Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: vA6MgIlLa10P060cArm+N1akQfvRltUuNBDl2bdvlms=
Subject key identifier: 27:6E:26:78:EA:2F:CB:23:83:9B:94:80:F3:78:A2:98:15:7C:31:76
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 0196A61CB7CFE746D737BD013AA9D793504D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 02E9
Signing time: Tue 06 May 2025 15:00:21 +0000
Manifest this update: Tue 06 May 2025 15:00:21 +0000
Manifest next update: Wed 07 May 2025 15:00:21 +0000
Files and hashes: 1: 6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (hash: 7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: oEk3lscTAtL30pcIFnYchaZc6eMsSTwv9Byl4bfVZNo=)
3: zlURg4ebmdJpRRKJcb6F2eANLUw.roa (hash: d2+6gKcdS2njrjfKwQ9XXY+00MaMzcf8y0Aa2MydLsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:1c:b7:cf:e7:46:d7:37:bd:01:3a:a9:d7:93:50:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: May 6 15:00:21 2025 GMT
Not After : May 7 15:00:21 2025 GMT
Subject: CN=276e2678ea2fcb23839b9480f378a298157c3176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:ae:1d:a2:e6:d1:62:d0:aa:a2:81:03:17:
2a:8e:31:90:94:96:76:49:46:8f:cb:1d:2b:81:77:
b2:ee:05:e5:57:a3:a1:67:e1:d1:2d:bf:d3:93:22:
8b:4a:34:70:e2:d6:0a:7a:ba:a8:51:dd:a9:e1:7d:
f7:ba:a2:4e:ec:d1:56:bc:60:84:41:21:cb:6b:86:
47:70:9c:18:a4:46:ed:5f:f1:4a:63:51:2a:db:bd:
7d:c4:75:1e:b2:ea:5d:57:ca:1f:b1:03:ad:6d:64:
9f:0f:be:66:18:2a:b0:3e:86:a4:27:43:ea:a3:ae:
52:eb:3c:8e:08:4c:90:71:79:9a:b5:68:0d:48:7f:
67:67:3c:61:10:74:d4:5c:53:cd:8e:5e:95:39:fb:
c7:ac:00:fc:c8:02:d8:7f:2e:42:29:5e:80:e3:b4:
3d:a3:8f:8e:a5:5d:84:32:e6:e7:73:a9:83:95:f3:
59:17:40:b5:40:4e:2d:c7:7b:65:57:da:e8:7d:4b:
b9:1d:c7:8c:2d:5d:3e:3f:a2:d6:a0:11:d0:ce:f5:
df:df:9d:cb:06:41:cd:44:76:2c:04:b9:63:27:ff:
39:ef:87:9b:9c:f9:91:03:6e:91:c1:80:89:ee:c4:
23:56:86:60:13:5a:ce:1d:ac:1d:8d:cf:1d:23:c9:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6E:26:78:EA:2F:CB:23:83:9B:94:80:F3:78:A2:98:15:7C:31:76
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0f:f3:00:a5:28:55:05:ff:aa:7a:a2:08:20:92:ef:c3:4c:
9b:53:d0:5b:85:3b:8a:37:a2:e7:bd:bb:f9:d7:58:d9:ba:04:
ac:03:c1:7c:b3:a2:8b:b4:cc:0d:2a:93:21:de:9f:fb:75:6b:
da:97:b3:56:1c:3b:41:a0:69:07:63:c8:f4:dd:96:c6:22:0c:
ed:26:d8:77:e1:f1:a8:92:f5:bf:61:23:2a:22:27:3d:d6:b2:
5d:ff:80:e7:be:42:91:1e:80:e6:45:52:24:18:08:87:7f:eb:
dd:3c:0a:c0:06:b3:8f:a9:bd:2b:5a:c5:06:f9:19:c8:f0:d1:
f4:0d:61:27:31:b6:90:3a:98:59:ed:a4:7d:14:d4:b4:9f:2d:
d2:5c:98:0b:9d:d3:0f:3b:3d:9a:c1:65:32:e1:47:60:4b:9a:
96:5f:34:2b:8e:2f:d9:18:7c:59:50:ea:f1:b5:57:ef:a7:45:
b0:0a:ee:00:69:cc:44:d5:78:0c:6e:72:c1:1a:49:c6:fe:9e:
0c:92:bd:01:12:5c:24:0b:c1:8a:19:b5:d8:43:03:54:d4:a6:
d9:1c:bd:6c:d6:dd:bb:ad:cb:34:f3:e8:c4:49:1e:bc:18:2d:
62:42:03:5c:48:7c:fb:b4:57:25:4a:cd:f5:ad:32:61:68:b9:
d5:55:4d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:55:17 2025 by rpki-client