
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier: PLXd8ScfRG5/G66+Y/LUrsl7cqHFbpOJIi8RMDdjISY=
Subject key identifier: 04:84:6B:BB:65:92:22:A5:F8:D2:F2:A9:4F:2C:10:28:DC:78:64:81
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 019678318B0A828119951ACA72244E00309F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number: 08CF
Signing time: Sun 27 Apr 2025 17:00:34 +0000
Manifest this update: Sun 27 Apr 2025 17:00:34 +0000
Manifest next update: Mon 28 Apr 2025 17:00:34 +0000
Files and hashes: 1: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: OUvKrMbEpBcQdXGW3huLvOwx9Xocj9oqABkIpc7awwM=)
2: O7YDGlReH1x3D0s7Ygr1Vy16MbI.roa (hash: WAs5UezYMvac542kW/ZhIkgbBXd8gscxgdqz/AR6xPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:8b:0a:82:81:19:95:1a:ca:72:24:4e:00:30:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: Apr 27 17:00:34 2025 GMT
Not After : Apr 28 17:00:34 2025 GMT
Subject: CN=04846bbb659222a5f8d2f2a94f2c1028dc786481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:bc:0d:ed:77:bd:24:54:66:3d:3f:8c:86:
01:16:81:5e:0a:c5:70:86:4e:13:23:c7:89:69:1e:
76:f8:fc:d3:20:c7:c1:25:02:c4:6f:60:02:03:44:
bb:3e:53:d9:41:64:1d:6f:e1:0c:05:af:a1:a4:14:
37:1d:75:4c:9d:c7:e0:ce:04:a0:22:9b:da:d7:b1:
8e:cc:df:38:b5:c0:d5:98:13:e4:6f:08:df:70:1d:
b5:9d:e8:59:62:48:15:4a:ed:92:b6:e2:0e:e3:65:
25:a1:51:5d:28:3a:91:fc:b7:c9:56:e3:77:17:31:
35:6c:a6:82:48:97:18:0d:0f:a8:c8:92:10:34:5f:
e5:c2:29:c9:a0:1a:9b:a2:3f:42:ae:2c:32:c6:1b:
68:b9:3f:ad:81:a1:07:44:e0:49:75:a0:5c:11:d5:
7c:86:e8:c5:91:d5:fd:18:66:2d:a3:4e:d6:28:51:
3f:d9:a2:e7:a4:8d:89:7d:0e:3d:f9:3f:0c:e2:f5:
e8:19:69:86:0c:e6:13:c6:87:f0:b9:4e:c2:b3:fb:
80:95:83:af:4e:68:03:c0:ba:ec:5d:25:9c:fc:8c:
b7:9e:6d:29:a0:b5:49:75:31:90:5b:39:fa:72:28:
1e:98:aa:04:59:64:fa:00:ef:83:39:9e:5b:ee:c8:
9c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:84:6B:BB:65:92:22:A5:F8:D2:F2:A9:4F:2C:10:28:DC:78:64:81
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0c:58:a8:87:a5:29:61:98:75:df:d9:f0:e4:b5:7c:ff:12:
7b:79:ee:5d:1c:93:a2:d1:28:76:39:13:f3:6f:5b:6b:67:0e:
68:bb:de:ea:f6:8f:08:cf:9c:77:3f:af:fe:14:87:b1:15:99:
4a:c7:ee:dd:4f:5d:36:7a:4f:8f:79:40:c8:50:01:bf:3f:15:
a9:4f:2e:c4:77:10:0c:29:ad:d6:25:f8:94:30:57:de:b6:d7:
8f:a2:25:f5:99:2f:11:bf:04:f7:17:8b:a4:c1:bb:8c:87:41:
95:72:ca:41:32:7f:e9:c9:a4:8f:ed:ed:b6:7a:00:fa:7b:d2:
9c:e9:2c:d0:be:b0:29:df:88:a4:b1:0e:84:9a:ba:bb:a0:d7:
64:53:2c:68:f2:26:f1:e4:d8:f7:44:2d:2b:41:0f:ff:59:37:
eb:ff:bf:7e:25:90:5d:2e:74:4f:5e:f6:06:1d:36:7b:5e:ce:
77:6c:5b:a4:c5:78:1f:c0:5a:cd:ad:19:ca:61:df:95:ca:b4:
88:26:66:fa:0e:bf:c3:bc:89:32:99:9b:aa:cb:d4:1e:c8:a2:
34:f2:00:f4:0e:12:b7:1f:bc:7f:4b:5a:7a:0a:e0:e3:6a:7d:
29:5c:27:61:70:5c:a9:68:82:67:85:da:ef:df:38:53:ff:25:
7d:cb:42:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:46 2025 by rpki-client