60:34:7c:a8:a1:4b:59:15:33:b4:c9:9a:
85:8c:9e:1c:f9:5b:5b:e2:8d:22:25:ba:54:df:ef:
c3:cc:f5:61:24:08:b5:7f:82:68:64:b3:60:82:3f:
19:9a:c0:01:62:73:af:37:62:e6:cb:b7:1d:e6:f6:
70:20:29:5f:cf:2a:95:60:ac:19:3b:83:a7:7b:b5:
13:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7E:F7:2A:CC:CD:AB:DF:68:C2:FF:D3:2D:5F:B4:2E:41:DF:1D:68
X509v3 Authority Key Identifier:
keyid:76:57:21:1F:8A:66:56:1B:57:70:FF:19:B4:71:AE:F5:11:E8:37:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlchH4pmVhtXcP8ZtHGu9RHoN3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:96:df:08:e4:ab:67:06:33:28:76:32:5b:77:4f:26:61:74:
5e:7a:93:4b:cc:98:10:af:bd:6e:19:71:10:cc:fa:96:0b:71:
f8:cc:88:39:93:12:1b:3b:da:0f:c7:3d:3e:2b:c4:e1:ee:c8:
5b:d6:cf:cc:86:e8:89:39:cf:95:a1:9d:d4:35:2b:ff:d4:88:
0f:fa:28:85:49:fe:bf:00:84:e8:4d:5e:67:03:e3:26:70:d8:
59:74:a3:97:32:f4:2a:5e:5e:53:f7:d8:58:12:39:17:6e:35:
32:41:7a:5d:6e:fd:c5:1e:2c:7d:07:ab:4d:13:99:8f:70:31:
39:17:48:36:0a:32:e5:4c:a9:5e:42:df:e9:d1:fb:76:76:8b:
b9:9c:56:e9:44:34:49:0f:bc:0a:67:dd:a8:38:c8:45:f7:0e:
97:bd:01:bb:59:f1:b6:c2:3c:00:c0:c0:51:92:e3:9e:53:cd:
b0:dc:4f:19:ab:70:5a:f5:2f:62:7d:5a:60:d9:47:93:5c:dd:
20:06:cf:1c:40:8a:37:4a:5a:3a:35:6d:5f:85:6e:7f:1c:8a:
08:16:60:f7:6b:8a:fe:29:34:c0:5f:5f:b3:5e:01:b3:d0:6d:
d2:74:3c:d8:8f:d4:b1:03:a1:aa:22:04:fe:f4:66:2e:68:ba:
f0:bf:95:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:37:28 2025 by rpki-client