Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier: j52vJtRYq1yXXgp/soqXAANRx4GANE6y9E54LzS+jwk=
Subject key identifier: 96:BD:CE:CE:57:34:AB:6E:9F:F1:01:5F:67:3F:CA:6D:8C:70:36:8A
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial: 019512472BC9A8749A5CEE7A736FA557F8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 05:00:08 +0000
Manifest this update: Mon 17 Feb 2025 05:00:08 +0000
Manifest next update: Tue 18 Feb 2025 05:00:08 +0000
Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: oQa2FYcVmXE0cx7zSZxJMHcblam/ID5VOZOwlOE6p8o=)
2: TjtgoaArWXIQWELqrqb3xw0fhW8.roa (hash: U//dwICV6ljEsBioxVlDi+LuHGPP1lPYVY8ZQAvZ64M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:2b:c9:a8:74:9a:5c:ee:7a:73:6f:a5:57:f8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Validity
Not Before: Feb 17 05:00:08 2025 GMT
Not After : Feb 18 05:00:08 2025 GMT
Subject: CN=96bdcece5734ab6e9ff1015f673fca6d8c70368a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:4b:9e:69:d5:ed:d6:6e:d3:47:7a:0c:84:
08:4a:a5:13:4d:b2:d7:6e:cc:e7:19:fd:54:49:80:
29:99:ab:d4:47:8e:21:71:8a:05:02:d2:9f:07:6c:
67:1a:e5:e8:a8:c6:71:e7:5a:00:f1:91:d4:10:b7:
18:eb:f4:81:69:7f:60:ad:00:5c:83:ca:8a:b4:a0:
7a:bf:60:d1:4d:93:82:3e:34:09:f1:21:80:52:f8:
59:7f:1f:c1:54:e5:a3:dd:6e:74:c7:64:e6:a0:0b:
5b:ed:98:8f:6d:b1:ce:6f:e3:56:a8:9f:e5:03:b9:
c5:be:f1:64:5b:57:d3:b9:87:c2:93:a7:cd:9b:9b:
a0:23:bc:fe:54:28:ab:c1:3d:e8:b6:f8:94:79:ab:
38:8c:79:85:5a:6c:a9:f3:d0:d0:2b:66:bb:7d:4c:
4e:02:44:15:16:c8:8c:b3:06:13:95:99:78:00:cc:
6d:b5:cb:ae:d3:cb:ce:48:a8:4a:d6:40:07:1f:92:
c7:ff:94:d7:7c:0a:ed:0c:b5:b5:55:2b:aa:bc:5f:
a1:dd:31:56:54:17:fd:39:88:42:1d:de:fd:79:6b:
9c:55:2c:17:5e:c0:e2:d9:12:fc:d8:c8:f3:84:5f:
91:0d:1c:91:04:76:be:5d:69:5f:9b:55:d7:41:dd:
37:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BD:CE:CE:57:34:AB:6E:9F:F1:01:5F:67:3F:CA:6D:8C:70:36:8A
X509v3 Authority Key Identifier:
keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8d:c0:58:77:ac:f3:b2:e0:2f:b4:4d:56:83:26:8c:17:a8:
56:65:10:bd:33:c3:9f:bb:53:d0:b7:5f:f0:1b:7a:6b:90:9c:
15:62:f2:b8:4b:3b:fd:c7:0f:bb:fb:79:52:d3:ee:4f:dc:a7:
ba:f7:12:92:c5:f7:5e:43:55:f7:e0:76:05:9f:7d:65:1e:65:
15:3d:26:e7:1b:4a:57:64:d1:69:a2:77:76:e8:8e:9d:ba:64:
b4:18:8f:85:51:cc:10:7c:7a:14:5a:a6:4c:1a:e4:b5:b9:39:
f9:82:96:80:79:2f:e8:a7:56:f0:66:b3:b4:d7:05:5e:a9:f3:
3c:8d:e0:0a:60:20:68:f5:06:a8:a7:32:c5:1b:c9:57:1b:70:
a6:ca:f5:29:1f:3a:a5:6a:c8:6c:b0:4b:f5:7a:63:93:e8:bf:
95:c1:94:df:31:9d:6c:5d:93:5b:5e:a5:a7:8d:04:ee:1b:5d:
f1:62:01:7b:dc:31:99:c3:d4:6c:81:10:47:3d:06:ad:3d:38:
07:ae:a5:a2:47:ec:7b:e5:66:dc:82:1d:21:8d:5f:8e:f2:a4:
be:34:51:2d:1f:c3:8e:b8:67:9b:3f:c7:f8:c0:6b:a1:c1:ce:
85:75:98:22:9b:93:34:6c:2c:e0:07:4d:1b:0e:e0:d0:02:79:
57:b5:1b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:09 2025 by rpki-client