Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
File: DLvQEU2XGWdQ1IxeElbtBVpeniw.mft (raw, json)
Hash identifier: c4DzlyXab7dJzKzzO+FzSf96Ua0b9ejPvUVxpBfhElg=
Subject key identifier: 17:FE:BD:FB:A5:B3:5A:45:4E:0D:EA:11:6D:0C:D7:D4:3B:09:EA:60
Authority key identifier: 0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
Certificate issuer: /CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
Certificate serial: 0196538008149ECDE46C5F7A298702C874B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
Manifest number: 0955
Signing time: Sun 20 Apr 2025 14:00:21 +0000
Manifest this update: Sun 20 Apr 2025 14:00:21 +0000
Manifest next update: Mon 21 Apr 2025 14:00:21 +0000
Files and hashes: 1: C1pdtFvgr0xoHUm63plkKuj-C_Y.roa (hash: b/y/wC9aBMLG4uCve6DdHlmgdXRsPrspZQT4HGYlIp0=)
2: DLvQEU2XGWdQ1IxeElbtBVpeniw.crl (hash: eIMYcAFQFcoxrQ9TbSzVXMFb9u+vgoneiTymLlOtpk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:08:14:9e:cd:e4:6c:5f:7a:29:87:02:c8:74:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
Validity
Not Before: Apr 20 14:00:21 2025 GMT
Not After : Apr 21 14:00:21 2025 GMT
Subject: CN=17febdfba5b35a454e0dea116d0cd7d43b09ea60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:1c:ba:1b:8e:8c:5b:b5:4c:f1:ea:25:27:
32:df:3a:ec:aa:b3:f9:2f:7b:f1:a2:3a:02:2a:fc:
e6:08:ea:bf:51:25:4d:9f:9c:54:8b:10:1e:94:72:
2f:3c:7a:20:b1:60:13:a6:b8:d1:8c:7c:17:92:dd:
a3:27:df:b0:d4:b0:6a:82:8b:71:97:d3:b8:22:f8:
a4:d3:28:1c:1f:53:b3:ec:a2:6b:36:cb:ca:ee:42:
c8:d9:d9:c6:9c:15:fd:ec:2f:3a:a6:5f:c2:ab:18:
b0:82:7e:f6:0a:11:c2:58:35:e3:e1:6b:ac:86:b9:
dd:7f:f1:e4:47:a8:78:cc:a0:1a:46:6a:79:d0:11:
94:34:b9:4b:dd:8e:29:45:10:9e:7c:4b:18:8c:f7:
dc:31:03:8e:eb:54:48:93:db:f6:bb:3c:cb:be:69:
c8:3d:2d:c3:f9:6a:46:3a:ca:96:1b:72:5b:ba:13:
62:cc:f0:b3:7f:8d:6c:48:81:9a:23:d6:aa:42:80:
d8:f2:7c:d4:92:76:da:b3:f8:d3:80:9d:7b:20:47:
b5:c2:3b:8a:ab:75:cf:ff:b7:d4:a8:b1:72:05:a0:
ee:d3:55:fa:bd:e9:3f:d4:37:12:30:bf:8d:0b:56:
76:4c:dd:99:48:ee:a1:c8:8a:71:eb:7e:d3:8d:17:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FE:BD:FB:A5:B3:5A:45:4E:0D:EA:11:6D:0C:D7:D4:3B:09:EA:60
X509v3 Authority Key Identifier:
keyid:0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:33:dc:00:16:34:68:dc:08:66:5b:4e:1f:e6:01:0c:1b:61:
9a:6a:a2:04:d7:53:50:64:e0:c4:e4:41:fa:4f:7c:00:74:ae:
f5:f8:44:c9:78:e1:ce:a1:41:3d:3b:4a:48:77:db:ec:d0:23:
b9:09:fb:d3:6c:f7:41:63:67:31:9e:ee:52:38:cb:8a:8b:24:
0a:33:e2:a5:e6:88:f0:74:c9:f8:7c:86:e1:03:68:dd:5b:c3:
bb:e5:bb:81:29:c0:a0:30:e7:57:d7:22:03:86:93:f7:7f:3a:
61:d2:e1:f0:99:30:cf:b1:ff:b9:f9:eb:eb:03:fa:90:1c:b5:
8f:94:8b:ab:6d:ed:3b:77:2b:55:14:e8:65:a6:78:f2:92:0a:
1d:cc:d2:bd:d8:5c:5b:72:bc:10:0d:97:20:69:94:12:9c:ff:
5c:32:76:fe:bf:0f:79:ff:bd:0a:12:32:b9:37:21:83:e6:f3:
89:ab:c3:bf:4f:df:02:0f:3b:d5:6c:12:dd:87:e2:58:df:1b:
42:8a:d9:4e:fa:b9:35:00:ce:13:23:35:b3:06:99:c0:83:d0:
dc:aa:55:13:5c:d9:e1:ce:47:ad:70:f6:e7:2e:c1:7b:1e:51:
43:e6:4a:5b:c5:ec:86:f5:31:b4:0e:8b:ab:d4:a6:d9:e8:8b:
ef:40:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:05 2025 by rpki-client