Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
File: DghyLSZ7Tv9ER6STM6AlqFICCpg.mft (raw, json)
Hash identifier: 1AB+zs3qzWCf10Zk7cvE4tlBHY2WCfBZZ3An05U3taQ=
Subject key identifier: 94:F5:73:0C:C7:2B:B3:A0:0E:1E:86:EE:84:9A:1F:00:11:25:0E:A6
Authority key identifier: 0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98
Certificate issuer: /CN=0e08722d267b4eff4447a49333a025a852020a98
Certificate serial: 019653B773E7D2EEA5F286B0FACBE44915DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
Manifest number: 07EE
Signing time: Sun 20 Apr 2025 15:00:53 +0000
Manifest this update: Sun 20 Apr 2025 15:00:53 +0000
Manifest next update: Mon 21 Apr 2025 15:00:53 +0000
Files and hashes: 1: DghyLSZ7Tv9ER6STM6AlqFICCpg.crl (hash: 1jZ/kixUjkMMIqBkkcxkVCU2sE3Jdc5gxzAeOs4BI84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:73:e7:d2:ee:a5:f2:86:b0:fa:cb:e4:49:15:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e08722d267b4eff4447a49333a025a852020a98
Validity
Not Before: Apr 20 15:00:53 2025 GMT
Not After : Apr 21 15:00:53 2025 GMT
Subject: CN=94f5730cc72bb3a00e1e86ee849a1f0011250ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:89:73:ea:d2:7b:da:11:f8:c0:e7:5e:38:
1b:44:3c:c5:36:77:a8:9a:cb:c0:bd:76:05:37:ef:
63:db:ac:26:99:12:c8:7c:91:aa:e7:62:ba:00:4c:
05:43:dd:e4:6b:45:66:95:e1:ec:e3:4f:32:4f:e6:
65:9a:8a:46:c1:45:a6:30:e9:cc:52:2a:73:ee:50:
a3:18:fe:3a:ef:49:45:7a:bc:b4:93:8e:ab:b9:51:
46:2f:cf:da:41:c7:ce:c3:84:8b:9f:25:ec:85:1e:
41:34:5a:5c:a6:57:3e:0b:c5:ed:30:8c:ec:0b:d5:
21:8f:0c:3e:f9:0b:85:66:98:bb:ec:aa:a8:c7:d2:
0c:5d:3e:0a:9a:91:6c:18:66:d2:e3:e0:25:23:23:
3b:39:67:28:3b:54:6b:f1:9c:ab:e9:88:04:fa:52:
56:47:48:62:af:18:d4:56:88:f7:66:f8:7f:f1:ce:
c5:13:8c:de:27:d7:61:6e:d7:47:6b:55:5c:b5:91:
73:9a:bd:46:ed:f1:5b:64:eb:fc:58:d9:0f:cd:b1:
c0:0c:66:0f:1e:31:fd:23:ce:02:7c:ee:83:b9:77:
16:28:89:9e:c0:2b:c0:f5:57:27:eb:36:f3:2b:5d:
03:df:15:09:70:42:cd:ef:cd:a5:0f:fe:4b:15:3c:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F5:73:0C:C7:2B:B3:A0:0E:1E:86:EE:84:9A:1F:00:11:25:0E:A6
X509v3 Authority Key Identifier:
keyid:0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e0:5c:42:39:0f:7f:74:da:97:d4:a0:f3:eb:a1:1b:d7:43:
ab:4d:e3:f3:5b:5d:ef:a9:4d:66:a7:d6:bb:5a:16:d7:c6:f8:
f4:9f:a9:1c:d7:45:bd:22:ca:9c:2f:b4:ff:6f:67:71:d5:b9:
fe:f2:b5:d7:7b:93:d2:b3:d5:86:05:09:c7:34:45:44:97:a7:
c3:76:8b:f4:7f:a9:91:15:32:6c:fe:df:ef:1a:54:28:20:e5:
3d:47:88:15:0b:a0:c7:99:c7:fd:27:25:20:fc:50:d2:a9:80:
a0:71:ac:d4:87:41:3b:73:51:c1:84:f6:69:6c:1e:fa:de:e3:
2c:8f:2a:ac:84:22:81:2a:96:69:c0:14:1c:ab:ec:43:00:68:
2e:e1:e8:fb:d5:ed:a0:69:df:34:de:ed:1f:41:49:49:55:d7:
67:93:92:39:b5:01:52:7d:53:69:d8:68:4e:18:f9:34:22:88:
c9:4d:cc:7d:f6:ce:54:0b:78:9b:75:3d:6f:1c:2f:e5:f0:38:
0a:91:ed:7f:24:54:88:1f:3c:f6:21:50:be:60:38:2b:f2:88:
d5:79:e5:f4:b1:95:be:76:0f:dc:a3:fa:ab:53:c1:57:7b:61:
47:f3:da:26:21:4d:bd:c7:e4:26:cc:ee:f1:11:cf:33:9e:98:
16:31:ae:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:25:53 2025 by rpki-client