Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
File: DLeircbcrxd7k6M2y47OzFrzAlg.mft (raw, json)
Hash identifier: dcV/qgYf3zjWss0wdbuwbkI7740bi+ooUTnXQH7skhc=
Subject key identifier: 9C:72:E2:78:41:63:4D:B3:F9:74:9D:9D:1D:87:64:98:A1:7C:D9:81
Authority key identifier: 0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
Certificate issuer: /CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Certificate serial: 01968A38333CA8CF3DFA1A7D9DAC3DD084B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
Manifest number: 07C0
Signing time: Thu 01 May 2025 05:01:01 +0000
Manifest this update: Thu 01 May 2025 05:01:01 +0000
Manifest next update: Fri 02 May 2025 05:01:01 +0000
Files and hashes: 1: DLeircbcrxd7k6M2y47OzFrzAlg.crl (hash: dVv1U/B6+RqeCTBuiRJq8FpqWawtrlY7Waqk9Alkm40=)
2: DXgX_cMOKWmvyb5MDCu-yzGISYQ.roa (hash: fFfPzCo7zqTjJgcKhX4SxPHlq4HGUqWFQ0c7O8IZwwY=)
3: OVOzZ2g8zifvqCY8wDqOXjL1AOc.roa (hash: ei5vXf6WAl7FEI5d5Hm8KKAZYtO3URaho5E46M2Vof8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:38:33:3c:a8:cf:3d:fa:1a:7d:9d:ac:3d:d0:84:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Validity
Not Before: May 1 05:01:01 2025 GMT
Not After : May 2 05:01:01 2025 GMT
Subject: CN=9c72e27841634db3f9749d9d1d876498a17cd981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:4f:a7:88:b3:53:64:57:fc:dc:dc:ed:84:
ab:3e:85:c8:9e:59:7a:95:a8:98:13:59:be:7e:e3:
e3:80:22:10:40:d3:58:56:ca:c7:41:b4:31:fa:14:
57:c4:f0:a2:f8:19:94:11:47:4e:90:86:29:89:63:
22:b6:73:ff:99:b9:d8:fd:e0:d3:31:09:d2:a8:ea:
a3:8b:d2:16:9a:31:a0:9f:8a:3e:d4:f4:a2:3c:02:
38:fa:b3:73:e8:5d:06:ca:16:39:7d:8c:95:7a:6f:
dd:bf:98:6f:44:00:25:8c:7b:7d:5c:b8:f5:f2:de:
08:26:7c:c1:d6:bd:af:cc:4b:ea:d9:33:bd:a2:6b:
ba:6f:b8:4f:4c:a5:c3:e4:4e:b7:e6:5c:e2:1a:ca:
c9:e7:a5:44:85:aa:43:55:29:dd:f5:b2:3c:21:e4:
99:53:c2:17:f0:86:82:9a:46:4e:73:69:3e:d0:af:
45:b3:54:c6:4d:5f:4b:50:1c:b2:4e:7e:6e:fb:e3:
cc:1b:a2:c0:4a:9b:f5:ad:f6:30:b3:48:be:e3:dd:
f7:5c:52:29:73:2f:09:9e:6a:85:9a:e3:9e:33:ad:
53:01:c6:5e:b2:22:5d:ee:65:44:d2:fa:eb:fd:6c:
41:a5:1d:80:05:b0:a0:2c:78:42:4c:b7:a9:c4:72:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:72:E2:78:41:63:4D:B3:F9:74:9D:9D:1D:87:64:98:A1:7C:D9:81
X509v3 Authority Key Identifier:
keyid:0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e2:b3:0f:85:57:de:b8:ca:1d:e2:07:1a:35:0f:80:2a:89:
5e:a0:50:ef:0f:ee:02:bb:32:f9:87:be:f9:4c:e2:68:2d:d0:
0a:e1:7e:da:cd:f7:b1:9d:69:b7:af:98:2a:00:89:b9:22:b2:
ac:1f:23:0e:12:42:79:79:78:aa:41:3e:6b:03:19:28:1c:34:
6a:3a:36:4b:f7:a2:7b:e0:97:6b:45:6e:e7:e3:51:a5:ef:8d:
a8:e8:cd:6d:67:0b:34:34:e4:cf:7e:bb:50:72:39:8a:c9:f5:
a0:3c:3f:75:f0:5f:47:3c:52:65:5c:73:5e:8c:28:68:f0:db:
5c:46:a2:44:02:1a:d5:6a:c8:0a:2e:cd:a4:95:88:41:12:8b:
77:74:33:9b:51:9a:33:8a:8f:6d:f0:9b:c9:55:1a:13:64:47:
a8:3d:92:82:fe:13:06:54:84:b8:4e:a7:bf:9f:a4:9c:41:8f:
80:5f:73:d8:71:b8:d5:48:09:c4:09:7e:bd:ec:18:eb:24:29:
28:0d:72:89:27:a8:07:d2:de:97:87:ca:a2:eb:49:de:f6:53:
53:72:aa:62:0a:4f:3b:1f:d2:8f:3c:ec:a0:a9:d3:b0:a9:68:
ec:51:24:c5:6e:40:6d:45:da:61:59:73:dd:ca:f0:2a:ef:e6:
e8:1c:7f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:29:59 2025 by rpki-client