
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: XSZmtKkeB80t9MYC/KUPzbYUELyaoFiTukNeY6jQhIE=
Subject key identifier: 7F:70:D5:CD:18:78:E4:C8:D8:C4:9C:9E:F3:DE:63:62:F7:35:A4:7A
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 0196BE25814CC7CD1CA80AC9B8A09E76F9A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 1492
Signing time: Sun 11 May 2025 07:00:50 +0000
Manifest this update: Sun 11 May 2025 07:00:50 +0000
Manifest next update: Mon 12 May 2025 07:00:50 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: JcpttQ8qRl/J5LnlBC4eRAt54+b3uW02BupozXpfjmg=)
2: UgQOVXjSfDZ0oMmnpF9LnBZc5Iw.roa (hash: EuORew0X+P8iEghXgdkM03dJatTHGRU6W9xGTUJPJEY=)
3: WnLaCz0whNUAj7xt1GXCRyC0ff4.roa (hash: 1NkpD3wTqpaneQCvPoyVPVIPTREHfmPMSbzyzikhuRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:81:4c:c7:cd:1c:a8:0a:c9:b8:a0:9e:76:f9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: May 11 07:00:50 2025 GMT
Not After : May 12 07:00:50 2025 GMT
Subject: CN=7f70d5cd1878e4c8d8c49c9ef3de6362f735a47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:b2:54:91:7b:d3:5a:97:04:29:13:b2:74:
c8:6b:53:80:64:3d:11:f4:c0:6a:d9:34:f8:50:f9:
7a:28:79:12:47:53:50:57:e6:40:bc:4d:c4:eb:21:
56:e2:04:77:b0:7d:cc:e2:8f:9c:fc:82:a5:3d:3f:
7a:66:e8:69:8f:e4:a3:02:66:90:ef:e0:e7:3b:e4:
6e:93:dc:bb:8e:55:d9:81:12:f7:0f:87:2e:67:cc:
9b:ca:c8:21:72:0c:14:fb:11:29:c1:b7:0f:66:87:
e5:c6:3a:f9:c7:dd:41:89:2e:83:bf:76:4e:61:fc:
bc:b6:f8:21:d3:12:01:3c:a3:a3:83:4d:f7:61:4f:
2c:9b:03:d0:7e:96:f2:af:40:38:63:30:0a:8d:6d:
7f:77:b3:d9:26:66:5c:43:d9:ba:d9:11:6a:83:88:
3c:c9:6a:ef:4c:d6:d9:39:d4:ab:d7:c8:c4:d8:16:
be:3a:30:e5:e7:c8:b5:81:c7:b6:ba:80:7a:ff:8f:
5c:49:ff:fc:fb:37:9b:3d:1d:fd:ca:28:40:dd:c2:
f6:fe:03:41:08:46:ce:04:09:da:06:81:53:ee:88:
5d:d3:84:c9:3a:e3:be:6e:2f:1a:a7:6e:a0:02:1a:
9b:61:ac:97:f7:f3:01:22:c5:ec:04:91:6e:77:f1:
eb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:70:D5:CD:18:78:E4:C8:D8:C4:9C:9E:F3:DE:63:62:F7:35:A4:7A
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:07:ad:81:95:e1:1e:2b:dd:51:a0:08:cd:eb:f9:da:f0:c5:
92:f0:ca:ef:e1:e8:d3:83:58:2c:6c:58:3b:75:14:aa:6a:87:
00:03:19:0b:d7:15:e7:1c:46:d8:a0:04:5d:a3:5e:b7:cf:a4:
86:6f:95:1a:ba:b8:de:1b:4c:a5:70:16:af:ac:c2:e3:5b:c6:
22:9a:28:fe:05:9e:bc:9b:98:77:99:a6:12:bd:a9:7a:cf:b2:
68:10:ce:f0:49:06:e4:51:eb:55:47:9d:38:d1:c6:a6:fc:bf:
90:62:20:2d:2a:46:a7:0a:0e:82:1a:05:d7:bf:46:4a:74:bf:
18:a1:e3:68:cf:7e:82:f0:f2:c3:e2:cb:ac:80:55:91:6f:c7:
ca:5d:52:d3:7f:82:11:fa:81:0a:ba:ea:08:c9:7b:28:5c:26:
1f:e7:6f:c2:19:75:27:2b:31:78:25:62:64:14:06:61:b7:1b:
53:7d:ff:3b:f1:1b:68:7d:bd:60:83:ae:6b:7e:e3:99:47:a0:
26:30:d2:a1:39:2e:e2:d0:db:15:f6:38:cc:c8:5e:4b:e1:95:
b9:5d:ea:a2:88:8c:54:0e:cf:c0:b2:cb:ef:53:3c:bd:3d:f6:
50:d8:08:8e:f5:cf:8d:89:fb:2c:da:b6:43:b3:54:13:0a:88:
39:9a:cd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:28:49 2025 by rpki-client