Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
File: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft (raw, json)
Hash identifier: QX/kaps//FynOiix6fHOkqoQTwx+qkY+3ahe2eccfBI=
Subject key identifier: DA:9B:64:18:43:DD:F1:0D:E9:49:E0:B3:8F:6F:9E:B4:24:DB:ED:3C
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 01963E788EF17274646B8EEF3C35DC568814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
Manifest number: 14FC
Signing time: Wed 16 Apr 2025 12:00:10 +0000
Manifest this update: Wed 16 Apr 2025 12:00:10 +0000
Manifest next update: Thu 17 Apr 2025 12:00:10 +0000
Files and hashes: 1: 28r3lezFt1DhHYHa7zUp6dp6gek.roa (hash: UnpOGH6h0Mhuee/PLRufj5c9ShCIaJkFN7bgA7Z1mp8=)
2: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl (hash: Rcm0AFoYJryQg/YYHaJGEbyO+zJUj6TkyCIsgK5MmLU=)
3: S3gytHIiWuDnii46Cee6MjqDODU.roa (hash: WjQ4G+4EZrW+UzIf8d/g5pUPAeGGv9rfo0G8Gxn9x1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:78:8e:f1:72:74:64:6b:8e:ef:3c:35:dc:56:88:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: Apr 16 12:00:10 2025 GMT
Not After : Apr 17 12:00:10 2025 GMT
Subject: CN=da9b641843ddf10de949e0b38f6f9eb424dbed3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:ec:c7:9f:ce:9c:67:bd:55:ab:d6:1e:3f:
93:3c:c1:a3:ac:2b:76:53:54:f5:4d:b4:31:4e:28:
1f:76:d0:9b:b1:0e:23:a3:98:55:7c:37:f4:98:74:
05:a3:73:ff:af:b0:d1:7b:39:86:40:47:3a:7c:e2:
65:3a:28:e3:d1:aa:bf:66:b7:a9:9f:2b:55:1a:10:
37:5f:f9:7f:64:5d:0d:f1:b1:a6:32:73:6e:30:06:
1a:42:c8:03:b0:27:c2:3a:7e:6a:94:b1:79:6d:5e:
87:8f:57:93:5c:67:01:bb:c7:fb:fc:13:1c:59:74:
52:e2:ae:ba:57:01:c2:b9:66:b7:3a:de:5c:fa:98:
6c:df:02:5f:99:05:bd:86:b2:83:73:f2:99:0f:cb:
e7:32:b4:5c:3f:ff:17:f0:ec:fa:6d:7c:f6:cd:36:
fe:43:14:e4:d5:b0:74:62:99:54:55:aa:a2:3d:30:
24:52:a7:da:40:40:05:31:7e:e9:d1:f2:88:3d:50:
03:cb:2b:ec:72:d5:ab:42:0d:9a:75:c0:b5:70:59:
53:18:41:d6:92:02:da:86:3e:e5:27:f0:83:0c:fd:
0a:66:e6:ee:b3:97:2f:c5:5c:16:7a:07:c9:94:fe:
64:09:c3:e8:74:09:0b:a2:47:7e:1e:89:1b:e4:a5:
e3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9B:64:18:43:DD:F1:0D:E9:49:E0:B3:8F:6F:9E:B4:24:DB:ED:3C
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f5:21:42:ad:4e:ec:ad:ac:15:f4:d4:08:34:c1:f3:92:51:
13:4c:ce:41:0c:0a:72:f4:19:bf:6c:cb:c0:aa:a9:b8:66:f9:
77:c9:95:d3:ce:41:91:9a:f0:21:22:a6:1a:84:ae:95:3a:e8:
1d:6c:07:aa:86:07:68:1d:61:88:36:19:0d:ae:2b:9f:4e:81:
c1:e8:b2:96:de:75:64:dc:b0:ff:10:95:7c:f5:77:c0:b7:38:
ec:78:a0:39:06:0a:e8:b2:65:8e:af:63:db:2b:c6:94:23:50:
c9:24:59:45:84:6c:62:9c:e2:f5:0c:d0:7a:04:9b:ec:46:3f:
e1:c3:bf:89:9c:86:45:67:33:c7:14:ea:26:17:2e:6b:8f:ef:
ce:a1:df:be:c3:c5:74:e4:f2:38:d1:83:99:8d:b3:b7:0f:57:
b2:46:2a:bf:3f:3f:ce:97:0b:44:4a:8d:c8:10:30:b4:f2:c5:
36:c4:07:df:a3:a2:f4:bb:8e:e3:6d:57:97:e5:b6:5a:cf:e2:
16:82:9a:e1:19:25:f9:c8:5f:31:69:ab:d1:6d:2c:7f:de:27:
78:49:64:dd:5f:e7:09:5c:56:79:1a:5f:e3:53:ca:ae:18:c3:
98:6d:10:d5:82:4e:f1:f4:06:32:63:71:c5:d0:bc:b0:87:f6:
77:80:59:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:31:20 2025 by rpki-client