
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
File: dxPzWC9jkBMFUwtLGTbNbmYRowo.mft (raw, json)
Hash identifier: 8cg4wzFiWGlpYCpr6mzEXXisR7yNrUVGpBdo8UeKBbs=
Subject key identifier: A0:BD:4A:CC:95:AE:BF:5D:E9:A1:A2:A0:07:F2:13:33:AE:31:07:96
Authority key identifier: 77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
Certificate issuer: /CN=7713f3582f63901305530b4b1936cd6e6611a30a
Certificate serial: 0196B6352BDCE8ECCD3A5FBDDBA4522274C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
Manifest number: 0331
Signing time: Fri 09 May 2025 18:01:00 +0000
Manifest this update: Fri 09 May 2025 18:01:00 +0000
Manifest next update: Sat 10 May 2025 18:01:00 +0000
Files and hashes: 1: QBpayCeedHorPlMUrxP80cZpQMk.roa (hash: OQ5xE2z8NMteCC4WWbezxTDqjx0MzAo+K4Av2s6co/8=)
2: dxPzWC9jkBMFUwtLGTbNbmYRowo.crl (hash: bYxcW0IeQ9+78EeBQcHx0fQNdHJ+qQGKKKDPs+ZXNJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:35:2b:dc:e8:ec:cd:3a:5f:bd:db:a4:52:22:74:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7713f3582f63901305530b4b1936cd6e6611a30a
Validity
Not Before: May 9 18:01:00 2025 GMT
Not After : May 10 18:01:00 2025 GMT
Subject: CN=a0bd4acc95aebf5de9a1a2a007f21333ae310796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:0b:82:2f:a4:f7:0e:54:ce:bf:c8:44:ab:
b0:b9:2f:55:ed:3e:98:4c:e1:74:9b:04:1a:41:75:
76:2f:31:58:03:45:76:7f:31:0d:f8:fe:93:ca:a2:
45:3f:7d:b9:0a:73:78:ff:d6:66:4d:36:43:d7:25:
b0:26:ca:97:f8:51:4a:fc:5b:9a:ef:a4:bc:f4:bc:
ed:cb:d0:da:75:7b:a7:2b:61:b0:28:71:58:09:76:
d5:c2:67:ff:12:82:03:e2:da:b1:fe:9a:da:a0:90:
07:f0:97:f6:2a:63:0c:10:07:b9:cb:bd:94:e7:9a:
33:ff:8a:e6:64:2c:04:27:b0:84:7f:cd:12:9c:77:
8e:d2:18:e3:d8:da:49:47:c2:47:c4:f1:5b:63:34:
cd:b9:e5:b5:8d:bd:1c:ec:5a:71:4b:18:cb:72:d8:
2d:c6:03:22:2c:1b:dd:4a:94:34:04:8c:df:5f:a0:
4f:48:d7:7f:56:f1:eb:ff:25:f6:e2:f9:d8:3c:1e:
92:fd:58:f6:fb:9f:49:f6:24:8d:07:f9:b4:f4:d3:
2e:15:32:ee:e1:00:8e:95:3e:46:f2:69:2f:25:39:
ff:cb:72:58:fb:e0:37:9b:50:fb:c9:60:0b:2b:af:
7c:73:86:a3:7c:53:cb:84:80:db:75:62:10:89:9b:
74:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BD:4A:CC:95:AE:BF:5D:E9:A1:A2:A0:07:F2:13:33:AE:31:07:96
X509v3 Authority Key Identifier:
keyid:77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:f5:28:7a:11:bb:3c:08:04:11:c2:2a:a8:9e:9a:f9:3e:e5:
94:2c:49:4a:d9:a3:07:12:fd:ce:af:d5:2a:80:52:0b:f4:3b:
85:b8:d3:0f:3c:6d:d6:d6:40:b3:77:62:23:35:a9:67:ef:49:
f8:6b:d6:c6:e5:2c:ec:29:86:53:82:ba:28:fd:09:13:64:0e:
61:c0:ed:bd:c0:83:b1:53:0b:0b:29:7b:68:e7:5c:03:0f:aa:
cc:26:67:2c:8e:1d:aa:b8:4d:e3:b0:31:d2:44:9b:f3:96:bd:
84:77:92:a3:ff:c4:84:d0:49:fa:e3:70:78:c2:68:35:41:a3:
d8:2d:d5:fa:c0:ac:dd:8d:c9:34:9b:f9:79:de:4a:2f:8c:8d:
8d:bc:2e:8b:2a:c4:b9:fd:e7:ef:84:a1:a9:34:0f:71:77:6e:
9f:4b:ff:18:52:81:10:f5:4f:16:79:78:de:99:0d:68:06:27:
97:08:60:1a:da:96:61:db:1c:85:30:67:25:83:ed:13:93:1d:
50:0c:77:d9:8d:bd:4d:46:6d:a8:40:84:b6:c9:dc:b2:10:ab:
e8:84:a3:4a:fe:9a:a7:40:9c:57:24:11:da:ed:05:54:0f:69:
df:cf:fe:fc:5b:5c:13:77:12:d9:28:3e:ca:0b:57:a9:27:ab:
a1:05:9f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:30:24 2025 by rpki-client