Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
File: DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json)
Hash identifier: WxG4n5QIZQBzJclnqw2dcxzxCuB5zyLnkzzvpN2tHrE=
Subject key identifier: 61:69:BB:0C:30:A3:7E:03:48:31:75:33:7A:C6:FC:98:D4:4B:9A:10
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial: 01969E9AED927DDA250D02F216D34BC1A023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
Manifest number: 0C09
Signing time: Mon 05 May 2025 04:01:15 +0000
Manifest this update: Mon 05 May 2025 04:01:15 +0000
Manifest next update: Tue 06 May 2025 04:01:15 +0000
Files and hashes: 1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: n057FT9CFl6RkqlZVSvQq0a55Rg2sXvhR3YWbUcwPHc=)
2: UKqORdLzZXdOrDEcMxzidP1Tf04.roa (hash: 993OGeNZfndwd7HXQtjHB4WsdW/h/7CpCQberKrZGUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:ed:92:7d:da:25:0d:02:f2:16:d3:4b:c1:a0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Validity
Not Before: May 5 04:01:15 2025 GMT
Not After : May 6 04:01:15 2025 GMT
Subject: CN=6169bb0c30a37e03483175337ac6fc98d44b9a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:41:c2:0a:71:84:ca:da:3e:d8:9e:5e:5e:
9a:c4:bf:ff:ce:6e:96:cc:e6:6c:69:c1:47:67:d2:
14:2c:1f:ca:63:ab:be:be:af:8d:cb:66:0a:5d:13:
dc:7b:d8:2e:4e:d1:97:8e:b8:b5:5e:8b:4f:80:bc:
ae:14:8f:8f:b2:5c:d1:29:a2:25:0b:72:c0:e7:25:
3d:d0:3d:e3:3d:9b:21:7b:03:ab:21:4f:b8:fa:ad:
07:83:08:d9:94:b4:05:40:4c:6b:98:bc:d0:3b:7d:
54:2b:6a:a4:5e:30:01:1c:68:8e:a1:70:44:1e:96:
e0:26:e8:69:16:ff:cf:f2:d1:dd:89:1c:99:88:2f:
0b:33:3e:8a:5c:72:f1:c3:93:86:ad:17:da:03:06:
8c:dd:fd:0c:5f:6c:c4:e0:1c:b1:f4:b6:9a:3c:e9:
49:ac:a0:02:0c:5d:5b:ff:b3:21:d0:42:53:a4:fd:
37:83:85:32:32:42:34:f3:cc:56:80:4e:56:77:74:
fd:c9:75:01:61:05:e9:31:42:cf:a6:51:27:ba:47:
1c:c2:74:46:33:c1:72:6a:ae:47:3f:12:70:e4:4f:
ac:70:59:c6:d3:61:f5:19:d9:23:4d:85:b9:b7:49:
59:7b:13:1d:51:6e:25:9c:90:f1:9e:6a:82:05:99:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:69:BB:0C:30:A3:7E:03:48:31:75:33:7A:C6:FC:98:D4:4B:9A:10
X509v3 Authority Key Identifier:
keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:49:1c:af:c3:15:e4:43:72:c4:79:68:e9:19:d9:4a:20:e9:
1a:b7:ab:01:1a:c9:7f:26:93:c5:ac:72:40:03:2c:3f:a7:f1:
f8:52:ef:d8:15:e2:f6:dd:95:c4:05:b2:86:57:cf:99:b0:92:
76:e5:82:a0:e5:d1:dd:bc:36:bc:66:29:f6:d6:e1:a6:18:3b:
9f:07:b2:1a:57:98:c2:44:6e:71:47:b5:93:db:44:65:71:f8:
4e:0d:96:6d:40:2d:dd:14:89:88:05:e0:53:70:f4:95:c3:c3:
cb:7c:37:29:2e:25:ed:f0:e6:27:d2:8a:13:b0:66:f6:79:42:
6d:18:02:14:79:21:99:eb:4e:de:73:79:d5:7a:95:0f:bf:4a:
a8:66:3b:11:ea:fa:11:bb:15:70:22:4a:e0:a3:54:55:84:82:
6e:3f:33:d7:c0:07:f2:00:c2:c9:fc:5d:3a:1f:2f:51:5b:3d:
43:d5:ca:db:df:79:2d:64:87:19:93:4b:40:21:7b:cf:dd:6b:
d1:ca:98:4a:be:a2:db:d0:b8:d0:bc:f7:9c:d2:9d:56:c2:0d:
21:76:2a:9b:67:a8:a0:64:82:40:6a:f7:35:19:75:68:3f:ba:
af:db:79:3f:97:37:fc:15:b5:cf:1e:95:ce:16:3c:2e:44:dc:
0b:6d:f7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:34:46 2025 by rpki-client