Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: ZPy9evbHaXXI3j+P2lb6W2mBtM+8l6B03OBMq7nbEWU=
Subject key identifier: 6B:C2:31:70:4A:18:1A:54:BD:E8:9A:51:99:F6:6D:32:AD:77:79:11
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 0196D62D8C7B80C10328C42FB8FE15E87ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 07CF
Signing time: Thu 15 May 2025 23:00:31 +0000
Manifest this update: Thu 15 May 2025 23:00:31 +0000
Manifest next update: Fri 16 May 2025 23:00:31 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: QQcS914sxqTOGRfnJGdU2pO5Y2JlrGINOpOmTO8wrj8=)
2: lbzZ5Xd-Bxx74-HdFugAtLWfqT0.roa (hash: MO8BCssJP9Ug+UVQ/493gxdacSXvZ1bCntr7vQJ6/Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d6:2d:8c:7b:80:c1:03:28:c4:2f:b8:fe:15:e8:7a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: May 15 23:00:31 2025 GMT
Not After : May 16 23:00:31 2025 GMT
Subject: CN=6bc231704a181a54bde89a5199f66d32ad777911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:c0:cb:7b:fe:09:e2:9f:74:f5:87:9b:6b:
77:95:d1:fe:34:4c:0a:29:80:58:b1:14:a2:13:50:
5d:63:eb:a2:3f:c9:a9:b0:59:9d:11:24:81:28:45:
ec:43:f6:c4:2f:86:7c:dc:63:3f:dc:47:d5:31:be:
0c:56:38:ad:a8:92:a2:4a:6f:e1:91:0a:c6:6c:c5:
9e:fa:d8:0c:24:09:35:a4:8d:f2:1e:e9:0e:3f:39:
86:eb:aa:b3:9d:ca:db:9f:b8:f7:26:70:24:79:31:
20:4c:20:f5:ad:d9:3e:67:ab:26:11:c3:1f:cc:bb:
f7:e5:69:15:12:89:fc:26:1c:ee:31:ae:43:a8:04:
12:83:89:1b:08:a3:c2:15:ac:f5:11:d9:ae:f2:be:
79:77:70:31:5a:bd:ec:2d:67:41:d8:a3:70:ef:2f:
bf:69:66:ba:c2:b0:66:a0:99:12:3a:2a:ad:47:28:
3e:bc:b2:5b:dd:6a:76:b6:6f:b0:34:f6:01:ec:02:
f7:88:20:b9:ab:9b:59:c4:6a:5c:1c:6c:c1:46:57:
db:54:5f:45:d4:22:46:53:b2:33:6e:bc:53:2d:ee:
26:73:ac:6c:0c:f7:dc:7b:30:79:dc:1e:37:77:5b:
6f:f7:ca:cc:b7:a1:f9:a4:5c:d7:f3:80:ba:7a:86:
a6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C2:31:70:4A:18:1A:54:BD:E8:9A:51:99:F6:6D:32:AD:77:79:11
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bc:98:42:ae:72:9a:ce:e0:3e:76:25:59:c8:cb:f2:26:27:
bb:ec:32:b8:f7:0f:89:45:2b:b4:02:1c:3d:79:e7:78:a9:8b:
18:57:72:c7:e1:4a:c7:0e:18:5f:31:ec:1a:7d:dc:9c:19:c6:
0c:47:ee:b5:97:2d:26:51:45:9a:58:e2:c5:c9:bf:67:f5:a1:
4f:26:9d:31:c4:05:fb:78:50:bb:98:38:d3:d1:39:04:8a:d4:
a6:c2:28:b0:45:1d:73:ce:83:42:29:ad:49:3c:18:ea:64:f3:
69:5d:34:3d:c0:32:12:ea:f7:82:f3:cd:f8:06:74:ba:0f:d2:
e6:76:bb:7e:f5:e9:8a:83:0e:23:41:33:5b:f7:97:65:93:7c:
52:d7:6d:47:8d:14:fe:35:75:07:7c:8d:56:40:75:2d:04:29:
b5:a0:87:30:de:8f:a4:d5:14:8b:10:bc:ac:ba:1c:1a:ad:ce:
37:66:5c:cb:5a:ee:04:93:d2:6f:e9:eb:b2:02:7e:4c:8f:87:
06:d6:8c:93:4f:1d:b1:73:50:ea:d2:27:54:2d:fc:86:cc:7c:
29:f8:43:1f:9f:26:c4:e5:23:cd:f4:1d:f9:d9:f1:a8:be:f9:
17:e9:fa:38:f9:79:f5:fb:fe:47:06:55:6a:58:ad:26:40:cd:
42:97:b2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:05:10 2025 by rpki-client