Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
File: pDCUIgOqL405Co2uULhamEUE_Zw.mft (raw, json)
Hash identifier: Abg/LM4i0mD0S44dU50a4cqMAG6o8k7+iNODgrIKVWQ=
Subject key identifier: F9:D0:86:4B:05:78:24:27:32:F9:7C:95:F1:E7:AB:4D:BD:83:59:35
Authority key identifier: A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
Certificate issuer: /CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Certificate serial: 01969DF59BD7DB2C3E6DC8BAE03EDFE708EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
Manifest number: 0F1F
Signing time: Mon 05 May 2025 01:00:41 +0000
Manifest this update: Mon 05 May 2025 01:00:41 +0000
Manifest next update: Tue 06 May 2025 01:00:41 +0000
Files and hashes: 1: mxHqegiIzk-5yKnAa0W9InQ8xh8.roa (hash: 1T8S7F5C1unZ11xq+jwLnSOyvWawPuJqcLvoyNmvP44=)
2: pDCUIgOqL405Co2uULhamEUE_Zw.crl (hash: PIwh6EKq1oxctOu3q9SyPDnMTJdt0lIugdNDOi1noqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:9b:d7:db:2c:3e:6d:c8:ba:e0:3e:df:e7:08:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Validity
Not Before: May 5 01:00:41 2025 GMT
Not After : May 6 01:00:41 2025 GMT
Subject: CN=f9d0864b0578242732f97c95f1e7ab4dbd835935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:bc:30:53:3c:dc:e6:a1:02:48:d4:5a:57:
dd:7b:e8:99:95:d1:99:7d:f6:26:a8:f4:ec:03:50:
c7:25:ce:25:b4:9e:ed:fe:bf:c1:bd:73:6c:c6:60:
62:73:f7:82:35:8d:b9:86:de:0a:e9:c1:78:79:a1:
2f:fa:d8:7d:ff:29:b3:97:7e:33:30:1f:16:e6:f4:
c1:6f:cc:d3:65:bd:6e:45:44:ca:e8:a7:40:af:75:
de:2d:37:e7:68:4c:7a:07:6b:15:08:d3:4c:50:86:
07:b3:2f:a4:77:3c:3c:59:18:5f:a4:3b:65:03:e0:
78:64:63:fe:02:43:4b:16:7e:f8:d0:ce:59:cc:a3:
12:9a:1c:9b:ba:14:4e:49:5b:05:6c:da:3f:2b:8d:
02:4e:8a:bf:64:72:81:6e:73:cf:24:65:8d:71:3a:
cc:3a:87:23:f6:e6:f8:22:f5:1d:2a:e9:2c:a7:b6:
92:28:3f:9b:85:83:75:b8:c8:1b:24:0b:b6:6b:d6:
6c:c5:10:40:4c:a2:ec:34:e9:0e:f3:48:38:1d:02:
85:ba:1a:cf:9f:c7:e7:2c:fc:ac:81:0e:64:5f:08:
86:30:06:0b:83:d1:0e:a3:27:8d:f4:3d:5a:78:d3:
1c:68:5e:50:5b:33:ee:36:96:fa:31:ed:c8:14:20:
10:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D0:86:4B:05:78:24:27:32:F9:7C:95:F1:E7:AB:4D:BD:83:59:35
X509v3 Authority Key Identifier:
keyid:A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:01:28:8c:a9:b0:ee:ed:9d:7e:b1:88:a2:6a:2e:4c:7b:e7:
4c:f0:ec:99:37:05:e1:60:54:c6:14:29:46:0c:27:45:39:d2:
66:20:89:55:58:e2:d9:90:d5:30:c0:4d:da:07:0b:4a:76:ac:
85:d3:da:09:e4:1a:44:f9:e1:aa:e4:ba:af:8b:bb:57:c8:ea:
4f:76:2e:8c:26:7b:83:ec:bd:ad:d7:dd:17:e2:ad:da:66:91:
f7:c0:e6:47:e5:94:43:23:b2:dd:1f:9f:53:8e:3e:2c:49:01:
9e:86:8c:74:c6:e6:c3:fe:58:2e:7b:76:3d:00:a1:b1:49:d5:
e0:84:7b:a2:99:b3:09:8f:fc:be:de:cd:d5:01:81:55:d6:6c:
b2:55:99:66:b8:75:b3:fd:86:a2:0b:d6:3d:13:61:29:e8:a3:
a6:dd:dc:e9:79:26:a8:b5:c3:0c:db:4b:15:7f:0c:e1:63:38:
90:42:36:e9:37:cb:5c:58:5e:5b:f9:8f:b7:b5:5b:2a:b5:a2:
de:6f:01:cf:6b:c6:39:cb:00:80:4e:8b:1a:86:bb:1d:22:dc:
33:e1:75:bf:17:11:20:59:e7:56:9c:bf:6d:5b:57:6c:f7:9c:
e1:bd:ec:b6:5b:ed:f2:35:db:16:e4:21:60:55:a4:05:30:eb:
93:ed:c5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:54:03 2025 by rpki-client