Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
File: Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft (raw, json)
Hash identifier: 68ftxjYDFKwefvs+PHjUraafoN+X90HDQUoYhC1Jy98=
Subject key identifier: 49:44:81:F7:C3:A5:7F:36:D5:B8:34:94:39:06:87:CC:3E:73:88:61
Authority key identifier: 0E:CD:27:27:E7:4A:9C:6A:AE:88:F9:A0:11:0D:0C:94:9B:1E:97:35
Certificate issuer: /CN=0ecd2727e74a9c6aae88f9a0110d0c949b1e9735
Certificate serial: 01965EE0015C322A13AFAF77291E82E95906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
Manifest number: 0C6E
Signing time: Tue 22 Apr 2025 19:01:00 +0000
Manifest this update: Tue 22 Apr 2025 19:01:00 +0000
Manifest next update: Wed 23 Apr 2025 19:01:00 +0000
Files and hashes: 1: Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl (hash: bx+N4RrpSAdWAaiAMsMbdr4Iwkkl3qvBhIhxxvWg4Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:e0:01:5c:32:2a:13:af:af:77:29:1e:82:e9:59:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecd2727e74a9c6aae88f9a0110d0c949b1e9735
Validity
Not Before: Apr 22 19:01:00 2025 GMT
Not After : Apr 23 19:01:00 2025 GMT
Subject: CN=494481f7c3a57f36d5b83494390687cc3e738861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:bd:88:e8:cb:ac:d1:53:e2:33:d1:53:dc:
52:58:2a:02:3e:e5:c0:97:b4:b8:0d:53:08:5e:31:
50:4e:be:83:17:16:f0:94:c3:5d:d1:e8:55:93:e3:
b9:c1:61:3b:b4:35:36:03:06:b3:b4:c0:4e:f6:5e:
07:32:4a:de:b2:69:d4:83:3d:ab:98:a5:6b:20:b6:
ec:c9:74:14:6d:93:29:e1:6e:97:d3:3c:59:ac:bb:
07:df:8a:25:1e:ff:78:85:86:1e:bd:91:49:f6:e1:
0e:54:4c:aa:47:82:e0:28:58:bb:e6:9d:22:a4:e4:
5b:49:8c:d4:d9:9a:ee:42:30:28:2b:ca:22:1d:73:
40:7e:d0:35:7c:bd:59:14:39:f1:ef:96:33:16:dc:
41:12:7b:17:a5:45:d3:f2:f8:ec:d8:76:9d:45:ad:
40:48:26:37:15:29:c3:b2:cc:40:ff:69:fd:83:3c:
3e:65:4b:6e:0c:6f:4f:d4:c2:e7:0f:e5:65:f3:ca:
4c:b5:0f:54:ee:46:11:32:97:83:ab:45:bb:62:89:
79:c3:c5:4f:4e:36:22:c0:da:9d:a0:1f:b5:d2:ba:
56:6a:f7:da:01:eb:77:89:37:f0:76:21:cc:6f:d1:
e6:b3:27:d9:ce:02:83:31:f3:f6:77:a8:5c:d3:dd:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:44:81:F7:C3:A5:7F:36:D5:B8:34:94:39:06:87:CC:3E:73:88:61
X509v3 Authority Key Identifier:
keyid:0E:CD:27:27:E7:4A:9C:6A:AE:88:F9:A0:11:0D:0C:94:9B:1E:97:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8a:04:09:0e:e4:5f:d1:d1:c9:c0:73:81:86:30:3f:31:a2:
a3:0c:15:b2:70:2a:f4:c4:46:09:bb:d7:e9:5c:0e:7f:39:68:
df:a0:fe:d1:ac:11:12:e2:67:be:7d:0e:2e:b3:8e:8c:1d:ae:
9f:5d:41:57:7c:e2:05:7f:df:60:b7:b7:df:0d:fc:95:9b:8a:
b9:48:63:e7:76:a2:f7:b3:c7:db:c0:88:d8:09:66:88:c2:2d:
9f:a1:17:60:c9:4a:da:8c:2d:18:ce:49:ef:16:2c:d2:e4:bf:
a0:e6:79:c8:13:19:ad:7a:35:3e:44:24:67:f4:cd:28:04:d0:
86:8c:d2:21:3f:c7:b3:72:51:29:e2:74:2f:7d:ff:5e:7d:f3:
8d:4a:2b:c0:28:1b:ac:98:82:be:93:e4:5b:2a:37:01:4d:30:
88:01:52:84:d2:4b:54:e4:89:14:f7:43:b1:5c:31:49:7e:4e:
70:75:01:97:5c:8b:5e:13:ed:18:db:c2:5e:12:cc:26:a8:f0:
4c:35:10:4f:43:4a:1b:7a:d3:ca:91:13:fe:07:04:a8:7e:7e:
c2:40:fd:03:29:7a:cf:fa:35:2c:6f:65:9c:bf:80:3d:90:4b:
c4:67:d1:0b:5d:0f:bb:a0:36:4d:d6:a9:e4:1f:1e:bd:3a:ac:
4b:8b:27:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:29:12 2025 by rpki-client