Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
File: DLXT6N3PUkwgwyOH7TED1MvypWo.mft (raw, json)
Hash identifier: 5a8jDBNpua+VWrwgqvoFcfpOngtKpno6ObKNyoWAnfs=
Subject key identifier: 19:7D:61:65:6D:E0:14:D6:14:D3:F6:9F:A3:52:0E:AC:79:1B:DB:1A
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial: 01968FCBCD27CEEC383C6ACE91A3A15DD2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
Manifest number: 1521
Signing time: Fri 02 May 2025 07:00:20 +0000
Manifest this update: Fri 02 May 2025 07:00:20 +0000
Manifest next update: Sat 03 May 2025 07:00:20 +0000
Files and hashes: 1: DLXT6N3PUkwgwyOH7TED1MvypWo.crl (hash: khxcaSPgshgzpuGsOBHgI9LOGQ1px8UbV0qgcTOohDg=)
2: NmPkoiKmzvfxr2tE8qV8-CIZnCo.roa (hash: RU6vCeDfFthQ1YTFt3fi6pe99JectXQZEPhaEuKEkus=)
3: gIGqiCK0bC1pGcI5YkcQP3gBY1g.roa (hash: AYt4mi1gsvIajU9NsR145mbQ/0eGQGt615cxYTa3ACY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cb:cd:27:ce:ec:38:3c:6a:ce:91:a3:a1:5d:d2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Validity
Not Before: May 2 07:00:20 2025 GMT
Not After : May 3 07:00:20 2025 GMT
Subject: CN=197d61656de014d614d3f69fa3520eac791bdb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:38:4a:46:d5:fd:e2:ef:35:6c:22:f5:ad:
5f:bd:e9:ae:84:d7:de:ff:f9:5d:5c:7f:cb:ac:1a:
de:70:9d:a3:8b:1d:aa:e7:dc:9f:06:06:b7:1b:99:
23:b3:64:d0:82:b9:50:09:ff:63:04:59:b7:e4:ab:
20:3d:5e:0a:c7:9b:db:e2:81:c4:a5:23:ea:61:80:
0c:34:bf:b5:b6:4e:31:16:c3:f6:7b:b9:70:10:e3:
eb:28:e0:a2:d2:38:8a:84:ef:a8:cc:a7:e7:39:d2:
4f:1b:d7:3d:00:05:9c:91:a0:fb:73:5d:93:b9:c1:
6f:61:91:cd:9e:ba:a3:3b:17:5f:0d:05:2d:f1:55:
1f:99:1c:27:1d:98:b9:0e:5e:ca:6e:f5:4b:df:18:
b5:4d:77:3c:95:84:9f:8a:b1:9d:6c:6a:c6:19:e6:
df:67:ae:5f:90:8b:ff:f4:4d:99:84:a8:55:3b:d5:
38:f5:07:62:12:62:3c:ea:71:7d:b2:f1:9a:33:2c:
48:08:a8:5d:dd:ce:7a:f4:e6:39:68:b8:61:a5:91:
f7:69:ac:b5:58:46:62:23:3c:ef:52:2f:9d:86:7e:
29:bb:eb:c9:bc:00:65:08:46:5d:69:75:b0:ec:a8:
18:86:12:c4:ff:d1:94:8c:82:1b:10:a3:be:71:84:
60:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7D:61:65:6D:E0:14:D6:14:D3:F6:9F:A3:52:0E:AC:79:1B:DB:1A
X509v3 Authority Key Identifier:
keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:49:44:03:32:d4:b0:7d:29:83:70:62:ca:33:3a:61:06:ef:
83:05:f3:eb:f2:b0:fc:84:24:e1:45:be:5c:74:0e:36:1b:de:
68:10:7d:f5:64:72:bf:2b:2e:3f:cb:e8:0b:8f:2c:df:c3:62:
98:7e:23:db:00:22:e9:0b:8f:40:66:a3:1f:68:23:75:bb:31:
42:0a:ff:61:05:b0:c3:bf:c5:62:4f:c8:2c:65:51:c6:57:18:
35:ae:9a:63:5c:32:94:c1:dd:4a:9b:04:1b:34:65:61:ef:92:
79:79:56:b0:34:80:d0:ad:e4:99:73:fd:d3:9d:19:81:90:ea:
7c:4a:3e:c6:6a:2a:14:a1:0d:7c:8c:07:45:7d:cd:7a:d5:4e:
45:15:f7:25:8d:5c:9b:a8:94:0a:c1:31:82:1c:6a:f4:0b:f3:
1f:c7:3b:a3:fd:cc:44:05:0f:bb:70:e2:cd:a3:56:e8:55:71:
96:bf:33:84:06:e8:c4:12:28:21:09:8d:18:4a:d1:a9:c3:de:
a5:e8:25:23:88:6e:ec:25:1b:77:15:15:2e:13:69:00:a4:42:
71:6c:cc:57:67:e8:94:8f:41:68:c6:8d:91:9e:d3:89:7c:60:
9d:58:30:17:8d:5d:86:f0:cd:d7:d1:37:32:3c:16:09:f4:b7:
59:b3:12:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:46:32 2025 by rpki-client