Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
File: DcnBtxcVahijTZMjtnoKA-2oWsk.mft (raw, json)
Hash identifier: cce4hrw9EzfkTKch2AWdJ6H5ilv5pEyiRlEpP3tyktE=
Subject key identifier: BA:92:DC:4D:FB:19:1B:9C:DC:DD:E2:A1:97:DC:7A:50:14:37:1A:A4
Authority key identifier: 0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
Certificate issuer: /CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Certificate serial: 019673790CA3BCAAF5F1E2ACCEBE0E42A04E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
Manifest number: 150B
Signing time: Sat 26 Apr 2025 19:00:34 +0000
Manifest this update: Sat 26 Apr 2025 19:00:34 +0000
Manifest next update: Sun 27 Apr 2025 19:00:34 +0000
Files and hashes: 1: DcnBtxcVahijTZMjtnoKA-2oWsk.crl (hash: QkR2F5cKBH3at0RCfc9iK4HSvnwyVmFl1pU76bV/4fw=)
2: J4rQ9gsrKayiuOOExEGxMHRTLss.roa (hash: J+BOWsTNmfnM3hLMHXcZYhZuZ1oIUj5I4r3BR6mevWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:0c:a3:bc:aa:f5:f1:e2:ac:ce:be:0e:42:a0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Validity
Not Before: Apr 26 19:00:34 2025 GMT
Not After : Apr 27 19:00:34 2025 GMT
Subject: CN=ba92dc4dfb191b9cdcdde2a197dc7a5014371aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:b5:0b:90:6f:79:08:ef:42:ac:29:7d:da:
4a:16:5f:87:28:59:d8:85:f1:2e:31:df:c0:dc:dc:
2e:44:52:53:48:7e:c4:b3:14:f5:65:ed:2b:03:f3:
55:ed:4d:d0:b8:6d:54:8a:f1:f5:15:f6:73:ac:79:
08:4e:55:46:53:57:00:d6:6a:0e:b6:6f:66:36:50:
07:7d:67:22:a9:16:cf:95:30:f8:ba:17:be:6f:ff:
7e:50:00:e1:4e:39:3c:be:a9:1e:07:ac:ff:68:21:
87:6f:39:b6:ed:48:e3:78:72:44:6b:fb:47:2a:43:
8f:84:ef:2c:81:80:e6:6b:55:c3:e6:11:c0:14:76:
de:90:39:78:d5:a4:55:57:0b:3b:d2:aa:e4:72:7b:
37:e4:34:b6:e1:94:42:76:50:d1:44:26:06:e5:21:
92:99:4b:66:93:87:a1:29:85:60:d6:a4:ef:76:da:
7f:1f:4b:98:e2:44:7e:c2:cf:76:5a:58:47:f6:9b:
70:52:ec:e7:53:ac:d9:a8:17:58:b9:a0:14:9a:02:
23:f8:59:46:91:fd:18:bd:b4:12:73:ee:f9:81:0a:
17:45:b9:0d:1d:4d:98:07:2d:b2:19:bd:0f:85:3d:
3c:b8:3e:7c:21:ac:e1:32:44:6e:7c:f4:19:5b:0f:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:92:DC:4D:FB:19:1B:9C:DC:DD:E2:A1:97:DC:7A:50:14:37:1A:A4
X509v3 Authority Key Identifier:
keyid:0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:21:f5:b6:fe:b8:9e:c5:14:34:4d:0c:a7:a8:2f:e6:a7:e7:
80:f4:fe:0c:5b:9a:c9:d8:aa:4e:d2:ab:64:99:92:80:f5:50:
25:77:5e:1e:a6:ab:19:f5:47:59:a2:2d:5c:8d:08:69:dd:b4:
ec:13:0d:3c:a6:54:b7:0b:35:5b:0c:9d:f3:bb:e7:5d:3b:b6:
b3:4d:e7:0c:f9:21:b0:4a:c2:44:6b:74:8d:80:3b:28:3d:64:
f2:85:ab:46:f7:3e:71:a0:2d:68:49:5b:59:3f:bf:6a:5f:df:
ea:a8:40:2c:22:b1:7f:79:9f:8d:98:54:75:7b:be:4b:49:0c:
1b:04:cc:ce:f8:aa:6a:ae:d1:c3:02:e8:d5:8e:a4:cc:da:6a:
a2:57:2e:11:82:b1:f3:9e:fd:87:a6:1e:3d:99:3d:18:af:cb:
17:9e:7e:27:7d:3c:4f:c9:d3:55:62:d0:5c:8f:50:13:f1:33:
48:b0:5f:41:8d:ee:48:aa:e0:a6:2a:e2:90:12:4c:53:49:77:
29:d8:92:b3:71:ab:9b:ec:4e:03:85:38:e3:51:ca:50:bd:27:
71:12:ef:27:89:a4:03:79:fb:42:ff:8e:e8:5d:41:4d:ff:b3:
d4:bb:e2:79:50:b3:cf:55:b8:6d:88:4c:84:d0:d3:9b:dc:1a:
79:a4:42:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:35 2025 by rpki-client