Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier: n7Akz0/E0vRKVNsgZ1yWYQ3g3qRRbvcM4cEJtrmC9h4=
Subject key identifier: 55:8F:D6:63:24:17:34:21:BA:EF:FA:A7:00:98:7C:75:49:8B:58:BF
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 019655006DCC3C638FD012DAC8FF64872314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number: 0C2F
Signing time: Sun 20 Apr 2025 21:00:13 +0000
Manifest this update: Sun 20 Apr 2025 21:00:13 +0000
Manifest next update: Mon 21 Apr 2025 21:00:13 +0000
Files and hashes: 1: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: IlOHYRY2yKsRBekC3dI/CR52H/Plup+UafNQ7/5RcAc=)
2: MNtx-M1QVv5z_3qcN6vxhaOotfc.roa (hash: px53xNqq/MugnV+199J7ZDHhE5FdBcLFsMKgKSEziic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:6d:cc:3c:63:8f:d0:12:da:c8:ff:64:87:23:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: Apr 20 21:00:13 2025 GMT
Not After : Apr 21 21:00:13 2025 GMT
Subject: CN=558fd66324173421baeffaa700987c75498b58bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b1:75:12:01:f7:ec:93:0b:be:6a:c1:cc:d9:
18:fd:67:e7:76:07:e5:e5:0e:2b:0c:f4:5b:31:5c:
eb:a9:45:aa:85:7f:e5:32:99:10:d9:85:54:6a:70:
65:64:c4:48:42:e2:8a:fb:bb:b0:a5:79:9c:75:af:
f0:69:af:3c:c5:54:36:27:f3:7a:52:b6:2b:cc:00:
5d:3f:ee:d8:c6:08:71:ea:98:8d:aa:52:f0:e0:e3:
4c:83:29:55:93:2c:f4:7e:a5:c5:3e:0c:47:28:25:
83:63:04:80:b5:08:73:a6:97:e6:84:49:b6:07:21:
df:d9:4f:05:0a:11:2e:a9:e8:bc:f8:76:70:cd:ec:
20:42:fa:d5:8b:0b:b6:55:17:af:1a:d0:3a:15:a1:
4c:8f:22:75:f1:5b:62:02:4a:80:ea:62:53:3c:7e:
d2:c7:d3:29:cf:e4:03:f7:c9:00:eb:24:da:34:5c:
87:b4:8f:76:29:d5:7d:d6:cc:0d:c8:38:72:44:01:
05:ba:c7:07:af:5b:6b:19:53:1e:b2:e9:e3:10:bb:
40:b6:b1:99:a2:d3:aa:28:fc:cf:8a:5c:45:d7:27:
ca:39:74:30:ea:26:e1:61:04:35:dd:51:62:90:33:
d4:02:67:43:b7:82:bc:76:23:b0:89:16:3c:36:c5:
ae:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8F:D6:63:24:17:34:21:BA:EF:FA:A7:00:98:7C:75:49:8B:58:BF
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c6:a6:a5:61:26:67:6b:8c:d3:24:03:0c:f2:b8:c5:4c:bc:
ca:8c:ad:5a:0f:db:a0:73:c0:63:93:00:1b:0a:78:4e:fb:ca:
7f:15:d7:af:b2:1d:6f:4b:ae:da:60:9f:47:3f:e7:34:55:66:
0b:83:75:57:b4:82:d6:6a:8a:64:c6:0c:af:92:bd:3a:75:91:
77:47:e3:95:89:90:49:24:e6:17:47:eb:5e:93:62:34:eb:f4:
7b:5d:72:f7:92:56:e3:2b:fb:fa:98:25:b8:43:80:58:7a:e1:
06:be:78:83:98:c3:db:f9:47:41:15:e9:5e:44:4b:b9:fb:a7:
91:66:31:d0:19:d9:a1:e7:cc:47:c4:69:30:62:e9:35:3b:f8:
ec:3d:b4:94:17:98:3d:2b:9e:b5:74:58:b4:28:af:b0:7f:4c:
6b:1d:63:ff:93:8d:88:5b:8a:4d:8d:86:de:18:dd:45:87:57:
2a:88:a7:1d:3f:48:66:05:54:cb:6e:15:17:f7:99:03:46:f3:
d0:e5:ec:66:db:46:98:2f:5b:6a:5a:14:31:21:17:b8:ef:8a:
4a:a3:61:68:7a:a5:7e:57:0b:0b:2b:32:4a:0b:71:8c:e6:c6:
01:5c:c7:97:69:ed:e1:d0:db:5e:f2:43:0f:d6:f5:19:0d:62:
87:62:05:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:46:38 2025 by rpki-client