Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
File: dPYRYnGtLREZYKLZYaqcFi-VgKY.mft (raw, json)
Hash identifier: 4HxY8DhQFZAM4yKctyDO9pm+da5hdmyBzIfGYDJ+1Uo=
Subject key identifier: 33:5C:0E:9C:4C:37:53:D3:39:F9:55:47:DB:F4:8D:78:A2:20:C5:20
Authority key identifier: 74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
Certificate issuer: /CN=74f6116271ad2d111960a2d961aa9c162f9580a6
Certificate serial: 019659155037F9BF9FB47E574EA0F987F1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
Manifest number: 0EF8
Signing time: Mon 21 Apr 2025 16:01:31 +0000
Manifest this update: Mon 21 Apr 2025 16:01:31 +0000
Manifest next update: Tue 22 Apr 2025 16:01:31 +0000
Files and hashes: 1: dPYRYnGtLREZYKLZYaqcFi-VgKY.crl (hash: wD8qO7PmMet+R+82uYMJtP5YQi0yaQfCSapDSaFonL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:50:37:f9:bf:9f:b4:7e:57:4e:a0:f9:87:f1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f6116271ad2d111960a2d961aa9c162f9580a6
Validity
Not Before: Apr 21 16:01:31 2025 GMT
Not After : Apr 22 16:01:31 2025 GMT
Subject: CN=335c0e9c4c3753d339f95547dbf48d78a220c520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:bb:62:2d:65:5b:67:6c:89:a7:8d:56:cb:
01:95:49:a8:b0:a6:70:c5:ff:4c:68:59:dc:53:30:
3f:e8:39:8a:c8:78:43:6d:f5:9c:ea:80:89:3f:da:
d0:0b:0c:5e:d7:d1:8d:c4:69:66:0a:d4:8c:8f:0d:
30:e8:63:30:17:53:26:7c:ec:b4:2a:6a:e4:17:4a:
da:51:e7:70:b4:90:ac:57:67:19:06:a1:4a:c1:dc:
fc:a9:19:f5:58:f0:9c:3b:a1:9b:be:22:6c:15:25:
cd:e6:a8:94:3c:59:25:aa:cd:67:0e:e3:20:d6:da:
32:6f:3f:f8:00:4b:ad:98:49:24:12:3c:a9:80:f0:
c5:2b:75:2b:bf:38:4d:56:40:5c:fe:df:1a:66:1e:
58:f0:cf:f0:ff:b9:34:49:bb:35:a5:9b:a4:c2:6c:
8b:46:05:45:e7:ae:dc:63:bc:7a:10:07:6b:13:61:
bb:b8:6d:9e:8c:fc:16:c0:8b:e9:37:5f:ab:52:0e:
52:74:05:80:2a:35:c9:ab:89:fa:8e:d8:21:88:68:
18:4e:30:9c:38:5c:3a:31:61:eb:5e:e7:62:c1:15:
1f:3c:30:ae:89:6e:38:63:52:d4:9e:11:59:32:71:
80:5f:08:cc:55:c4:64:cd:31:1f:a6:8f:ab:64:8f:
ae:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5C:0E:9C:4C:37:53:D3:39:F9:55:47:DB:F4:8D:78:A2:20:C5:20
X509v3 Authority Key Identifier:
keyid:74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:96:91:1e:6a:05:f5:68:dc:b5:a4:5e:b2:4d:78:0b:a4:b6:
4a:02:10:19:c4:16:8e:3b:ea:57:28:da:11:20:00:e6:72:e5:
64:2c:dd:4b:ba:d4:04:63:63:06:c2:a5:ed:69:c5:c2:96:16:
49:35:bc:87:fa:56:27:c8:8d:16:f6:f4:b0:b5:14:3f:bc:c2:
38:a6:3d:0b:b5:ed:30:a0:fe:d1:00:d6:85:cc:30:d9:74:cc:
a4:1b:aa:0e:13:08:2a:54:bf:42:9e:73:71:2c:d1:14:ba:b9:
3f:d6:fe:e1:ae:b9:5a:17:a7:03:c9:33:56:ed:88:5f:74:3a:
5b:44:39:3d:6c:b8:f3:b8:c2:35:3d:ec:19:4c:97:70:74:00:
c7:59:58:6c:44:96:30:78:64:36:7e:cb:81:12:7a:36:28:4c:
46:89:27:95:f6:bd:51:56:a8:87:74:de:2a:ac:b8:48:b7:a4:
68:2e:ac:02:dd:64:12:4b:7c:d3:77:a7:f5:99:e6:86:10:8e:
4e:c8:2f:a0:dd:9b:d3:e7:5c:e7:1e:ff:6d:0e:39:68:4e:9b:
9e:7c:3f:4e:95:ed:bb:e2:27:86:07:5f:36:8e:d6:6a:fd:25:
e6:a7:ff:6d:cd:ad:49:c6:20:2d:53:47:ac:47:5b:86:b1:71:
5d:a0:af:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:27 2025 by rpki-client