Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: kKFFHYHr4JQpffwsdP1a4agnNcJesawZFeukwRAxqIM=
Subject key identifier: 0A:6C:01:3F:58:AC:72:80:85:EB:7B:5E:20:B9:05:32:9A:56:02:DB
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 0196BDEE0C2381B8C122722EB750EFCACD28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 0B3E
Signing time: Sun 11 May 2025 06:00:16 +0000
Manifest this update: Sun 11 May 2025 06:00:16 +0000
Manifest next update: Mon 12 May 2025 06:00:16 +0000
Files and hashes: 1: 1-KvMzZmip20mq_6TE6zao4jxRAY.roa (hash: +e++mFx5okLj8UNvWINUv13IrPw1m2hTZhWWjifAWCI=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: Bd9wgvuKoWVt0uDKlWlvfDlL2JH61SsWzYpIFlnHNkI=)
3: o-s15NWoSVwgSNMQIfsWarrXXGg.roa (hash: 6NGLeGFSgaPGE1dmOJNyifUaOXRJYE04QVot2QOuL9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:0c:23:81:b8:c1:22:72:2e:b7:50:ef:ca:cd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: May 11 06:00:16 2025 GMT
Not After : May 12 06:00:16 2025 GMT
Subject: CN=0a6c013f58ac728085eb7b5e20b905329a5602db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:7b:4d:8d:e7:23:ab:21:0b:60:12:3e:92:
2f:e6:b4:94:17:fd:30:df:92:bf:07:9d:e6:05:57:
1b:17:32:57:b0:80:40:9e:68:6c:1f:53:22:50:2b:
e2:1c:ed:27:e0:b4:71:3e:b3:28:c7:9d:bb:d5:96:
fc:b7:d7:a6:32:22:33:19:47:c0:04:e2:d3:74:b8:
74:03:d4:7d:b1:40:e4:35:cb:01:fa:22:3a:c4:95:
2f:bc:fe:cf:6b:d2:76:2d:de:df:37:05:8e:c2:03:
e7:51:d3:d5:b4:12:e0:c3:ac:a0:dd:f3:75:8e:3e:
5e:49:f2:95:af:ce:11:40:3c:66:29:0b:94:a8:9b:
5f:43:e5:67:91:42:79:23:dc:e7:64:22:9f:a9:ea:
15:98:d7:85:3e:21:64:96:5c:44:e7:bf:f2:d1:07:
9b:32:0d:ac:81:af:25:5a:20:74:1d:a5:2b:b0:80:
92:0b:63:b1:f7:ed:46:61:fd:81:d6:9d:ce:79:50:
d7:6d:a5:32:ec:64:06:58:ef:8d:fa:85:cb:b6:04:
55:77:28:4a:3b:50:5e:63:af:f4:dd:28:d4:92:20:
af:5a:23:ff:1e:09:d3:19:c2:f5:db:53:c5:f6:81:
e6:7a:68:ea:f7:7a:b9:00:a1:7a:2f:96:b9:0f:86:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6C:01:3F:58:AC:72:80:85:EB:7B:5E:20:B9:05:32:9A:56:02:DB
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1d:ba:1a:7e:ac:31:ac:4a:07:e3:63:5b:ff:58:16:a5:34:
96:de:e8:d7:a5:87:92:d5:c4:af:d2:a6:b2:06:96:2b:d0:07:
83:32:5a:4b:8d:76:bd:bf:a8:ef:e4:fa:ea:4c:7a:1b:6c:7c:
48:af:86:aa:49:71:e5:a5:2b:ae:d8:bd:da:5e:02:a6:2e:7d:
a9:e8:35:6f:07:0f:ff:99:ba:f7:a1:2b:88:49:08:63:3a:90:
ea:c5:4c:99:a0:3c:f2:ed:c8:e9:05:39:b0:d1:73:eb:fb:2e:
3f:3e:52:68:3d:0c:60:aa:6a:87:e1:bd:3d:8b:42:16:0e:04:
ae:62:43:a6:fa:d4:4b:61:a7:5e:96:38:14:d2:76:53:66:b4:
4d:9d:fb:9e:56:23:d4:14:32:fd:0b:f7:0b:fd:30:c3:aa:fe:
fa:ae:2d:70:ee:d2:3d:17:4f:db:e7:e1:ed:e5:b3:ab:ae:e7:
81:1b:5c:db:f5:74:66:67:7a:e3:70:a1:ea:f1:45:bd:b1:a0:
2b:45:31:22:c9:24:88:54:ee:80:4c:b6:f1:7c:af:3a:6c:08:
5b:68:90:b6:ae:31:af:e5:a5:74:74:66:6c:f9:93:ab:68:16:
88:d9:31:82:b7:2e:00:2d:74:7d:f2:82:c1:20:54:3a:e7:b7:
f0:b6:30:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:44:47 2025 by rpki-client