Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: jnyRnI78iEoLvl+8N2aq2SwnHCbAhB6RSp0j5t1fsKQ=
Subject key identifier: 0F:10:2E:D5:EB:90:4F:7F:F5:FE:7F:FB:F6:0D:F3:FD:22:97:89:22
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 01969A4F7D7FFA712D327E85B0732A1CD4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 07B0
Signing time: Sun 04 May 2025 08:00:22 +0000
Manifest this update: Sun 04 May 2025 08:00:22 +0000
Manifest next update: Mon 05 May 2025 08:00:22 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: jGd+74Vaqv85HBab6+d7KJDQBb+I9tXy4OEODheYa0o=)
2: lbzZ5Xd-Bxx74-HdFugAtLWfqT0.roa (hash: MO8BCssJP9Ug+UVQ/493gxdacSXvZ1bCntr7vQJ6/Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:4f:7d:7f:fa:71:2d:32:7e:85:b0:73:2a:1c:d4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: May 4 08:00:22 2025 GMT
Not After : May 5 08:00:22 2025 GMT
Subject: CN=0f102ed5eb904f7ff5fe7ffbf60df3fd22978922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:7d:9e:fe:48:68:a4:a6:ac:22:80:82:b1:
14:65:74:a5:3a:43:59:da:70:ad:96:cc:d7:54:08:
91:84:3d:ea:70:8a:cb:e6:e1:df:51:3b:ec:2c:9b:
e0:ec:39:5a:9e:92:3a:75:c1:6e:dd:42:ca:d3:13:
cb:92:4f:8a:66:8d:44:0a:bb:ca:cd:03:dd:b6:8a:
d7:b7:a3:30:d4:04:9e:ee:4e:ee:8e:01:55:33:74:
56:5d:d9:06:35:5d:aa:ba:a1:00:0f:73:cc:f0:bb:
b9:08:e9:f8:d5:75:e4:46:00:d8:82:93:f6:08:e4:
63:d1:bd:6c:d4:5c:1b:96:56:fd:41:98:a7:5b:67:
7c:2d:86:64:eb:5d:a4:6f:7b:7c:46:f4:0c:b6:4e:
37:75:f2:16:e4:fb:59:2a:88:52:9e:d4:23:bd:2f:
26:8e:74:1b:ea:4b:91:1a:5c:44:2e:6d:0a:b9:78:
1e:66:43:5b:46:2b:0d:c6:be:1f:2c:ec:8b:c2:20:
0f:b7:88:88:11:04:a7:67:23:07:76:68:41:72:8e:
bf:e6:76:1d:73:b0:31:06:b9:6b:fc:62:a2:c7:e3:
d5:a5:7c:00:ce:99:01:d9:25:9d:fc:79:05:a8:cc:
48:63:9c:cd:7c:5c:92:e7:c0:73:01:2e:f4:78:31:
e9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:10:2E:D5:EB:90:4F:7F:F5:FE:7F:FB:F6:0D:F3:FD:22:97:89:22
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ba:4e:48:3d:40:98:f4:c0:ae:25:8d:86:79:68:39:2c:a3:
ab:f8:68:cc:53:a0:1f:6b:db:af:1b:4b:28:e1:de:11:59:55:
c8:15:6f:cd:68:cf:9e:1c:7c:34:22:03:e8:62:1a:cd:7a:b2:
2e:ae:35:1c:79:dc:26:49:56:61:82:03:3d:da:5b:05:03:2f:
0e:2a:2d:86:b3:69:2b:ef:b2:71:13:0c:7c:ec:b4:70:15:41:
d7:9e:a5:3a:c4:48:6e:62:09:48:e1:b0:13:00:4f:3c:c4:79:
25:f0:ef:53:96:f6:92:dd:64:f4:65:91:cf:07:4e:87:e8:d8:
d3:7b:2f:48:3c:22:0c:4f:a8:78:9b:5b:9a:54:90:14:a9:44:
87:dc:3b:cf:b6:b7:f9:21:a9:0e:37:6f:08:3e:f8:f0:ad:47:
84:8a:fb:c3:87:df:ac:45:96:c6:98:5c:1f:77:1e:d6:37:5f:
8f:37:e0:e5:e5:fd:67:7c:48:03:ff:65:27:f8:84:cc:d0:a4:
a7:a2:b8:b9:ab:d5:59:14:9d:3a:8c:a7:63:e0:58:a6:de:25:
aa:ab:20:20:bc:12:0c:6d:c7:53:ce:f5:2b:df:f1:a8:20:8a:
89:4c:41:f9:02:2c:e2:f2:e3:88:b6:c6:a0:2d:88:94:8e:21:
03:91:37:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:44:09 2025 by rpki-client