Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier: QApSPo28FQ8JvJqtAPmAwONpeYfQay1+26CM5Yck4bA=
Subject key identifier: 2A:10:65:D7:22:6F:A5:BE:11:B3:05:8C:DA:27:B7:0A:A1:B1:9C:9F
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 01969F3F9A4900E043AD5E1E529939C193E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number: 08A8
Signing time: Mon 05 May 2025 07:01:07 +0000
Manifest this update: Mon 05 May 2025 07:01:07 +0000
Manifest next update: Tue 06 May 2025 07:01:07 +0000
Files and hashes: 1: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: bDDG0Rtqiy4eOgl0f3GaXQVSUBQsyIlG8+UPMaK06eA=)
2: _2hrxKKbdmRyLOnHUiOQipQACXY.roa (hash: DxOyoU679BPpOs0ffrHVPaZuK8yvllJ+3WIdB3uJM5Y=)
3: t16GyUN0G0ERD6SmYA9i0r30zic.roa (hash: oKvu0HJILKuRj6gBGrcQg1IlSuH1C1Ay4XKjgYCj9is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:9a:49:00:e0:43:ad:5e:1e:52:99:39:c1:93:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: May 5 07:01:07 2025 GMT
Not After : May 6 07:01:07 2025 GMT
Subject: CN=2a1065d7226fa5be11b3058cda27b70aa1b19c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:48:7d:0d:e3:b0:70:48:35:67:02:77:a2:
fc:5d:f3:4c:a3:51:d8:7f:c1:cb:a3:98:7c:8b:f5:
24:42:70:1b:dd:c1:e6:be:45:cf:51:6b:99:fe:b9:
6e:68:e6:da:51:23:df:f2:29:bf:22:ec:37:3c:5b:
77:80:57:28:70:69:c4:f3:e3:47:2b:d5:74:45:b1:
76:e8:2b:90:fc:77:fd:f1:3a:4f:9c:35:29:8d:15:
f8:82:76:0c:f8:4e:e9:35:bd:be:e3:85:d9:fb:ef:
71:59:e0:04:ec:0b:32:e2:9a:46:b8:f1:0e:bb:11:
72:d7:d6:ea:c8:5b:81:d8:26:88:5a:5d:d7:d7:57:
88:f6:19:be:85:07:2e:e8:ab:59:99:69:bc:41:ad:
68:78:b3:9b:a1:18:87:30:78:10:74:38:b2:37:db:
09:80:5f:1a:11:ba:15:4c:0a:14:49:6f:e8:02:1e:
dd:fc:a2:06:62:d4:9b:d5:6e:fe:ed:d0:88:0c:0d:
18:e6:14:44:51:ed:69:cc:ab:bf:c6:cb:49:18:36:
8f:42:58:31:dd:73:48:c7:cc:06:bb:5d:5b:fa:28:
99:bf:b0:a5:72:79:69:5f:52:46:23:64:e5:ea:ee:
a2:03:c4:4b:a0:d6:df:03:62:1a:8b:ba:5f:49:e4:
f4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:10:65:D7:22:6F:A5:BE:11:B3:05:8C:DA:27:B7:0A:A1:B1:9C:9F
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fc:79:81:bc:74:bc:11:80:75:24:75:de:ad:58:87:cd:71:
03:45:af:11:00:b8:5c:56:f2:53:c2:0b:3a:a7:f7:ac:77:b9:
26:59:cc:6c:0e:7c:ff:b6:ec:29:d8:14:f2:60:fa:1a:3d:62:
59:8c:db:44:9b:e0:90:f8:d1:16:9d:3f:44:bf:4a:56:02:f0:
3e:ac:e6:89:b9:a5:58:1a:a9:79:48:80:49:27:37:94:6a:f8:
7b:a2:45:48:a9:3f:74:86:37:b5:da:74:fd:cf:ec:44:8e:04:
8b:bf:d4:b5:57:86:38:15:20:b1:7c:f1:1c:c5:9a:f4:d8:94:
a6:d0:5d:3c:3e:1c:61:47:c7:8a:e2:54:39:db:6a:78:33:c3:
ab:ba:cb:59:bd:c5:2b:3e:b6:06:d9:10:86:81:84:e7:87:a2:
a3:c6:45:6a:12:a2:2b:fd:6f:a1:98:2c:35:9b:2d:dd:ff:25:
37:d4:a0:52:68:ce:06:d6:5c:91:02:1b:69:f0:b6:fe:95:a2:
21:d1:06:c1:ba:9a:9e:fa:5f:f2:d0:80:69:06:b1:d9:65:88:
4e:b7:be:12:c1:3c:63:4e:e1:c8:69:fd:0a:23:6c:59:d7:8b:
83:1b:d5:56:8c:3b:f8:84:a1:67:98:e3:8d:10:d6:21:82:86:
1b:ef:f1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:54:48 2025 by rpki-client