Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier: rLhiGyZ6WptUd31W1WVhDhcJMU+WIVh0kwCE+jORgjY=
Subject key identifier: 1A:0F:44:1A:B9:D1:1E:2B:C4:C3:A0:A8:E0:C1:8F:E6:72:7F:76:75
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial: 019688EE56B4AB6F95BE6022AE71A9626378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 23:00:43 +0000
Manifest this update: Wed 30 Apr 2025 23:00:43 +0000
Manifest next update: Thu 01 May 2025 23:00:43 +0000
Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: zU7WZaczKdULtwiKfayz+I9RGwKPXG1AG8o2ReDFP6E=)
2: TjtgoaArWXIQWELqrqb3xw0fhW8.roa (hash: U//dwICV6ljEsBioxVlDi+LuHGPP1lPYVY8ZQAvZ64M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:ee:56:b4:ab:6f:95:be:60:22:ae:71:a9:62:63:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Validity
Not Before: Apr 30 23:00:43 2025 GMT
Not After : May 1 23:00:43 2025 GMT
Subject: CN=1a0f441ab9d11e2bc4c3a0a8e0c18fe6727f7675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a4:99:76:8c:73:2e:92:cf:52:3f:30:f2:77:
c4:bf:f9:01:05:a8:8e:c5:a3:06:99:2f:c4:48:50:
53:54:1f:e8:3f:72:f7:20:35:e3:6c:e5:e1:8b:7d:
4b:42:68:68:b4:dd:73:e6:83:00:bd:25:2e:77:d3:
f5:7b:42:d3:04:33:c9:22:59:f2:53:6c:f6:cb:97:
89:9a:2a:4f:84:b5:7e:43:0f:07:b8:cb:00:80:62:
7c:55:ad:16:99:2b:f3:6f:92:b5:68:23:b4:e3:0f:
39:1a:0a:3b:a8:0f:69:5e:10:44:07:0c:f0:6c:05:
c6:14:0c:40:dc:07:bc:11:7b:c8:be:a4:cf:9d:ae:
3b:49:f8:a7:d8:c6:f8:79:2c:7c:88:6f:7c:08:15:
d3:1e:86:66:bb:e4:00:79:7f:cf:77:19:ff:3e:30:
15:1b:cd:f0:f9:c5:cc:ab:d8:fb:50:6d:43:1b:00:
5d:6a:82:51:5c:d7:99:97:f4:4e:cf:47:fe:88:16:
7a:3f:8f:fd:de:96:cf:b1:bd:11:44:b0:98:61:90:
6b:10:f3:3a:48:5b:b8:b0:e6:70:6d:d8:5b:24:8a:
ae:14:5c:f8:e9:70:83:e7:dd:0f:55:21:26:76:45:
84:f6:94:62:25:57:38:9d:4a:40:d4:9b:35:98:03:
83:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0F:44:1A:B9:D1:1E:2B:C4:C3:A0:A8:E0:C1:8F:E6:72:7F:76:75
X509v3 Authority Key Identifier:
keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:06:39:6e:e4:eb:08:78:7a:d3:f9:bd:d4:5f:e1:57:e7:5b:
cc:e9:97:47:e8:72:ca:9b:8d:29:5f:09:e8:5d:9e:72:53:cb:
3b:d4:2e:0c:c2:18:b2:e0:24:ca:5b:e8:d7:2d:6d:d7:19:53:
2b:b1:2b:44:66:61:0c:27:02:00:d9:0c:8c:71:b7:ef:06:5c:
ad:e7:e6:0b:38:f7:a1:7e:a9:b3:02:13:d9:67:1f:5e:e1:78:
36:8e:54:a0:bb:78:3f:ad:c7:75:f4:12:d0:6c:c8:8b:3d:46:
d9:1b:3a:08:d8:ac:2b:6b:8e:23:ce:8a:3a:d2:78:50:28:77:
d5:53:22:81:dc:45:30:e1:0f:0b:81:a5:64:81:cb:bb:dc:f7:
ff:55:5b:af:d6:48:1a:81:6d:4e:d7:8a:25:83:d9:78:e5:ce:
bb:28:2c:62:dc:73:32:c4:93:a7:89:06:06:d8:5a:07:c2:60:
35:5f:2b:d4:a0:91:9c:3c:71:71:10:59:65:23:e3:b5:99:39:
e3:b3:d0:7d:6d:59:93:12:ef:2c:db:95:7f:53:83:86:5a:0c:
8e:0c:c2:81:79:36:1b:16:f0:9c:c9:cc:24:cc:31:cb:05:64:
20:a6:c6:39:c6:2d:2f:4d:52:71:ba:e0:3e:3f:38:3d:b8:13:
22:58:0d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:55 2025 by rpki-client