Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier: eFn3TuAT3n2SJuK5iQxHTxIeiLBLP4Jj1ZrudMoTpvg=
Subject key identifier: F4:F8:80:6D:30:F1:5C:91:1C:21:30:7B:E4:6B:9C:84:3C:30:2B:45
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial: 01964EFEDDA629343AD7872B76A85F3465EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 17:00:47 +0000
Manifest this update: Sat 19 Apr 2025 17:00:47 +0000
Manifest next update: Sun 20 Apr 2025 17:00:47 +0000
Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: XftCZG6+vfY4MK03QPxZ1+k6bVkmWlqwO5GUwrmrbEU=)
2: TjtgoaArWXIQWELqrqb3xw0fhW8.roa (hash: U//dwICV6ljEsBioxVlDi+LuHGPP1lPYVY8ZQAvZ64M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:dd:a6:29:34:3a:d7:87:2b:76:a8:5f:34:65:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Validity
Not Before: Apr 19 17:00:47 2025 GMT
Not After : Apr 20 17:00:47 2025 GMT
Subject: CN=f4f8806d30f15c911c21307be46b9c843c302b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:a2:c6:21:84:1e:73:5f:47:7f:7a:c3:21:
eb:fc:d7:66:32:da:42:f2:72:ab:69:90:80:11:14:
dd:49:33:0a:60:9d:4b:75:22:5b:cd:60:74:be:d5:
ea:36:56:7c:4b:4d:bb:10:00:d9:2e:15:ab:72:70:
b9:dd:b1:4c:ed:f4:14:c6:74:db:f9:eb:72:f7:c3:
90:be:94:98:a3:a4:d7:22:89:bb:b7:12:a8:bb:93:
cb:18:61:70:63:c9:d0:72:2e:82:ad:a5:92:f6:82:
37:45:1a:e0:4d:e3:30:5a:ee:83:c6:a3:94:63:2f:
d8:0a:61:b6:b9:4f:2f:03:e1:09:5a:be:ec:20:33:
ae:0d:62:6b:0d:0f:61:4b:61:3c:0a:1a:bf:9a:9a:
40:f0:a6:20:7a:f8:fa:5e:b8:19:cd:24:d4:83:19:
13:60:77:37:be:86:f3:7e:08:32:5d:c9:fd:40:cf:
b9:f4:0c:0e:8e:f5:8b:b0:aa:81:29:3c:22:08:51:
d3:0c:9b:b6:26:48:e7:a6:4f:58:b3:a9:6a:a6:ef:
81:cb:76:37:a5:4a:7c:85:e5:c9:bc:fe:8c:bc:c9:
c8:18:b7:20:53:bc:17:2c:a5:cb:79:d4:09:d1:ba:
a7:f2:47:00:45:d8:18:3d:73:12:fe:f1:75:1f:e9:
b9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F8:80:6D:30:F1:5C:91:1C:21:30:7B:E4:6B:9C:84:3C:30:2B:45
X509v3 Authority Key Identifier:
keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:92:ea:3f:d7:8c:67:d0:9e:13:ee:ef:10:32:7d:28:f5:14:
b4:1f:0a:65:bb:16:7c:da:c5:52:e3:2b:f5:4a:80:6f:a5:50:
c4:1b:33:67:f6:93:e0:40:06:60:4d:93:16:01:78:dc:05:38:
31:bd:81:57:21:7d:58:64:dc:75:8e:1b:64:ec:c4:c6:0e:ef:
9d:90:00:76:1f:bb:ee:d7:35:d7:a3:14:97:70:06:5b:e8:84:
13:31:d2:a8:d6:84:d1:9e:a0:14:f8:ed:2b:11:02:78:a8:43:
fd:c1:2b:ba:43:a2:d4:4e:0c:c3:0a:21:93:27:a2:55:a5:51:
d5:0d:86:7b:16:f2:4b:65:46:4d:eb:b7:f0:bf:04:67:50:81:
38:b7:6e:f5:9d:5a:81:93:4e:1f:96:99:49:08:1f:eb:d4:51:
7e:ea:ab:b3:89:de:8d:be:11:63:cf:d3:ba:50:f5:dc:9c:a3:
4f:d2:4f:8a:a4:2d:01:aa:57:03:1e:52:ec:74:26:c5:e6:16:
ec:03:a5:18:2d:13:ae:de:eb:16:42:31:32:5f:32:12:8a:f5:
33:e8:c4:7f:48:0d:81:f6:a7:9b:d1:2c:2c:f4:2d:b4:1a:7a:
05:bf:c2:7a:b0:78:a3:17:f3:29:7d:bc:72:e4:c1:28:be:77:
60:cb:2a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:35:45 2025 by rpki-client