Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: I4nrqEJ10NzhgP9m3P3QzkeXJK1d0SQPCPkQSZVEQBQ=
Subject key identifier: 4C:94:0D:19:32:7F:C2:A4:45:CF:E7:BC:FE:EF:0F:66:AC:2D:E4:E6
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 0196C3B950A0EB4843FA6291BB4341D093B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 09:00:23 +0000
Manifest this update: Mon 12 May 2025 09:00:23 +0000
Manifest next update: Tue 13 May 2025 09:00:23 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: RIhvDHWseNpQW+QMGe13lzAdD+A2xnQ59gwR3FzapQY=)
2: buG6SoB8WcvMJVkAM0M1bD-X7DY.roa (hash: 4+Zsq3JV6DU94isVPAz6RpxYAcC5faMNhVluTUisCrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:50:a0:eb:48:43:fa:62:91:bb:43:41:d0:93:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: May 12 09:00:23 2025 GMT
Not After : May 13 09:00:23 2025 GMT
Subject: CN=4c940d19327fc2a445cfe7bcfeef0f66ac2de4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:f9:21:30:07:a9:79:96:6d:a5:27:1c:e7:
2b:aa:27:43:8e:86:2b:3f:a7:ad:cd:bb:da:86:83:
ca:08:aa:79:9a:8f:3c:26:b2:55:b1:e4:00:ef:e1:
01:dd:c1:51:13:ea:38:f6:2d:5a:db:26:17:7f:b7:
70:74:f3:d6:85:ff:be:1a:05:22:f6:c8:4e:44:26:
76:cb:27:34:4c:72:0f:12:0d:5b:16:7f:ee:12:61:
c8:71:d4:fc:3d:97:6c:39:8c:e0:82:51:f2:d8:4d:
c9:0a:3f:19:fa:c5:6c:b9:49:ee:71:63:34:3a:8b:
da:29:95:7a:d6:72:c3:20:32:b9:5f:49:c9:1c:2f:
46:69:6a:f4:2b:50:bb:13:f7:ac:dd:21:27:4e:44:
86:68:5e:a3:db:e0:ee:d7:14:17:a4:50:cb:a1:56:
24:5d:db:e4:af:ad:d3:b0:13:02:8b:7a:0e:e0:be:
aa:01:f9:7e:86:e7:11:66:51:c9:76:54:b4:16:e1:
68:aa:a0:2e:a2:a2:42:36:21:c4:51:73:a0:83:81:
c0:fc:c0:b6:0f:78:20:b6:35:96:ab:5a:48:75:56:
b4:8c:9e:3a:f1:79:20:f1:3f:b4:6f:30:99:77:bc:
ba:6b:6c:36:81:dc:7e:0e:c8:f6:20:33:8c:ae:20:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:94:0D:19:32:7F:C2:A4:45:CF:E7:BC:FE:EF:0F:66:AC:2D:E4:E6
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9a:e0:91:05:97:63:2b:9e:e5:2e:bd:7d:60:35:37:14:35:
f0:fd:3a:92:f3:80:75:b8:a4:52:dc:ea:77:c7:c5:04:f4:85:
34:c7:57:c1:31:a7:18:74:68:2a:4e:9c:79:09:a4:db:5a:99:
2b:7d:6a:64:bf:d9:24:14:3a:52:33:66:1d:c9:64:d6:5b:75:
77:8e:fe:f4:09:72:7b:cf:be:e1:da:c5:3d:c5:8c:87:1b:34:
dd:3d:16:81:a9:7e:55:52:4f:d3:34:57:2a:e3:e8:e1:09:22:
97:06:37:8e:00:fe:34:cc:7f:95:03:97:b5:62:01:ca:a9:c3:
cd:d9:a0:6f:cd:e6:7d:54:f6:0f:02:d2:0b:76:92:de:8d:08:
c2:3b:d1:3d:07:dc:3d:97:8f:88:9e:d8:6d:eb:fe:ce:a4:42:
8e:54:65:ca:b5:26:42:7d:3e:76:53:0e:c3:94:94:3a:e4:df:
12:69:60:0c:5d:f5:28:a9:8f:e2:82:6a:bb:74:cb:25:f4:76:
a0:81:55:f2:a1:bd:38:24:4d:42:cf:30:8a:cc:39:76:11:69:
cc:fe:2b:ac:2b:99:dd:37:32:7b:93:67:16:bb:c7:3f:4c:33:
62:cf:66:f2:b3:4f:30:b4:a0:79:e9:23:65:1c:92:31:13:0f:
7f:f3:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:43:44 2025 by rpki-client