Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
File: _dcAK_Oi6s_IgdXhoCEQmMZplWw.mft (raw, json)
Hash identifier: l2v65DhthPF3/UbSKl2JeerO1fpuDgQ3ubla7w2mcec=
Subject key identifier: 83:F1:C8:62:60:7C:17:4E:2E:4A:40:60:F3:92:5F:0D:AA:5E:C5:17
Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
Certificate issuer: /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Certificate serial: 01963275D9A3A002CB19CF5F0CBCCC0BE313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
Manifest number: 0EE7
Signing time: Mon 14 Apr 2025 04:01:46 +0000
Manifest this update: Mon 14 Apr 2025 04:01:46 +0000
Manifest next update: Tue 15 Apr 2025 04:01:46 +0000
Files and hashes: 1: _dcAK_Oi6s_IgdXhoCEQmMZplWw.crl (hash: r1o9r4lKX9JG3YpbKUVTuUeBli9AHWBFfU4HihCqnj8=)
2: uzHsVm3pK-eWySg6DxW1LNadfN4.roa (hash: f7Ekdfxt1w1Ik7dpXGT0WWQ4k0292INTL/KsMP+l94c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:75:d9:a3:a0:02:cb:19:cf:5f:0c:bc:cc:0b:e3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Validity
Not Before: Apr 14 04:01:46 2025 GMT
Not After : Apr 15 04:01:46 2025 GMT
Subject: CN=83f1c862607c174e2e4a4060f3925f0daa5ec517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:39:e0:15:88:20:e8:6e:46:5d:5c:62:31:
51:ca:1e:2a:bd:6d:ce:95:fe:76:77:aa:a9:f7:c4:
6b:ee:14:ca:6d:71:37:8d:38:30:0f:58:c2:90:a7:
74:56:1f:3a:0d:27:42:8b:8d:5d:d5:26:7b:b7:8e:
15:13:ea:02:4b:53:24:b0:15:f0:2d:70:24:c6:78:
f4:3e:e2:42:8a:71:a6:0d:44:b0:c7:9e:c0:56:59:
ca:0e:bb:a4:24:2c:93:23:12:9d:c9:e1:08:34:6b:
17:71:cd:6a:27:d1:0c:aa:b7:04:3e:50:2a:1d:d8:
82:62:f6:dc:c9:0f:d1:ff:65:c7:ee:cd:db:fa:b2:
0c:25:0f:19:d6:0e:c4:ba:a7:77:98:78:39:10:b1:
b3:a2:5c:e1:9e:ae:96:86:be:63:8f:ce:b6:13:5b:
3c:8b:3c:07:51:e7:58:65:e9:63:4d:40:6b:fc:7d:
d3:d4:63:1d:15:9f:87:1b:db:1c:7d:7d:96:ae:d1:
e0:52:43:75:cb:3e:50:6e:3b:f5:ca:29:92:1e:72:
3f:17:7c:23:7b:3b:65:36:be:0a:49:dd:0a:7d:ba:
42:1e:35:a9:99:2c:16:61:ed:8f:6d:a6:91:4f:0a:
84:c8:77:50:1d:31:e7:47:55:26:1e:9d:1f:ce:e1:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F1:C8:62:60:7C:17:4E:2E:4A:40:60:F3:92:5F:0D:AA:5E:C5:17
X509v3 Authority Key Identifier:
keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d8:80:28:49:37:20:9c:e2:d5:79:71:92:67:4b:ef:fe:b4:
aa:23:20:4e:47:47:c2:87:78:16:cb:81:a7:e1:fc:2b:9e:20:
4f:17:be:8b:89:20:f2:78:8e:67:66:5a:ef:66:98:75:5c:31:
22:78:6a:e0:8c:76:44:e1:e5:13:90:20:ce:ab:9c:43:f7:9b:
c4:5b:e6:50:5b:d8:b7:3c:e5:c5:c7:c3:22:22:a2:93:2b:c6:
4e:c7:de:2a:9a:ae:91:f3:87:a7:81:dc:7b:85:b0:59:83:41:
8f:eb:ce:6f:4f:93:ff:1e:a7:c2:a9:7c:b7:e8:12:71:75:25:
0a:62:45:59:e3:f4:a3:ce:cd:b8:8b:86:64:12:48:3e:ba:08:
ec:a9:8d:c0:ee:7e:6d:ae:5c:08:9b:d2:55:af:94:1b:8f:11:
bf:f3:10:9e:48:a2:22:39:46:23:5d:d3:93:d0:f6:af:2d:30:
30:9b:f6:f2:60:a3:f5:74:fd:0e:95:59:28:f9:2f:22:3f:e3:
70:c0:b7:2b:17:13:15:39:cd:1a:40:99:56:61:91:1f:0b:83:
5d:94:04:ad:65:43:96:ae:cd:aa:a5:2b:67:77:6b:7f:22:e6:
56:d7:ca:5d:5a:dc:1d:26:fe:56:4c:ad:45:51:07:e9:59:6e:
56:27:a4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 08:42:49 2025 by rpki-client