Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
File: Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft (raw, json)
Hash identifier: kUMrvthMp0x03qbW4MxkIb7Bxrh8EDCovhcZ5q4X76k=
Subject key identifier: 66:2D:86:6E:12:47:F0:9E:30:33:A2:B5:42:3C:CE:E0:E5:59:18:F6
Authority key identifier: 0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
Certificate issuer: /CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Certificate serial: 019657262F1333280AC7ED983E7A58999CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
Manifest number: 133C
Signing time: Mon 21 Apr 2025 07:00:42 +0000
Manifest this update: Mon 21 Apr 2025 07:00:42 +0000
Manifest next update: Tue 22 Apr 2025 07:00:42 +0000
Files and hashes: 1: Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl (hash: 7LojmF899lqD3hL6UiF/QJHFwX7vhBlFVSoojHj9MXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:2f:13:33:28:0a:c7:ed:98:3e:7a:58:99:9c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Validity
Not Before: Apr 21 07:00:42 2025 GMT
Not After : Apr 22 07:00:42 2025 GMT
Subject: CN=662d866e1247f09e3033a2b5423ccee0e55918f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:b8:6a:30:22:23:56:94:ee:00:81:19:11:
ed:fc:7c:86:1f:a5:82:c8:65:f6:ec:93:ea:a8:5f:
74:31:aa:7d:95:2e:c3:9e:74:bd:fb:f8:bc:db:99:
b9:e8:66:d8:5b:9d:fd:9f:8b:1b:4e:1f:72:9c:e8:
c9:7b:7d:6e:81:21:7e:cc:80:50:3e:14:f4:aa:16:
cf:65:50:7f:f1:cf:66:82:89:a8:20:c1:63:bd:71:
31:61:5f:db:90:41:f1:e5:a8:d6:75:e0:ef:85:ad:
52:6f:60:00:3a:86:3e:b2:34:76:90:1f:45:19:7f:
80:37:53:6c:34:63:6b:a0:bc:80:52:dc:21:79:cb:
eb:92:e0:6e:cc:7d:dd:95:2a:e4:35:da:a2:72:54:
71:3d:c5:b5:1c:79:7d:1f:8a:53:84:7f:86:93:e8:
35:ca:fb:82:1f:cc:7c:74:f9:70:04:5b:b0:f5:02:
b5:aa:e8:43:d5:85:d8:e4:c0:6a:dd:94:8a:76:4d:
72:ec:9f:8c:96:08:cc:b0:1f:b3:aa:65:83:54:a5:
d1:62:95:ce:a7:82:d7:e5:83:da:4e:08:fc:b7:0a:
3c:31:26:9b:fb:38:98:87:63:99:e6:29:0c:6e:03:
30:e2:38:07:ca:da:21:17:65:31:3e:ae:10:1b:07:
b0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2D:86:6E:12:47:F0:9E:30:33:A2:B5:42:3C:CE:E0:E5:59:18:F6
X509v3 Authority Key Identifier:
keyid:0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:59:84:3d:5d:ce:69:9a:8c:f6:00:e6:e5:61:91:b8:ca:ae:
86:2a:07:2e:5d:e8:87:4c:e2:16:42:41:81:77:4f:ff:9e:d1:
58:c5:63:5a:87:ea:2a:74:4c:3e:63:53:66:34:7e:f6:67:0a:
8f:68:d2:2f:91:07:8e:9e:0c:14:99:b2:26:0f:80:d6:cb:75:
76:90:f5:62:63:6f:62:1f:59:2a:14:c8:96:38:e1:22:14:2c:
af:bf:a7:53:6c:73:20:ed:ba:88:ab:17:49:6a:63:5e:8d:ff:
ac:a0:61:fa:77:90:c6:16:fd:c3:7e:5b:45:99:64:97:13:37:
e9:73:8d:46:a0:52:2e:4a:e1:f2:33:37:e2:35:ec:23:14:e5:
c0:e7:fc:75:91:9d:8f:03:47:a4:c3:7c:27:b2:5b:45:b4:b0:
19:ae:47:33:4f:84:b8:f3:84:e0:e9:6d:41:4b:4c:2c:44:a9:
44:64:d9:aa:15:24:4c:9b:7b:ba:9b:a4:b8:f1:8d:cc:84:22:
19:24:36:7f:bb:c0:11:fd:ab:24:cb:0a:80:44:2b:25:32:88:
a9:23:e8:32:26:5d:7f:c6:e4:84:71:0d:3d:b5:0a:fd:ee:a0:
ea:33:ff:59:12:5d:00:3d:6a:8c:b5:bd:b7:3a:a4:75:e0:ed:
8a:9d:5b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:05:02 2025 by rpki-client