Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
File: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft (raw, json)
Hash identifier: 7+HqrafKDmtxKiG58XsCIKfYjTRYH7WwJM6OxpvBHJ8=
Subject key identifier: B8:EA:82:DB:8B:B4:A4:F5:8A:64:DE:A5:73:E8:4A:80:3C:9D:AF:BF
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 0196786889F9189527AF31C18A7534070623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
Manifest number: 151A
Signing time: Sun 27 Apr 2025 18:00:39 +0000
Manifest this update: Sun 27 Apr 2025 18:00:39 +0000
Manifest next update: Mon 28 Apr 2025 18:00:39 +0000
Files and hashes: 1: 28r3lezFt1DhHYHa7zUp6dp6gek.roa (hash: UnpOGH6h0Mhuee/PLRufj5c9ShCIaJkFN7bgA7Z1mp8=)
2: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl (hash: KSvk+2ziI+4PY4/c2BHlN9oY9b877k7E3Q3pTb2OAHo=)
3: S3gytHIiWuDnii46Cee6MjqDODU.roa (hash: WjQ4G+4EZrW+UzIf8d/g5pUPAeGGv9rfo0G8Gxn9x1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:89:f9:18:95:27:af:31:c1:8a:75:34:07:06:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: Apr 27 18:00:39 2025 GMT
Not After : Apr 28 18:00:39 2025 GMT
Subject: CN=b8ea82db8bb4a4f58a64dea573e84a803c9dafbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:08:3b:bc:62:20:a5:8d:ec:2e:ff:17:69:
f3:d0:da:3d:ff:4c:34:2f:87:76:a4:b4:9a:17:d6:
3b:b2:b5:a1:6b:9c:93:ff:46:bb:a9:8c:c8:16:a3:
36:7e:47:69:c1:78:b7:42:3e:37:f4:c2:c3:1b:b4:
58:ca:10:b1:3d:8f:48:11:95:d6:29:27:c1:86:02:
68:c1:d2:fe:2a:86:7f:ff:9c:8f:25:77:9e:7a:db:
24:0d:1d:58:d5:10:14:f9:df:38:93:12:b9:75:61:
4d:34:bb:d8:f6:0d:f7:2b:3d:90:da:34:05:56:10:
b3:4c:d3:25:64:69:22:10:ad:80:58:c6:47:48:2c:
45:60:4a:c0:3a:02:36:7b:70:18:aa:4c:06:21:eb:
89:76:49:9f:2a:df:0a:fb:38:c0:48:98:fc:20:89:
c7:5c:61:9a:c5:0e:fc:7a:a5:0e:16:cf:4a:37:78:
4e:76:ef:61:7a:c2:f6:b9:4a:1c:6d:8c:9f:bd:b9:
76:6e:b9:21:90:51:6c:af:ac:a9:a4:49:c3:63:31:
f8:68:14:25:08:8c:c3:ec:26:96:c8:99:22:b7:08:
65:80:0d:e4:80:51:e0:69:67:b6:b8:69:2b:09:63:
05:14:d2:fc:4b:58:bb:1a:dd:0a:21:df:2a:92:dc:
cc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EA:82:DB:8B:B4:A4:F5:8A:64:DE:A5:73:E8:4A:80:3C:9D:AF:BF
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:75:c9:79:aa:97:c8:70:06:0a:3e:11:dc:88:7c:f0:7a:40:
76:e1:e7:e8:78:70:a1:9b:bc:1e:8b:1b:d0:be:8a:7a:90:e8:
1f:07:a2:64:4b:4f:35:9e:b5:b0:35:ee:4d:91:4a:91:b3:1a:
7f:ed:e5:dd:51:37:cc:33:dd:e4:ce:91:f5:0c:fa:7e:6a:05:
6c:87:31:c0:cf:ef:bb:c9:55:b4:8c:d5:b9:e9:3f:7b:b1:c4:
65:c8:4b:00:bc:bc:39:69:bd:f0:24:25:8b:de:f8:6c:54:71:
9d:0c:39:b8:a8:5a:44:a5:3f:41:2d:9e:0a:7f:bb:b9:36:eb:
23:e8:24:36:96:60:19:55:18:69:c5:9d:f2:f5:d0:7f:19:67:
36:c6:6f:0e:d4:ac:7d:ac:f2:e0:2b:6f:14:56:9b:46:dd:14:
d1:54:ac:79:4f:19:79:e4:05:af:59:c5:06:ce:7b:95:81:32:
1a:ee:53:61:62:52:33:2e:50:3e:b0:01:2f:3a:d9:14:79:ea:
d5:da:61:75:44:e5:26:d1:31:aa:ec:4e:67:83:64:11:81:20:
50:8b:48:3b:83:c7:4b:0e:34:97:24:25:ed:ae:d0:a7:39:f7:
bd:02:3e:c5:a0:2a:ee:30:03:86:71:56:2f:8f:b3:ab:c1:14:
23:1c:f0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:59:00 2025 by rpki-client