Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
File: DLvQEU2XGWdQ1IxeElbtBVpeniw.mft (raw, json)
Hash identifier: bDNAB+JLiFycYFsiV541oF9bKgT4pgfG3xv/0G3PbJU=
Subject key identifier: ED:BD:4E:F4:19:36:76:6F:3B:C4:9F:36:91:97:1A:A5:8E:B2:43:A8
Authority key identifier: 0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
Certificate issuer: /CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
Certificate serial: 0196952978099B7281F94FE870148948388F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
Manifest number: 0977
Signing time: Sat 03 May 2025 08:00:44 +0000
Manifest this update: Sat 03 May 2025 08:00:44 +0000
Manifest next update: Sun 04 May 2025 08:00:44 +0000
Files and hashes: 1: C1pdtFvgr0xoHUm63plkKuj-C_Y.roa (hash: b/y/wC9aBMLG4uCve6DdHlmgdXRsPrspZQT4HGYlIp0=)
2: DLvQEU2XGWdQ1IxeElbtBVpeniw.crl (hash: qfK4tTbcCmE/P+nT9g5snovG+4CSvAijyNUJMESlXxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:29:78:09:9b:72:81:f9:4f:e8:70:14:89:48:38:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
Validity
Not Before: May 3 08:00:44 2025 GMT
Not After : May 4 08:00:44 2025 GMT
Subject: CN=edbd4ef41936766f3bc49f3691971aa58eb243a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:b4:2d:a6:a4:72:70:f7:c0:ef:c6:be:a0:
b8:87:0e:85:1a:d0:cd:92:a1:5a:36:cb:2d:26:aa:
13:8d:a1:50:a8:cc:38:f0:ff:3f:19:93:9d:c0:c9:
9e:ce:35:ab:c8:a2:4f:e3:9b:6c:c8:6c:6f:f3:69:
a0:63:aa:bb:f9:06:12:cc:bc:18:32:66:36:a0:cd:
eb:2b:db:0a:7f:e0:1d:c0:cd:42:a3:b3:6b:1e:73:
1b:c5:ca:18:b6:96:d4:63:2f:39:cf:cf:6f:32:5d:
91:05:8a:40:99:6e:19:e7:5c:58:d5:68:89:22:c0:
10:e1:69:10:e7:4a:e5:7c:18:c3:5c:42:ba:bb:1b:
ad:c0:6f:85:5d:22:0f:79:aa:fa:5b:12:c9:76:28:
7a:4e:e6:15:1c:20:7d:1f:29:e2:c7:6e:ec:f9:f3:
59:e9:6a:98:90:8b:81:2d:57:7a:2c:e3:1c:34:14:
33:e0:f3:fb:53:71:e3:b8:48:fd:f4:88:e1:00:57:
fb:11:1f:24:c9:72:a3:03:47:28:eb:68:a1:49:e3:
7d:9d:8b:5e:ed:ce:1b:a9:82:40:5b:d8:a5:06:10:
e8:77:0e:9e:77:2b:2e:e1:6b:75:01:68:e2:90:79:
58:2f:0e:e7:48:5e:79:5b:50:f3:a2:8a:99:98:3d:
0b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BD:4E:F4:19:36:76:6F:3B:C4:9F:36:91:97:1A:A5:8E:B2:43:A8
X509v3 Authority Key Identifier:
keyid:0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b6:d4:e5:fa:e7:6a:f5:24:13:31:7e:a8:e8:e8:18:1a:65:
e3:bf:d9:53:75:4a:75:1b:b7:97:8f:dd:dd:41:a6:85:cc:4e:
3a:bb:58:e8:5e:f6:83:78:af:46:02:51:da:42:69:a5:06:23:
ca:d2:f8:6b:c8:ef:a2:53:1f:88:79:37:e2:8a:04:5d:a8:4f:
e5:2f:88:73:73:8e:9f:72:76:13:f8:cf:97:a3:1c:94:cd:79:
a0:0e:7d:2b:24:67:c6:92:6a:dd:76:a6:c7:25:e6:fa:c7:89:
bd:d9:01:9e:ec:ad:cf:a4:ac:3d:d7:fe:16:4b:fb:3c:7f:89:
2a:1b:ef:b8:60:db:39:9a:39:6c:fc:7b:89:b5:f8:a4:72:03:
03:e0:05:44:62:15:1e:6a:21:a8:c0:bb:10:c5:b5:79:22:68:
72:64:d6:04:d0:b9:df:28:d0:b4:ad:d9:53:16:3c:4e:14:25:
26:a9:78:1e:b4:b8:7b:50:a6:f2:44:7a:0d:04:0c:21:92:02:
8c:b8:0b:9b:4e:64:4f:6f:27:1f:3b:b7:13:33:03:ef:52:22:
fc:7d:1f:df:e9:42:b1:4c:30:e1:38:6a:19:f1:e7:90:25:e9:
10:07:ab:4e:c4:34:57:b1:b0:8d:27:04:ce:47:1a:48:8d:08:
5d:c8:70:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 09:58:42 2025 by rpki-client