Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
File: DgXmzqSzk0XOKQLJeh26vLRtKjs.mft (raw, json)
Hash identifier: orClJVLnLnM3O3q7WKjBtrSEKSp9+7eWWU1I/VhgACA=
Subject key identifier: 3D:01:9F:AF:47:3E:62:74:92:BB:28:83:5F:E6:BF:75:74:8B:CC:8A
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Certificate issuer: /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial: 01969FACA8EA0A734940DBBBED5A84DFF883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
Manifest number: 14B5
Signing time: Mon 05 May 2025 09:00:14 +0000
Manifest this update: Mon 05 May 2025 09:00:14 +0000
Manifest next update: Tue 06 May 2025 09:00:14 +0000
Files and hashes: 1: DgXmzqSzk0XOKQLJeh26vLRtKjs.crl (hash: aNkPg3jf9O+Xd//PRo9V8bbXnACuuO6zbtRFYnlWpeE=)
2: ShuJCzTETjuD4IZyp5iTy1w6Ut8.roa (hash: fk95k0odtKaBXDPO6LkbFL/8lMCWYiJ12TM7p4C2lgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:a8:ea:0a:73:49:40:db:bb:ed:5a:84:df:f8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Validity
Not Before: May 5 09:00:14 2025 GMT
Not After : May 6 09:00:14 2025 GMT
Subject: CN=3d019faf473e627492bb28835fe6bf75748bcc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:ff:a5:bf:2f:99:99:e3:c5:9c:08:6d:f0:
81:5b:23:74:ab:d7:dd:d4:7d:e3:b8:87:29:96:35:
a7:cb:41:b5:33:5a:e4:fa:87:c9:70:cc:94:4d:5c:
31:75:d7:a5:aa:12:8e:29:bb:71:32:cf:b0:36:e2:
67:49:c7:2e:b1:28:73:76:8a:50:6a:d1:b6:54:65:
0e:c4:5f:54:d5:1e:5d:58:80:10:3f:aa:a9:81:19:
22:ba:e9:cd:9a:95:1d:68:59:c2:67:a1:0f:c9:c8:
29:27:f2:7d:94:68:67:e5:e9:d9:7d:0a:75:e3:8c:
aa:70:00:cf:e7:f8:0c:60:61:d3:79:5c:b4:02:f9:
d4:ce:84:27:83:a6:77:66:7f:d9:d3:ea:74:d7:5d:
14:30:d8:c7:7b:6a:6e:d2:f6:95:39:cd:2f:82:f3:
9f:44:73:4d:41:89:ed:f6:b8:83:db:9a:8c:70:52:
4a:25:af:db:4d:0f:d0:ec:fe:19:16:68:18:9f:a3:
af:5d:74:5f:53:d9:56:32:06:a8:e5:37:02:7b:02:
29:ca:e8:e3:e0:5f:d3:2c:19:58:7b:58:2e:30:18:
fa:66:c7:8f:b9:61:cc:d8:af:54:1b:47:d1:9a:d9:
37:45:c9:e9:95:39:15:57:ae:0d:e1:1c:f7:f2:1f:
47:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:01:9F:AF:47:3E:62:74:92:BB:28:83:5F:E6:BF:75:74:8B:CC:8A
X509v3 Authority Key Identifier:
keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b0:89:16:b0:cb:c0:8c:b0:03:a7:ac:1c:82:b6:fb:e7:98:
9d:0f:f4:d0:6c:be:d3:43:0b:0d:42:9d:2f:b8:c7:cc:b2:68:
c6:b2:ae:74:1f:54:7a:c4:d2:a0:c0:29:ed:e9:cc:db:a1:04:
7c:25:b3:32:1d:ca:88:89:37:fc:c8:62:f0:3b:4f:9b:72:57:
de:3c:72:5c:9b:8f:4f:15:34:d3:bb:7a:92:61:5c:54:f3:2f:
54:cc:76:d7:6e:fb:a0:ca:29:79:91:d7:3b:d9:c8:fd:93:93:
b1:1c:89:c1:12:75:ac:39:ee:28:51:0b:b5:47:ec:a4:6b:16:
a9:f7:f6:69:ad:a4:b6:cc:11:3e:1e:83:b4:f2:34:6e:90:4b:
21:3c:8f:68:90:76:f8:0b:1b:36:52:a7:7b:f4:98:85:af:cb:
7e:bd:58:7e:e1:e7:90:8c:f0:2c:5d:73:c8:f3:63:96:59:2d:
4c:47:03:af:3c:41:ba:b0:5c:42:04:1c:c7:96:c3:00:eb:f4:
a2:c9:d1:c0:a5:20:e2:16:71:57:31:2d:a6:f5:1c:29:31:96:
e4:b4:ca:35:66:fe:55:bf:86:d8:83:dc:ce:40:fb:b9:5b:31:
a4:cb:93:cd:78:a2:ce:21:ae:e2:48:d0:ab:13:a0:b8:91:f0:
66:b3:9b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:32:59 2025 by rpki-client