Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
File: DLeircbcrxd7k6M2y47OzFrzAlg.mft (raw, json)
Hash identifier: 7A9VIXmtRXYKTl+jYT8S29pLKHDHYVsPGaEkmYNJkY0=
Subject key identifier: B9:AE:16:89:C2:7F:2B:89:08:1C:97:B4:3A:AC:43:A2:50:C0:1D:89
Authority key identifier: 0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
Certificate issuer: /CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Certificate serial: 01964C6B4ED3283175D39B685E734688E2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
Manifest number: 07A0
Signing time: Sat 19 Apr 2025 05:00:22 +0000
Manifest this update: Sat 19 Apr 2025 05:00:22 +0000
Manifest next update: Sun 20 Apr 2025 05:00:22 +0000
Files and hashes: 1: DLeircbcrxd7k6M2y47OzFrzAlg.crl (hash: kLQYO43Hp1xuMayqwx8DjxDsNlWIqbMX6chNngacKhw=)
2: DXgX_cMOKWmvyb5MDCu-yzGISYQ.roa (hash: fFfPzCo7zqTjJgcKhX4SxPHlq4HGUqWFQ0c7O8IZwwY=)
3: OVOzZ2g8zifvqCY8wDqOXjL1AOc.roa (hash: ei5vXf6WAl7FEI5d5Hm8KKAZYtO3URaho5E46M2Vof8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:4e:d3:28:31:75:d3:9b:68:5e:73:46:88:e2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Validity
Not Before: Apr 19 05:00:22 2025 GMT
Not After : Apr 20 05:00:22 2025 GMT
Subject: CN=b9ae1689c27f2b89081c97b43aac43a250c01d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:a8:7f:cc:29:89:eb:02:70:9d:07:29:a2:
55:a2:b4:e2:97:d0:aa:14:ee:ef:cb:1a:69:05:e4:
1a:60:04:42:35:08:d0:e4:97:ca:83:87:05:74:78:
e3:c8:42:0f:c2:81:c4:72:98:98:6f:48:ee:6a:55:
63:f2:fe:3c:90:1d:79:f9:6a:16:51:ca:f5:1a:f8:
a7:23:a0:41:9f:9c:08:c3:03:7d:33:39:d2:47:71:
18:e6:3f:77:b2:67:2e:88:63:15:95:78:d6:e9:bf:
8c:54:bd:bb:d0:d2:a4:b0:e0:eb:5c:cd:0c:fd:fa:
bd:b0:b7:58:d0:87:4d:6b:54:cd:f1:fd:bf:6d:4a:
30:4c:ea:00:94:7d:a8:b1:ad:72:34:d5:31:ea:4c:
1c:4a:27:30:fb:2c:91:fc:ad:b6:d6:33:8d:ee:70:
73:44:ca:59:70:ab:47:4a:4a:2d:bb:0e:a8:93:c4:
32:5d:51:08:71:ef:ef:9a:d6:5a:e9:ac:87:8e:5c:
c6:28:01:f4:6b:81:27:bc:16:87:21:21:6d:d1:fd:
be:93:51:5b:87:39:61:56:3d:71:ad:03:a6:bf:df:
ca:ed:65:14:8b:af:ce:6a:41:c0:15:a0:62:89:15:
30:45:f8:ca:56:7b:da:f6:8b:0f:dd:c0:95:95:79:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AE:16:89:C2:7F:2B:89:08:1C:97:B4:3A:AC:43:A2:50:C0:1D:89
X509v3 Authority Key Identifier:
keyid:0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ff:ae:05:cd:a1:94:10:81:69:a1:41:b1:35:5a:b4:42:70:
7c:9b:be:67:b9:0b:6b:3f:e7:5a:51:33:44:35:31:04:92:fb:
53:e6:f1:78:b5:32:5e:a9:09:17:a1:e6:07:48:2f:ef:7c:57:
0f:7e:17:f8:75:a6:5d:51:20:16:4a:b2:4f:8e:2c:64:d4:7a:
ba:db:dc:89:72:b9:d7:73:6e:0d:40:cf:dc:5d:e7:93:51:f4:
c8:a7:5c:22:a3:ea:e2:f7:f4:00:b8:76:e2:51:01:a2:ca:28:
e3:81:04:80:27:5c:20:37:c1:22:2e:65:c7:3d:88:fb:ef:4e:
97:46:d9:40:e2:ed:44:40:7d:52:84:dc:57:2b:53:dc:cd:07:
3e:b9:60:bd:a0:da:35:56:f5:8c:ca:2a:80:5e:c9:40:4e:53:
d1:10:6d:eb:df:14:af:29:50:87:26:50:88:fc:21:32:13:55:
05:eb:15:6b:e8:6f:34:0f:01:aa:55:66:c1:e9:c8:fe:11:2b:
47:39:0b:0f:24:31:9a:d1:c1:71:4b:26:c7:92:e1:e1:56:2b:
05:9b:4d:61:e5:46:f6:f2:4b:80:83:2e:0f:36:cd:16:1f:17:
90:34:ed:b0:08:d9:60:5a:a8:7f:7a:e1:65:21:28:bd:a2:72:
4e:f6:cf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:00:22 2025 by rpki-client