Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier: k7JQUkZpQfv5EZsi8Co9hOQS6QXBY6suPP5fCHi+j80=
Subject key identifier: BC:3B:92:75:B3:7B:32:FC:12:CD:96:CF:AE:FB:C7:B5:D4:FE:A9:00
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 019652368C95A524EDB0201557EA64952EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number: 1504
Signing time: Sun 20 Apr 2025 08:00:28 +0000
Manifest this update: Sun 20 Apr 2025 08:00:28 +0000
Manifest next update: Mon 21 Apr 2025 08:00:28 +0000
Files and hashes: 1: CboN5GI28SiyUWI4MOyyBBarnSE.roa (hash: IuQeN17ie/CZAm40U/UBsK+jP36giHzi+QWUvQDTrTI=)
2: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: tdSVObxhddmZMj4v+Zs0rD559VwNz6iXEQAIG3h5Va4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:8c:95:a5:24:ed:b0:20:15:57:ea:64:95:2e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Apr 20 08:00:28 2025 GMT
Not After : Apr 21 08:00:28 2025 GMT
Subject: CN=bc3b9275b37b32fc12cd96cfaefbc7b5d4fea900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ed:02:f3:3a:5f:5a:ff:0d:4d:81:60:e5:85:
dd:02:bb:97:dc:9e:70:53:28:81:cc:d0:86:cd:d4:
4a:8c:b4:c1:c5:2b:31:bd:0d:91:89:28:67:ae:e7:
9e:56:85:94:5e:02:c9:d9:37:46:0d:2b:ec:7d:6f:
5f:1d:99:03:b4:44:8a:5d:d2:f5:10:11:f9:9d:12:
70:fc:aa:31:da:63:81:ee:4f:91:92:32:e6:74:39:
c2:af:88:1e:19:91:31:d6:81:53:82:2e:b1:bf:08:
df:a1:71:53:c6:d2:24:3d:bf:9f:26:d2:71:1a:7e:
51:c9:61:df:a7:43:ef:11:f1:cf:bf:8f:e6:c3:7c:
10:a2:03:37:8c:5d:54:56:8c:76:72:28:cd:22:b4:
47:3f:46:49:45:b0:15:89:45:27:8c:ab:c0:00:d1:
0e:08:9c:60:4b:50:1b:d2:26:17:34:ab:64:36:0a:
1e:7f:8a:a3:13:44:20:40:27:7c:d5:e5:c3:57:39:
bc:ca:7f:b6:b2:a0:b0:cc:de:5c:2d:5c:c4:51:7e:
9a:60:d5:64:4d:71:06:8f:d1:7b:5b:8e:30:8c:4e:
7a:92:67:eb:91:7c:31:77:e7:f9:40:4a:5c:75:1a:
53:0f:e6:56:a5:82:2e:68:42:c8:fe:5a:ad:ff:7b:
86:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3B:92:75:B3:7B:32:FC:12:CD:96:CF:AE:FB:C7:B5:D4:FE:A9:00
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cb:f2:43:bd:07:ea:96:00:44:8f:e0:76:d9:1a:8a:a1:e0:
d6:28:a3:61:c1:69:8d:b1:55:48:3b:98:d1:47:2b:8b:51:8e:
6c:3a:ca:99:c4:50:62:4a:62:2d:34:67:e7:f9:a4:1e:28:fa:
38:40:11:6f:28:46:61:23:ba:ce:0c:1a:41:34:9d:55:5e:81:
96:1d:81:a3:91:4d:af:f3:c1:8b:a3:3c:80:3e:ea:d1:d2:56:
67:15:ce:11:17:a6:ac:81:2c:25:09:8a:3c:6b:71:68:7c:3d:
b5:74:2c:cc:c1:e6:0c:3e:d1:1d:79:02:e3:b5:0b:be:14:af:
5a:75:ef:36:0b:cb:fc:31:15:1d:b4:80:87:b1:87:db:ab:fd:
62:d3:c2:aa:8f:e7:d7:9d:9e:a3:37:c8:6d:be:b8:eb:8f:29:
00:2b:fd:48:e0:b7:38:1a:ce:bf:f4:53:f4:65:f4:1d:8a:c9:
40:fe:06:d7:03:cc:18:46:13:41:0d:c0:ee:66:00:26:04:06:
48:7a:ef:e1:60:f0:3f:0f:5b:ab:d8:6d:1f:6b:d1:9f:c0:90:
38:ba:34:9b:69:f1:f9:31:97:aa:d2:f7:16:f3:f0:c2:fd:1c:
7b:33:b8:3f:57:3c:80:3b:b8:65:a3:92:de:64:fb:e7:f3:d2:
65:b9:52:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:32:09 2025 by rpki-client