Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: F5pwmAjXcNC2/fguebDZxM9JmGyaamZxYWOJISe1TS4=
Subject key identifier: 4E:EE:9C:78:BB:27:18:6D:77:AF:E3:D7:C0:A2:2B:07:38:A7:21:53
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 01967CB2EF3EB5A06249AA6F476499EBBCF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 14:00:23 +0000
Manifest this update: Mon 28 Apr 2025 14:00:23 +0000
Manifest next update: Tue 29 Apr 2025 14:00:23 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: PmcDOg9rczHlG7Ayl6vIDcouCciZf01ONC8Eax7QVpU=)
2: Spijy9s0dl5Zj39GdhMa_kS4bpQ.roa (hash: yNGOiWMyz1u0T1szDPmkVxet3IhLc4ljiBf05yJrLuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b2:ef:3e:b5:a0:62:49:aa:6f:47:64:99:eb:bc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Apr 28 14:00:23 2025 GMT
Not After : Apr 29 14:00:23 2025 GMT
Subject: CN=4eee9c78bb27186d77afe3d7c0a22b0738a72153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:60:9b:e4:66:9e:4f:93:86:68:4f:17:99:
ce:47:9c:93:9d:1b:a3:03:6a:80:ad:93:00:ce:e9:
0a:2d:22:b6:29:11:41:4a:33:8c:62:c7:9d:e9:64:
55:6b:29:f2:08:79:d5:69:20:78:fe:d3:95:57:8b:
b4:48:87:97:57:d3:8b:a4:36:13:e0:55:0d:5d:48:
95:07:e1:2c:5d:a3:66:30:64:d5:d6:0f:be:93:4f:
25:13:c1:c6:26:bd:54:bd:01:29:59:3b:13:a7:52:
e6:74:3f:72:59:83:a9:c2:bf:7e:53:04:80:0c:d8:
5a:d0:f9:a9:35:85:b9:5e:62:79:1f:66:3c:87:f0:
bf:53:49:ea:45:04:a7:55:51:08:08:5f:3e:40:ba:
20:db:2c:e3:00:97:63:b2:0a:39:65:e8:37:04:5f:
9b:d9:22:c8:58:3c:c9:8b:bc:54:df:79:8a:e4:eb:
9c:51:8a:db:f6:44:ea:83:04:56:a8:6c:42:79:77:
4a:8a:dc:cf:cd:81:5e:91:d0:10:af:78:79:51:1d:
09:07:f6:90:ce:67:d5:62:af:30:31:f4:52:33:e8:
60:1e:ef:f0:d5:96:cb:56:2f:50:1d:67:c1:a3:4f:
78:d3:04:08:85:aa:d7:90:9c:bb:22:5b:c9:3e:3a:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EE:9C:78:BB:27:18:6D:77:AF:E3:D7:C0:A2:2B:07:38:A7:21:53
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7c:9d:d7:c2:02:61:5c:c2:84:8e:a0:8e:06:dd:ee:fc:57:
b1:38:f4:3f:39:a1:a9:b4:16:f2:8a:2f:f1:2e:34:b0:59:ba:
18:91:d4:3b:eb:ed:c0:75:52:7e:d3:87:36:b1:af:6e:ba:b5:
48:26:ad:61:08:d0:0c:dc:7d:a8:50:47:d0:0a:f3:59:83:05:
4d:ce:3e:cd:6d:d9:8c:3b:e8:aa:9a:6e:5a:c8:49:ea:7a:84:
b5:3c:db:ef:cd:cb:2f:a3:4c:01:eb:e4:8c:90:99:f9:61:21:
73:37:9f:73:a1:1b:10:5f:7a:9e:60:f7:3f:d4:3c:00:18:83:
e9:9e:ab:35:18:08:51:fc:f8:2a:f6:2a:66:5e:0f:43:e3:80:
7f:59:a5:22:87:44:59:8f:a7:43:3b:46:75:78:b3:65:86:ab:
f9:eb:fd:ad:62:96:82:ed:37:b6:a9:d0:34:a0:18:a2:64:6a:
9b:67:26:9e:17:64:f9:c5:2d:d4:9f:ac:9d:8f:ef:16:b6:2a:
28:a6:d4:e0:88:25:53:6e:b8:02:f8:f7:f1:66:65:ae:f9:df:
06:90:a1:59:75:66:1a:70:d3:fd:d3:fb:11:81:c5:b5:b2:5a:
aa:83:a7:3b:1d:1b:76:7d:df:ab:33:78:40:f6:ae:7f:25:90:
cb:ed:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:31:38 2025 by rpki-client