
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
File: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft (raw, json)
Hash identifier: BUillwA4XT2vJfT3BvhXUUjX+HpPlGOKH8vthrUiNaE=
Subject key identifier: 12:C7:B8:99:99:B2:96:2F:12:B8:09:58:14:CD:04:47:F1:C6:9F:58
Authority key identifier: 0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5
Certificate issuer: /CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
Certificate serial: 0196A12D90B8D0C6ACE4A7615ADA17E72B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 16:00:39 +0000
Manifest this update: Mon 05 May 2025 16:00:39 +0000
Manifest next update: Tue 06 May 2025 16:00:39 +0000
Files and hashes: 1: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl (hash: 3b90Mj4VqR2qwmq+XL2zJuB5sOR+J+aIyEakNiMM7K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:90:b8:d0:c6:ac:e4:a7:61:5a:da:17:e7:2b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
Validity
Not Before: May 5 16:00:39 2025 GMT
Not After : May 6 16:00:39 2025 GMT
Subject: CN=12c7b89999b2962f12b8095814cd0447f1c69f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bf:77:86:e3:47:8c:67:f5:f6:30:e5:85:22:
99:a7:92:a8:bf:bc:f9:25:b6:76:35:72:99:56:0a:
cd:56:f1:19:b9:28:9c:ca:6b:b0:ba:ee:d2:3f:8c:
d5:49:8e:9a:5d:79:86:da:6d:f5:7d:63:e4:8d:8e:
0f:08:c2:b6:d7:46:de:ed:a2:62:23:ef:87:c2:f3:
88:e4:86:31:60:8a:f8:a9:a5:5c:31:78:ee:a7:02:
d8:2d:69:57:40:b2:92:1d:04:17:58:90:cc:a1:4d:
9f:e5:e2:c7:c0:38:1c:70:e9:d3:7a:cc:41:99:cd:
bf:4a:2b:2c:24:f8:49:2a:aa:e6:95:bf:73:5c:da:
b8:d4:0f:40:d5:6a:d6:3f:22:96:83:82:ca:99:db:
f2:b5:28:57:88:05:83:d8:75:15:51:65:c1:98:e6:
fb:46:8a:df:d9:bc:cc:72:f0:08:69:0a:9c:45:4e:
c4:1f:86:3c:0f:97:f4:35:25:a6:d5:4e:a5:a7:5c:
bb:c4:56:d7:38:82:79:10:c2:9c:ef:83:5a:ed:06:
55:e9:59:26:f5:9c:c2:50:74:4e:a8:77:2a:5c:b4:
fa:28:40:ed:0d:5b:2f:f6:46:e1:88:0c:74:93:e8:
dc:ed:7e:46:65:d9:19:f5:ac:19:ef:c5:e3:cb:1a:
86:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C7:B8:99:99:B2:96:2F:12:B8:09:58:14:CD:04:47:F1:C6:9F:58
X509v3 Authority Key Identifier:
keyid:0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cb:bb:29:55:5f:d9:c1:f3:ad:32:1e:b9:bb:bf:14:2c:fc:
7b:a5:2f:1c:d7:aa:50:ba:fa:30:41:1e:f1:55:77:bf:26:8f:
18:7e:e3:a3:b6:f1:bc:18:c9:61:74:f2:f3:a0:29:f1:ab:4f:
0a:7e:cf:3d:f6:45:f3:20:21:0e:bb:3a:75:1a:a6:4d:bb:ab:
62:3e:39:70:92:bd:5a:81:71:13:ac:da:83:4d:9d:d8:fc:6b:
c3:d6:71:cd:b8:2e:b1:8f:88:e9:a7:92:24:a3:8c:46:cc:c1:
c8:98:a8:e0:85:96:a8:08:8a:76:7b:5f:ff:7f:af:08:60:76:
d0:ed:5a:ba:c5:6c:ca:47:b2:a9:f7:9a:3d:58:3d:1f:84:75:
ec:aa:34:25:5e:7a:51:78:0e:1b:fa:f4:ea:8e:cb:14:55:c0:
18:24:c7:ed:17:a3:1a:ec:da:59:42:25:cc:77:49:60:28:c9:
9c:c5:a6:2d:b9:73:2a:04:25:23:0a:85:2c:cc:40:51:45:7d:
10:cf:f0:e9:92:a3:cd:64:6e:76:08:0a:4e:6c:8d:0f:f4:33:
b7:dc:58:3e:1b:83:05:10:d3:cc:0f:74:6a:e4:40:7e:55:95:
a6:5a:f9:1b:78:73:0a:3e:bd:ba:bf:db:31:a0:92:e5:c2:ab:
48:06:46:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:48:54 2025 by rpki-client