Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File: DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier: PcSBmtjNs38PrD85yijDuC0AENURyN8uaWFDbIaNp58=
Subject key identifier: 22:69:35:D9:3A:04:61:8F:6A:D0:1B:16:F6:C7:67:E0:ED:CE:99:16
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 0196AF56DE0BECA4C7218CFFAA07ADF67A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number: 152A
Signing time: Thu 08 May 2025 10:00:27 +0000
Manifest this update: Thu 08 May 2025 10:00:27 +0000
Manifest next update: Fri 09 May 2025 10:00:27 +0000
Files and hashes: 1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: 6+z5WGNqAJv003Y9fFDN5/AvvNbdIVuG1iT/uXMdy9I=)
2: Fa4rtvztLobT1gePEYyc0DRCu2Y.roa (hash: C1CnICPh2LaUpEFyvXsX8GWWmclYO2wcMr6Jq76RYVQ=)
3: n5nqzvB4Fdb-BeoMgH_u_j1j4eM.roa (hash: M/0C5qRusrhAnj6tAMLK/NHBLWKiMm5trd2xt/8UodI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:56:de:0b:ec:a4:c7:21:8c:ff:aa:07:ad:f6:7a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: May 8 10:00:27 2025 GMT
Not After : May 9 10:00:27 2025 GMT
Subject: CN=226935d93a04618f6ad01b16f6c767e0edce9916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:53:d9:5b:51:3c:a7:3e:13:3c:ab:ed:cb:78:
ac:0c:46:28:64:6c:54:51:6d:09:00:bb:25:af:a6:
e4:cb:5a:22:09:64:b9:20:c0:1d:3d:f2:1f:2e:d8:
07:b4:ac:ac:10:ea:91:6c:31:61:68:d3:75:2c:69:
bf:69:7d:8a:25:cb:c7:ed:da:b9:f2:b3:56:14:24:
12:ec:6a:47:23:f7:23:dc:bf:9a:cd:1f:01:36:4d:
2a:33:20:31:d3:5d:d7:da:88:12:ad:72:b5:97:e5:
2c:1f:56:5b:d1:29:c9:d2:46:dc:2c:3a:67:c9:3d:
e6:5c:82:cd:97:6e:5f:4b:da:ae:b8:9f:3a:85:bd:
d1:2c:ad:e3:73:8d:2f:81:46:4a:dd:ec:14:b5:df:
1d:c7:59:f4:85:d9:2e:23:5c:7c:1f:02:ea:46:3b:
2e:c2:38:85:fb:43:14:60:36:88:04:3b:bc:02:23:
7c:4d:89:03:b1:dc:c9:eb:77:f0:36:07:88:a1:62:
88:fe:03:11:13:0b:39:c0:61:8c:af:07:bf:fb:7c:
d3:7b:02:87:b3:46:0c:4b:a4:cd:a6:e1:40:75:55:
82:cf:5e:ae:95:65:05:a7:6b:66:74:39:cf:40:99:
db:07:f6:ab:28:a7:2e:05:e7:27:bf:1f:01:65:f0:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:69:35:D9:3A:04:61:8F:6A:D0:1B:16:F6:C7:67:E0:ED:CE:99:16
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:93:4b:48:32:9f:33:bc:1a:1e:4f:e3:c2:0b:f9:ca:d4:53:
e6:fa:d6:df:d4:36:2b:88:43:ae:58:4e:91:51:00:b6:6a:91:
ac:e1:11:ce:2c:a6:b7:5d:5d:54:b2:4e:b9:6f:c2:ca:0b:fc:
98:87:16:e1:0f:cb:db:43:95:5e:54:c1:70:1d:fd:8e:9f:85:
67:ca:bf:9a:22:11:f2:32:0b:ec:35:5d:4f:de:31:d6:2a:71:
3b:3b:aa:75:26:67:b8:c0:10:02:7e:10:69:eb:be:22:1e:7a:
7b:67:bc:95:0a:bc:8c:74:c3:b8:06:2c:ea:d0:32:d1:eb:db:
a3:c4:b8:7a:0b:a0:a6:a6:d7:d6:b9:7a:1c:9a:b4:c0:7a:a5:
ba:68:33:61:30:35:6d:39:65:fe:ab:f0:97:45:79:44:b0:39:
29:84:63:18:32:2f:6a:bb:0f:53:7d:bd:b2:d6:24:2a:de:3b:
aa:e0:b2:76:0b:0c:c2:28:9c:ab:8e:86:6a:4a:52:d6:40:7f:
c9:5a:d3:7c:bf:50:fc:ab:35:2a:56:67:1c:9e:bb:c9:b3:1a:
5a:1d:1f:3f:c2:70:3a:63:29:23:cb:dc:49:5d:a6:62:fb:fd:
9d:b4:94:7c:2a:a6:ec:d6:a2:c2:9c:12:66:ec:d9:7f:f5:eb:
6e:00:dc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:01:07 2025 by rpki-client