Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
File: DcnBtxcVahijTZMjtnoKA-2oWsk.mft (raw, json)
Hash identifier: npvPfnUeuy/aK4KUiRZAcqwv2/U3/5NFaYb7Mhu5nGI=
Subject key identifier: A7:42:A5:B6:9F:5B:1C:36:91:23:03:FF:1C:23:C5:54:D7:B6:17:0C
Authority key identifier: 0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
Certificate issuer: /CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Certificate serial: 0196586F857C3D06C174EDF6CB9F5E4EE577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 13:00:25 +0000
Manifest this update: Mon 21 Apr 2025 13:00:25 +0000
Manifest next update: Tue 22 Apr 2025 13:00:25 +0000
Files and hashes: 1: DcnBtxcVahijTZMjtnoKA-2oWsk.crl (hash: S4Titkntt3WpKoWN1sG9bhl39NdlMGerpdQAmpLyOg8=)
2: J4rQ9gsrKayiuOOExEGxMHRTLss.roa (hash: J+BOWsTNmfnM3hLMHXcZYhZuZ1oIUj5I4r3BR6mevWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:85:7c:3d:06:c1:74:ed:f6:cb:9f:5e:4e:e5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Validity
Not Before: Apr 21 13:00:25 2025 GMT
Not After : Apr 22 13:00:25 2025 GMT
Subject: CN=a742a5b69f5b1c36912303ff1c23c554d7b6170c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:38:93:92:f9:fe:a1:9f:6b:17:04:e3:5f:
02:1c:ce:71:58:a4:ce:26:bc:5e:a8:93:6c:c8:fa:
98:22:71:d6:cb:7c:1e:f4:5e:c8:9d:b7:11:24:29:
59:bf:10:01:5a:b7:3f:5d:48:f2:9e:22:70:20:ce:
30:5b:11:40:fd:7a:f8:68:c5:80:3a:37:95:71:39:
d7:44:80:51:ab:ca:b9:63:4c:03:c5:0d:cf:53:33:
4e:0f:73:07:ef:ea:10:a5:69:90:8b:96:93:97:f5:
51:49:76:a7:f7:e5:f3:eb:37:4b:0f:f5:f5:4e:a9:
a1:ce:9a:da:0d:a5:f1:1a:17:65:b6:d0:7c:a4:2c:
43:c0:a9:e0:57:5f:a0:89:f2:c6:ad:65:04:5a:42:
e0:ac:f0:42:fa:82:6a:e9:ab:8b:92:23:89:0a:de:
bd:7a:f9:df:b3:1b:d3:42:8e:0e:7f:83:e3:55:bb:
58:1a:bc:01:14:5f:7c:0e:67:7f:b4:31:4b:50:e6:
f7:6d:4d:39:83:63:a7:31:6b:1e:b0:1f:74:5d:26:
73:3b:ca:e6:5c:81:64:1c:ae:e4:39:ed:66:b9:bf:
14:fe:35:8f:9d:34:c3:8c:c5:b9:f9:d4:76:a9:e5:
6d:17:50:93:1b:7a:d4:c0:8a:09:25:5d:94:21:3f:
9b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:42:A5:B6:9F:5B:1C:36:91:23:03:FF:1C:23:C5:54:D7:B6:17:0C
X509v3 Authority Key Identifier:
keyid:0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f4:a9:b3:df:ad:02:90:c2:d1:e1:73:43:61:bd:81:9c:ac:
20:be:dd:1d:a9:df:57:e2:b9:5f:ce:0d:43:60:97:aa:c9:4e:
b3:15:04:4e:36:f3:57:56:35:8c:f8:f9:4f:ab:9c:bf:a4:d3:
56:6b:1f:26:7f:7e:48:b9:bf:82:35:c7:6f:ba:8d:e7:7c:ae:
c6:02:21:d4:b5:2e:74:2e:bf:1c:ad:8b:9e:f6:9f:f5:33:1a:
dc:3b:e5:4a:b1:bb:c8:30:8c:b5:39:c5:d5:a6:09:6f:b7:99:
6b:6f:bd:12:50:1f:d1:8b:4b:f3:40:c1:df:cf:12:ea:ce:54:
4b:91:71:21:27:15:b5:06:ba:9d:b7:20:65:ef:64:24:34:1b:
85:28:ca:83:0b:e3:0d:15:f0:c6:79:0d:4a:04:3a:1d:cc:32:
27:f0:64:73:6e:f1:f0:79:d2:00:e9:86:e1:51:1e:38:89:0a:
a9:1a:56:b0:27:e3:e0:8c:e2:49:1d:62:81:65:77:8b:d8:03:
46:32:8f:d1:0f:7f:29:74:f1:1b:72:54:a3:27:13:4f:ed:06:
79:39:b2:3f:8d:80:00:d5:18:3e:48:85:28:75:7a:6d:ae:49:
c4:04:19:a2:2b:0b:71:51:05:b6:75:31:bc:13:03:1d:60:3f:
21:4d:7b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:22 2025 by rpki-client