Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier: WqL6r9eRB8HYa1ltvNheodmcQOrA34fgDwt6pVmVZCY=
Subject key identifier: 51:A9:22:74:9F:77:7E:E3:86:A8:5B:4C:F7:B1:59:2F:C9:A0:0C:55
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial: 019653EEAAE53774C893456D75E9E0CE3F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 16:01:12 +0000
Manifest this update: Sun 20 Apr 2025 16:01:12 +0000
Manifest next update: Mon 21 Apr 2025 16:01:12 +0000
Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: t8RqN0E4tSjyd+RD5ek/h6ADq1/eZkmjFKqlf/mfhcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:aa:e5:37:74:c8:93:45:6d:75:e9:e0:ce:3f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Validity
Not Before: Apr 20 16:01:12 2025 GMT
Not After : Apr 21 16:01:12 2025 GMT
Subject: CN=51a922749f777ee386a85b4cf7b1592fc9a00c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:7d:e7:45:6d:3d:fb:e3:5f:33:89:ca:e2:
4f:6d:1a:d8:c1:d9:31:62:8d:2e:97:e6:2c:c9:4b:
36:a4:31:11:e2:1a:41:57:ec:ab:3b:93:ae:db:86:
d9:1f:1a:f8:a9:b0:60:14:bc:4a:1f:6c:d6:77:c9:
bd:cc:50:3a:74:d7:52:a1:aa:e1:0e:a8:75:81:61:
6a:a1:2e:ba:b6:58:c1:69:2b:c0:ef:be:3a:47:2f:
23:63:07:ac:0e:d0:cd:fa:a9:77:d6:8e:e3:dc:a6:
10:22:67:0e:4b:1d:ff:1f:62:88:6c:f1:05:94:b7:
3d:bf:d8:85:9a:94:53:e6:09:df:10:39:54:bb:29:
6b:5e:35:ca:97:5c:17:a5:ad:e9:47:50:7e:53:de:
8d:45:0f:8b:fd:5a:68:b7:4f:b6:82:11:89:b3:97:
ed:4e:e6:6a:d9:0e:17:14:42:91:72:7c:a0:c0:b4:
84:72:30:2f:ca:a2:54:65:c0:30:30:f2:25:a1:1f:
35:af:50:b8:cd:7f:7d:10:0a:15:2c:44:1d:92:31:
a4:be:a3:ae:10:ce:a5:18:c5:bc:fa:9c:7d:12:07:
58:45:8c:63:9a:7e:2d:20:45:43:28:54:20:fe:f0:
3d:13:46:10:dd:77:c6:73:4f:e5:e1:cf:a9:e0:b3:
97:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A9:22:74:9F:77:7E:E3:86:A8:5B:4C:F7:B1:59:2F:C9:A0:0C:55
X509v3 Authority Key Identifier:
keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:45:a8:50:77:a4:31:82:a7:9a:9c:ae:2f:9f:03:23:6b:4f:
1a:d6:b7:b5:0f:d2:0e:eb:b1:66:13:2b:c3:d2:af:38:80:23:
e2:03:76:98:43:95:bb:88:96:7c:67:c7:cc:ec:6a:b1:a9:03:
34:df:df:4a:6b:d3:b8:31:df:ae:5e:07:91:06:f8:76:6a:3a:
6c:c9:af:14:87:33:17:51:6b:40:ba:a5:66:d1:18:fa:6e:f9:
70:d9:fd:35:87:d7:aa:f9:6e:36:a2:bb:5d:9d:66:44:77:2a:
38:9d:fe:37:9b:bd:4c:2e:f8:b1:64:a0:60:4c:c2:7e:67:55:
97:09:f6:18:81:0c:88:f3:cd:5a:ee:49:21:1c:b1:fd:ed:aa:
4b:a1:dd:00:d3:94:be:84:eb:c0:11:d3:65:42:95:ef:46:ff:
42:36:7f:ef:0b:02:61:35:25:61:a4:c9:1b:ab:44:cd:82:f3:
d7:ae:fa:d3:23:5f:c3:29:5b:14:14:38:e0:5c:8f:d4:1f:38:
b4:28:af:11:3d:f8:07:4e:de:de:c8:ef:65:5b:d1:e1:33:cb:
67:c3:43:d8:b8:17:e7:02:9e:c2:04:28:c5:c3:85:99:f7:92:
af:65:89:f1:5e:38:ae:69:7a:49:40:1e:fd:6e:fa:46:10:df:
b0:58:90:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:19:44 2025 by rpki-client