Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
File: DNScoZAd8CCTDOlx9lzBgKP8voE.mft (raw, json)
Hash identifier: Jbrf4kMChkDjmWJXkOw3HmkmdheR+XN1Uxytp11+iqQ=
Subject key identifier: 20:D9:9B:D4:E8:0A:00:82:6A:08:59:48:40:A1:81:66:DF:D1:F4:0E
Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Certificate serial: 0196A38A10AF5D78DBDED88A50BAD069C6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
Manifest number: 1526
Signing time: Tue 06 May 2025 03:00:56 +0000
Manifest this update: Tue 06 May 2025 03:00:56 +0000
Manifest next update: Wed 07 May 2025 03:00:56 +0000
Files and hashes: 1: DNScoZAd8CCTDOlx9lzBgKP8voE.crl (hash: s4OAvedORgJoOdB1zDDO+J8aUTQ71Vj9Sn0hGpPh6m0=)
2: IyvCi4bscVz-cDd1e8YDDEn65h8.roa (hash: +ReDdginBUQu4++Dvo5zNIlV1w8CIv08Gg4t44mG608=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:8a:10:af:5d:78:db:de:d8:8a:50:ba:d0:69:c6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Validity
Not Before: May 6 03:00:56 2025 GMT
Not After : May 7 03:00:56 2025 GMT
Subject: CN=20d99bd4e80a00826a08594840a18166dfd1f40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:db:c7:3e:69:f1:50:57:97:de:6b:9f:22:a3:
8c:5a:e0:7f:f6:f0:4d:09:23:d2:e4:54:a4:a0:fc:
af:14:90:aa:3e:a5:88:ba:7a:b5:42:c4:ef:e1:0a:
be:89:2a:39:50:b0:5a:3e:91:f1:6f:67:ba:a8:5e:
49:4f:90:9b:74:9f:c3:a1:1f:33:fe:3f:fd:a1:70:
28:07:0f:3b:98:6c:f4:a9:e9:df:ea:64:09:03:07:
52:ed:9c:9c:58:b3:1c:90:e6:44:b1:8e:71:bf:12:
83:52:50:25:8a:5b:7b:61:32:57:8c:de:19:09:15:
12:6d:5b:42:81:ab:b8:dc:87:a4:ed:1a:3c:b0:d5:
30:13:ce:49:19:48:e1:8d:f0:69:cf:fc:00:6c:ef:
10:72:7e:45:62:ee:82:13:23:01:eb:8f:eb:62:5c:
18:b5:49:ab:16:f5:ff:cf:1c:c3:ed:f8:5b:6f:84:
d9:b6:ba:4b:34:3e:e8:02:70:68:1a:b1:f7:64:6b:
1e:57:50:9d:88:e9:78:f7:08:2a:51:88:2c:c0:08:
ff:e4:ff:67:c7:01:18:cb:42:78:4a:6a:f7:70:a5:
0a:73:3f:35:72:68:c4:d1:84:58:ae:c4:13:ab:3f:
8f:8f:db:3a:c6:e2:e5:95:84:35:98:82:25:32:d4:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D9:9B:D4:E8:0A:00:82:6A:08:59:48:40:A1:81:66:DF:D1:F4:0E
X509v3 Authority Key Identifier:
keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:77:b3:79:71:26:48:07:df:a7:41:2b:36:6c:b3:bf:f3:8b:
2c:40:b9:c6:d4:e3:cd:33:e5:2c:56:60:89:8f:65:49:ba:bf:
0e:97:7f:63:be:7c:a9:4f:87:2d:a7:24:ca:d6:2f:0b:5e:69:
ed:b1:fa:b3:c0:43:2d:f6:a0:fb:db:3d:83:14:06:96:7a:a7:
c2:a1:fa:a3:c1:16:4a:09:21:1a:1f:fa:bc:7e:a8:45:88:31:
24:ba:c9:87:33:46:6e:92:91:00:fa:b8:73:dd:4f:1b:fb:e5:
b0:ea:e9:93:8b:dd:9a:2c:2d:98:75:4e:8c:de:aa:9b:62:68:
b1:e6:a1:36:46:93:17:2e:2c:29:99:bb:da:d5:4d:47:9b:61:
41:51:61:c4:fd:c3:7e:9a:37:5d:cd:77:78:ae:43:fd:c4:72:
ba:5f:d1:8c:9c:e0:48:09:9e:d4:b2:64:e8:70:f2:cb:2b:8e:
8e:0c:e1:72:5d:0f:0f:66:54:52:09:e2:41:9c:29:e5:bd:f9:
2f:7b:aa:b8:12:40:aa:6d:95:01:81:c7:08:2f:d1:25:e8:52:
fd:6a:4f:c0:2d:a3:b8:87:2e:10:88:bc:88:5c:18:99:5f:63:
eb:91:cf:d5:16:96:d6:ae:cc:56:b1:3d:f9:57:88:54:30:4d:
80:99:f7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:08:33 2025 by rpki-client