Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
File: DNScoZAd8CCTDOlx9lzBgKP8voE.mft (raw, json)
Hash identifier: s8EM/sbeIZ/4EColsyM53gYEgJ0Z49fH46LZJ6CN6UU=
Subject key identifier: 39:22:FB:74:A5:25:BE:C7:E5:4D:1F:EB:8B:D2:7A:D6:46:2F:46:79
Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Certificate serial: 0196753057BBCDE1B71B0AB8EA7B8A639F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 03:00:24 +0000
Manifest this update: Sun 27 Apr 2025 03:00:24 +0000
Manifest next update: Mon 28 Apr 2025 03:00:24 +0000
Files and hashes: 1: DNScoZAd8CCTDOlx9lzBgKP8voE.crl (hash: 2UAtBk3ebAoEUhAWD7yC4WWIGywslHr8+/lsjHo5kus=)
2: IyvCi4bscVz-cDd1e8YDDEn65h8.roa (hash: +ReDdginBUQu4++Dvo5zNIlV1w8CIv08Gg4t44mG608=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:57:bb:cd:e1:b7:1b:0a:b8:ea:7b:8a:63:9f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Validity
Not Before: Apr 27 03:00:24 2025 GMT
Not After : Apr 28 03:00:24 2025 GMT
Subject: CN=3922fb74a525bec7e54d1feb8bd27ad6462f4679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:7a:23:2f:6d:e1:6f:5a:71:3e:95:6f:2a:
0a:c7:a1:49:ad:01:80:b2:09:96:ee:79:cd:69:98:
94:18:ba:19:e1:4b:b4:9b:95:d5:ea:fa:03:61:a3:
19:0c:e7:7a:29:8f:aa:c5:36:5b:06:af:13:32:60:
34:5d:0f:ba:50:61:08:ed:3a:bc:3f:fa:ac:59:8f:
66:57:a2:03:36:c3:7f:b9:4e:71:cc:e5:58:47:07:
2e:24:02:c9:cb:8b:11:78:be:39:fd:11:72:d6:e9:
bf:42:ca:d2:01:a7:33:6a:b6:72:f8:96:68:b9:ec:
2d:73:8a:13:82:d0:58:0b:d4:25:54:5a:06:e2:9d:
a1:3c:57:df:66:20:33:5f:ad:10:88:34:90:6b:ae:
67:35:25:b6:03:70:c8:58:69:73:c6:82:33:45:93:
0d:14:ba:9a:b8:84:10:88:12:8c:46:88:2b:0d:9b:
d3:48:7a:00:fb:b0:a3:21:4e:23:85:49:f0:a3:0c:
26:c0:e4:f8:3b:b9:fa:6c:8d:95:cc:9a:07:fd:11:
06:3e:c2:e3:52:af:3b:ee:36:a5:5d:a8:71:b0:3a:
8a:f3:44:1c:43:ae:95:ce:73:56:58:e8:21:15:ca:
38:71:bb:17:14:a7:7c:57:09:b2:88:dc:8a:73:d0:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:22:FB:74:A5:25:BE:C7:E5:4D:1F:EB:8B:D2:7A:D6:46:2F:46:79
X509v3 Authority Key Identifier:
keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:10:61:db:42:d3:33:ea:f6:fd:41:a9:6e:ce:06:7c:30:b4:
7f:52:f8:99:0a:0f:93:19:3b:55:c0:bd:a1:73:16:40:62:c0:
83:15:11:4a:64:80:6b:c3:c3:e1:03:2f:75:ab:50:7f:c0:7a:
5c:8e:ea:e7:93:4d:2c:7c:08:6b:3b:28:35:34:f9:31:2b:af:
76:70:87:3c:30:00:df:f3:8d:d0:51:05:44:b3:15:25:0f:42:
b0:5a:37:56:62:09:1f:f4:3b:9c:c6:0f:9d:53:ce:42:ea:14:
ba:8b:78:c0:2c:d0:cd:be:02:f5:da:0b:4f:77:6d:d2:ba:46:
df:9c:da:00:df:d7:e1:7f:35:54:d0:c5:26:00:79:fa:15:0c:
ef:34:93:03:c0:53:d1:6a:cd:a0:61:79:03:23:88:76:9b:e8:
11:6d:b1:2e:5d:6a:1f:57:31:db:df:aa:06:3b:3a:75:d3:0e:
57:59:63:1e:5c:4b:4e:b9:41:66:e4:90:6b:03:00:68:49:6b:
09:fa:04:c0:5a:c0:e9:a2:96:de:de:98:be:1c:68:19:b8:b7:
1f:a5:74:f5:b3:7b:e0:e4:9d:c8:d2:6c:86:71:04:a2:b8:72:
b3:e5:8e:42:e7:bd:10:6a:f0:63:00:36:2d:73:ee:6a:df:93:
88:30:38:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:41:51 2025 by rpki-client