Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
File: dGNy_s6bo5ZuFegFXAWHxQPAOas.mft (raw, json)
Hash identifier: NJUtK6iG6ANaBeG21DUOdVOoo3IVIPGoWzlmLq1WauI=
Subject key identifier: A4:C0:3D:2B:31:4B:D8:6B:F1:4D:BA:B0:C4:18:C5:B6:DC:52:8B:02
Authority key identifier: 74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
Certificate issuer: /CN=746372fece9ba3966e15e8055c0587c503c039ab
Certificate serial: 0196572650F73409A99DEB5907DD2C2EDAF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
Manifest number: 0FA6
Signing time: Mon 21 Apr 2025 07:00:50 +0000
Manifest this update: Mon 21 Apr 2025 07:00:50 +0000
Manifest next update: Tue 22 Apr 2025 07:00:50 +0000
Files and hashes: 1: dGNy_s6bo5ZuFegFXAWHxQPAOas.crl (hash: 7CkUZAVQrmjGo8FpikeNPndOB78emk3NYzhbeGQWZdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:50:f7:34:09:a9:9d:eb:59:07:dd:2c:2e:da:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746372fece9ba3966e15e8055c0587c503c039ab
Validity
Not Before: Apr 21 07:00:50 2025 GMT
Not After : Apr 22 07:00:50 2025 GMT
Subject: CN=a4c03d2b314bd86bf14dbab0c418c5b6dc528b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:d4:25:a9:16:05:1a:34:ef:5d:99:68:22:
49:bb:30:22:10:11:23:23:16:45:25:ce:e1:63:0e:
90:a5:d8:8f:ba:bc:87:27:e6:15:9b:fc:d3:b8:15:
15:bd:e3:e8:09:1a:98:c1:2f:f3:21:21:31:f6:d7:
cb:b0:64:a5:a9:95:1b:82:ce:40:b5:eb:60:97:69:
25:a4:40:6c:bf:07:76:70:1f:e7:04:bd:76:a2:2d:
b4:ae:ec:1d:38:2d:49:81:28:be:36:bc:23:15:96:
41:01:f3:23:8f:f8:da:bb:87:a0:14:ed:bd:68:f2:
76:ca:0e:b0:e7:06:f7:c2:97:ad:64:2d:98:8b:53:
e2:3f:3b:e0:78:76:d0:d6:8d:69:b7:c7:85:14:26:
da:6f:b5:83:d3:5f:63:b0:a7:46:8c:27:ce:de:f6:
15:a0:12:e5:64:96:65:f7:69:6b:6b:f7:2a:dc:3e:
34:79:a4:43:87:5b:45:f6:c5:b4:fe:47:ac:cd:89:
b4:f3:e7:35:ad:97:01:2c:87:b0:28:3e:e4:b6:b6:
04:8c:64:e2:b8:79:d2:35:e2:3f:a8:bb:9b:58:58:
09:90:96:9f:11:de:0b:43:55:5c:5a:83:c1:e6:eb:
11:9d:4b:e6:00:8b:e5:37:3a:79:cb:f9:9a:79:6c:
e7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C0:3D:2B:31:4B:D8:6B:F1:4D:BA:B0:C4:18:C5:B6:DC:52:8B:02
X509v3 Authority Key Identifier:
keyid:74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c9:bb:51:f5:f9:f7:e0:db:d8:a9:56:d4:93:35:59:ac:8f:
88:6a:d5:a0:8a:73:d1:43:a5:fe:5d:3b:db:c4:d6:be:80:0f:
52:3d:f9:11:96:85:72:6c:0d:54:f6:c4:11:6a:ed:4a:5c:ec:
b3:ab:bb:c9:3d:78:55:7d:f8:a0:31:da:f9:54:ae:98:23:59:
79:1b:39:e4:53:70:41:b0:5d:e2:58:05:e9:a6:03:fd:01:13:
34:c0:d5:fc:33:db:95:a5:58:05:c2:3d:79:5f:c7:c7:a4:30:
04:23:aa:c6:d8:5d:ef:09:a1:96:c5:96:9d:ae:2c:03:c6:11:
25:ed:ef:f0:b7:a6:6a:c4:20:f6:e4:7c:0b:96:67:4d:8e:31:
f5:83:57:7d:8e:5c:e3:b9:f6:37:46:5c:de:91:3b:1f:5f:09:
a6:0d:f7:29:ad:10:06:29:f3:f2:23:1a:9a:4c:bc:92:b7:47:
6f:86:c2:23:d8:9d:d0:4b:8c:c6:da:b6:1a:05:8d:f4:5e:eb:
5f:56:47:6f:de:70:73:41:ab:fe:41:20:4a:a3:aa:7e:12:bd:
58:32:5d:5b:b8:0a:49:5d:b4:13:2e:93:9e:e4:66:21:1d:63:
6d:b9:ee:39:69:4b:0b:9e:d7:a7:ea:bd:3d:98:6a:0b:db:0d:
d0:51:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:45 2025 by rpki-client