Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.mft
File: DU7kd6rb1vbH8sonqPohowxrNXw.mft (raw, json)
Hash identifier: bsB2w9NnKt750tt5PYHbDkA47eBSuz0FJ/KfJDVwH/w=
Subject key identifier: 75:E4:72:FD:7F:26:0A:0B:20:46:C6:B0:C8:6C:D2:D8:F7:29:05:88
Authority key identifier: 0D:4E:E4:77:AA:DB:D6:F6:C7:F2:CA:27:A8:FA:21:A3:0C:6B:35:7C
Certificate issuer: /CN=0d4ee477aadbd6f6c7f2ca27a8fa21a30c6b357c
Certificate serial: 01965537EFD74B5D0F16BA4AD178540CCDBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7kd6rb1vbH8sonqPohowxrNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.mft
Manifest number: 108D
Signing time: Sun 20 Apr 2025 22:00:51 +0000
Manifest this update: Sun 20 Apr 2025 22:00:51 +0000
Manifest next update: Mon 21 Apr 2025 22:00:51 +0000
Files and hashes: 1: DU7kd6rb1vbH8sonqPohowxrNXw.crl (hash: 5I8LHeIcF2ufS51RJpZ+W5zmhAUFWRvUlZK3zhUesE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7kd6rb1vbH8sonqPohowxrNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:ef:d7:4b:5d:0f:16:ba:4a:d1:78:54:0c:cd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee477aadbd6f6c7f2ca27a8fa21a30c6b357c
Validity
Not Before: Apr 20 22:00:51 2025 GMT
Not After : Apr 21 22:00:51 2025 GMT
Subject: CN=75e472fd7f260a0b2046c6b0c86cd2d8f7290588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:42:b7:e5:90:e7:84:43:86:1f:fc:87:ec:
d1:0f:5b:65:f5:13:90:1f:14:76:7d:06:36:1c:d1:
7e:18:37:ac:88:2e:fe:a2:e8:03:88:59:6a:a1:b1:
c4:1e:39:43:f7:74:93:7a:1e:58:fc:2d:64:a3:d1:
f7:eb:e5:89:6c:85:55:b3:41:fb:d3:5f:24:bf:09:
bb:7e:ad:d6:54:6d:87:61:89:d3:b4:23:b3:2d:c9:
6c:c8:f4:80:01:c4:b1:1c:51:51:7d:59:8b:46:1f:
ea:97:91:f2:b8:48:16:6f:0b:e1:8a:1d:f6:b4:9c:
62:cb:9e:bd:ff:61:c0:d3:b3:50:db:5c:39:23:b9:
48:eb:ec:78:36:92:1c:aa:07:42:a4:b6:0f:c5:b4:
59:95:e7:ad:fa:a9:86:4d:d7:1a:79:e0:71:fe:77:
8a:c2:ac:85:23:83:b0:89:ba:24:96:e4:ad:2c:b8:
fa:3f:27:a1:70:46:c8:31:89:ff:6a:58:00:74:f8:
16:b0:91:68:36:c4:bd:78:98:5d:f8:c5:86:90:7b:
39:5c:5d:2e:17:69:c8:bb:e9:38:d3:a9:fc:c9:d7:
20:d3:8b:3a:40:f9:ce:34:b1:41:8d:a1:0c:df:d5:
a5:cf:51:f7:2b:07:89:8d:ca:76:0e:ca:fa:ba:bf:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E4:72:FD:7F:26:0A:0B:20:46:C6:B0:C8:6C:D2:D8:F7:29:05:88
X509v3 Authority Key Identifier:
keyid:0D:4E:E4:77:AA:DB:D6:F6:C7:F2:CA:27:A8:FA:21:A3:0C:6B:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7kd6rb1vbH8sonqPohowxrNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a2:c1:02:d4:9e:62:28:f1:31:c7:3c:78:9a:7b:ab:5a:2d:
63:00:e8:d6:01:9b:ab:45:ad:51:95:f5:ab:5e:44:a1:1b:84:
65:58:9d:8f:ee:ce:98:e5:0f:da:8b:67:7a:c2:b3:89:21:a0:
26:b2:3f:82:cb:49:83:5e:10:3f:2e:cc:ff:97:b7:7e:ee:8d:
25:f8:26:8f:4f:d2:50:49:55:20:21:eb:0a:8b:86:7e:3c:0e:
b6:ab:c3:0b:14:1c:d9:d7:2a:60:ab:0b:a2:88:80:6f:15:d1:
ab:66:ce:fa:2e:2f:e1:96:73:a1:ec:56:f9:a5:2c:86:b7:ef:
49:c3:23:fa:d0:ee:45:6b:9e:9e:f3:b9:21:f3:d4:9b:42:0a:
22:00:f9:25:97:c9:a9:13:4f:dc:c9:08:d9:e4:d3:a0:86:83:
36:00:25:b9:09:5d:6c:52:fb:6e:09:d3:c8:56:9f:12:6f:8e:
f0:38:3b:2f:75:1b:c2:dc:4e:9f:0c:1b:cd:5f:97:7b:51:a4:
a4:e3:34:56:2f:d6:5c:af:d6:dd:49:12:3a:c4:62:c6:11:20:
32:b1:4c:69:3a:6f:75:15:97:be:11:e3:00:d6:a8:e4:b4:37:
c6:85:67:6e:ad:56:d8:9b:2b:24:53:73:30:a6:58:2e:40:a0:
5d:aa:1a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:27:54 2025 by rpki-client