Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: Z3ZaZSCu5K04SD8mUXHWyuPEC+PJAF2rXorOM12tqZ0=
Subject key identifier: 71:DF:65:54:C8:8C:0C:3B:05:B3:09:DE:97:5C:E8:99:70:C0:66:00
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 01964632B73ACA61C18CA59E36D28510282F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 00:00:50 +0000
Manifest this update: Fri 18 Apr 2025 00:00:50 +0000
Manifest next update: Sat 19 Apr 2025 00:00:50 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: Zq6WMdEfyftzDPf8E/p3cFYBihAjJrKScX308gbNesA=)
2: buG6SoB8WcvMJVkAM0M1bD-X7DY.roa (hash: 4+Zsq3JV6DU94isVPAz6RpxYAcC5faMNhVluTUisCrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:b7:3a:ca:61:c1:8c:a5:9e:36:d2:85:10:28:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Apr 18 00:00:50 2025 GMT
Not After : Apr 19 00:00:50 2025 GMT
Subject: CN=71df6554c88c0c3b05b309de975ce89970c06600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bc:41:ee:0d:73:64:09:ca:28:b5:0f:57:ca:
0c:0a:9a:85:2c:8d:bc:2f:0e:80:93:f6:0e:1b:dd:
be:72:f2:d0:57:7a:54:de:fc:0e:d6:95:6b:48:24:
78:49:e5:4e:ec:fb:71:1e:5f:60:49:0c:a1:3b:e7:
1f:a9:be:2c:2a:21:cb:02:b5:9b:5b:23:0e:20:84:
1c:60:fb:7e:a8:6a:87:e7:b4:67:ca:b6:7e:3e:e3:
fb:be:7c:f3:cb:54:09:c8:19:b1:27:67:6c:78:5c:
c9:08:2b:0f:44:91:7d:bf:c6:57:55:b8:20:80:34:
c2:73:4d:af:f5:10:38:8f:0f:58:21:f6:ff:e8:2b:
ef:e6:7b:c0:ad:7f:d9:ab:0c:8d:59:99:00:11:e5:
6b:2f:0a:19:fb:33:80:e7:9c:1b:58:26:92:ae:10:
a3:79:40:6f:a2:6c:e3:15:e5:70:f2:c3:0d:31:7b:
84:b5:8c:84:e9:d4:a8:b2:7c:7d:7f:0e:ff:69:68:
d1:6f:30:1e:01:aa:3f:de:06:72:76:a3:33:cd:9e:
38:e2:2d:88:48:25:1b:24:3f:62:8b:bd:ad:71:20:
6c:0c:92:a1:1e:b0:9a:60:c2:68:27:0c:7e:a5:95:
75:e3:d4:48:b8:79:6d:d8:93:38:b4:8c:01:96:67:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DF:65:54:C8:8C:0C:3B:05:B3:09:DE:97:5C:E8:99:70:C0:66:00
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:08:eb:5a:cc:52:c5:c8:ac:6d:e0:40:9e:26:f1:8d:3d:7c:
20:6b:60:22:38:ce:fc:4d:6c:d7:34:08:8f:86:38:d7:d0:81:
5e:93:5b:2b:25:9a:43:9e:c2:c7:10:1b:02:f6:5e:7d:6d:c4:
57:67:b5:4e:8c:01:5b:e6:d6:8a:81:2b:c0:1e:1e:f4:09:87:
f9:05:49:f9:32:c9:8c:52:89:65:c4:3e:51:ee:0b:a4:18:e0:
bc:e2:bb:2d:17:5a:a2:2d:0a:e6:80:65:da:53:6f:e7:eb:b9:
de:18:46:b3:21:a5:24:b0:8f:d6:6d:17:e6:2b:4c:37:e7:65:
a4:34:40:d2:81:9c:68:b5:55:2e:9b:40:cb:c9:0e:8d:62:cc:
b0:b1:ab:d5:4e:09:b7:4c:d0:2b:a8:a3:93:33:a7:65:59:d2:
ca:9b:af:01:73:ce:9c:92:f2:66:72:f8:76:37:27:7a:4d:da:
55:ec:78:0d:69:98:bb:9f:d6:e2:12:20:59:dc:78:be:d4:96:
c2:31:08:67:b5:44:47:54:b3:12:18:c0:4b:19:f9:15:14:a0:
ff:bc:80:d4:a1:91:c4:b9:06:ee:7d:f2:da:a5:f5:27:9a:b9:
46:2e:b2:c7:66:d3:13:d6:28:0d:c2:5a:e3:00:bd:5f:c5:68:
71:ad:88:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:30:36 2025 by rpki-client