Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
File: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft (raw, json)
Hash identifier: 0g9/ZK748xWCYrJzFCKUxOyzT0fg0HEmRpvmBseIr8g=
Subject key identifier: DC:1E:8B:30:84:7D:46:88:49:21:CB:2B:C8:0F:23:D2:B3:81:F2:60
Authority key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
Certificate issuer: /CN=74b083650295189f009aa74c12cbc61ee23fa753
Certificate serial: 0196553770A5A6887E36BF6BC924087772D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 22:00:18 +0000
Manifest this update: Sun 20 Apr 2025 22:00:18 +0000
Manifest next update: Mon 21 Apr 2025 22:00:18 +0000
Files and hashes: 1: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl (hash: doKJcfnC86g9zPM317DmCp7K5T4vhT98Cyf0E1WNXP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:70:a5:a6:88:7e:36:bf:6b:c9:24:08:77:72:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b083650295189f009aa74c12cbc61ee23fa753
Validity
Not Before: Apr 20 22:00:18 2025 GMT
Not After : Apr 21 22:00:18 2025 GMT
Subject: CN=dc1e8b30847d46884921cb2bc80f23d2b381f260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:9c:a6:00:3b:50:27:98:31:ee:11:f7:10:
22:fd:df:4b:8a:d0:52:cd:83:bf:54:9a:e9:e3:d7:
25:24:84:53:0b:b8:44:5b:18:85:76:84:06:f8:c1:
75:75:a0:1f:e6:b7:05:25:d9:89:ec:f6:16:f3:bd:
ca:f9:24:93:78:57:2a:be:ac:f5:c5:7c:4f:7d:78:
8e:cb:45:f8:af:df:3e:0e:19:6a:87:13:8f:2c:c4:
0b:1e:71:6b:c5:c7:81:e3:e8:cb:7b:49:14:97:bf:
59:01:80:db:70:61:ec:43:fd:cd:96:0d:d9:8e:43:
4f:ff:9d:e7:51:b0:d8:1d:ef:46:17:c6:01:38:4c:
c1:73:ed:db:18:18:ca:8d:df:05:e3:e9:b6:7c:18:
9d:f7:67:92:7a:2b:b6:d0:79:10:61:8c:e6:a2:32:
0f:2b:be:71:ad:11:28:f5:28:ed:53:68:19:1b:74:
fc:a5:8e:cd:a6:0e:1e:2b:14:00:77:a2:0e:f8:d0:
f3:bb:c6:ec:5f:98:d3:05:24:30:fd:e8:80:8b:75:
5a:58:cd:29:09:28:bb:9b:a0:55:36:ec:20:6b:6c:
0c:3b:92:2f:98:c0:1b:03:0d:a1:88:6e:6a:df:7a:
98:5d:e3:1e:2b:c9:1c:5a:80:64:f7:53:39:05:c1:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1E:8B:30:84:7D:46:88:49:21:CB:2B:C8:0F:23:D2:B3:81:F2:60
X509v3 Authority Key Identifier:
keyid:74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fb:9d:82:6b:25:07:a6:0c:91:c2:90:72:eb:70:1d:6d:b6:
3d:98:96:6b:1d:7d:c0:a8:e8:33:1d:77:f1:cd:a7:d4:4d:e0:
60:b7:39:f8:c9:59:36:28:74:87:f0:7d:e8:92:ad:f0:96:bb:
95:a7:4b:53:b4:98:d5:34:6e:19:73:5a:c4:db:aa:a9:dc:cf:
46:67:e5:23:ea:86:93:ca:cd:33:9a:53:c8:6a:8c:9e:36:4b:
9c:84:c9:c0:47:33:03:50:90:96:a1:1f:12:46:8f:ba:24:fa:
00:a7:9b:57:bb:f0:59:87:f9:53:ea:89:23:64:11:2f:fa:4d:
69:1c:70:eb:cf:f9:48:bd:0e:8b:2a:d7:95:eb:b0:bb:6f:d0:
4b:df:a6:8a:b0:b4:f3:41:10:21:d0:c0:78:ea:53:1c:d5:a2:
0a:36:b0:06:34:bf:4a:45:f0:f0:2d:83:5a:e6:32:7f:43:e2:
61:ce:11:a6:41:cb:5b:7c:60:d0:2d:50:c1:1f:dd:3d:de:24:
21:a6:13:6b:b7:16:89:d4:ec:d8:ee:02:6d:11:b6:4e:01:b2:
db:6c:c7:f6:77:69:c2:a4:16:85:a7:c4:26:72:d5:27:d0:41:
98:34:ed:d8:3d:6b:06:ce:1c:e4:56:7c:da:a9:25:43:d1:05:
1a:7e:cf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:36 2025 by rpki-client