Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
File: dXFLWBraGW41UcCM52JDvgWLROs.mft (raw, json)
Hash identifier: 8q2Ekl51Z67f9W4QHeOWrwvGk2UDfEivKrQ3ASzzd98=
Subject key identifier: E5:24:32:C5:5F:5F:C7:C6:9C:D1:A4:F7:53:E1:42:D0:1F:12:48:4E
Authority key identifier: 75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB
Certificate issuer: /CN=75714b581ada196e3551c08ce76243be058b44eb
Certificate serial: 01965F8411FA9F80B0B5532D92963F2014AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 22:00:12 +0000
Manifest this update: Tue 22 Apr 2025 22:00:12 +0000
Manifest next update: Wed 23 Apr 2025 22:00:12 +0000
Files and hashes: 1: dXFLWBraGW41UcCM52JDvgWLROs.crl (hash: +LvUMw4uLFQp6WxZvmYZ9NpT1a6ARUvcbNxZoRODX4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:84:11:fa:9f:80:b0:b5:53:2d:92:96:3f:20:14:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75714b581ada196e3551c08ce76243be058b44eb
Validity
Not Before: Apr 22 22:00:12 2025 GMT
Not After : Apr 23 22:00:12 2025 GMT
Subject: CN=e52432c55f5fc7c69cd1a4f753e142d01f12484e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:0d:47:63:ab:18:7d:27:e0:37:d5:d8:1b:
f3:fe:91:b1:20:b1:01:8e:d5:99:fd:87:ba:52:ec:
e6:6f:85:d3:71:3a:8e:ca:15:84:ee:91:ab:19:3d:
76:ec:34:56:79:cd:69:1f:92:a8:23:58:e4:35:0f:
a9:11:5c:2e:eb:38:f5:b8:00:2d:c7:50:c5:0b:cd:
43:06:9e:95:38:10:9e:cd:60:36:09:ac:e0:b0:ab:
44:a9:f0:84:78:8d:df:55:81:70:8f:dd:b5:f7:8f:
c6:eb:44:d2:23:51:bf:d2:d4:a8:f6:2a:a1:1a:77:
f6:93:71:c8:cc:63:66:51:d1:f8:b8:75:72:f2:23:
96:d7:8d:32:d3:ae:3c:97:cc:73:bc:23:bb:8d:7d:
6f:ca:29:fd:e1:a3:dc:41:cc:c8:c4:07:dd:c1:ec:
b7:ff:d3:03:ea:b6:3d:6a:54:e6:b0:e2:82:f8:64:
b6:d7:4b:bd:1e:8c:0a:f8:63:7b:e8:5d:2f:8a:31:
25:6c:dc:e3:1b:99:c5:55:09:6c:29:80:18:26:36:
95:b8:81:df:7f:db:2a:ef:b4:10:44:3c:d0:f4:ad:
4b:32:a3:22:93:2c:c1:fb:28:a9:1a:7a:50:fd:48:
d5:6d:43:77:57:57:4d:4f:9e:d7:4a:c7:be:0d:b6:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:24:32:C5:5F:5F:C7:C6:9C:D1:A4:F7:53:E1:42:D0:1F:12:48:4E
X509v3 Authority Key Identifier:
keyid:75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:bd:49:d9:84:9d:ff:48:a2:1b:1b:fa:1e:a7:e0:fc:6b:16:
7a:1d:60:4b:05:36:29:47:1e:a1:6d:f0:2a:72:9a:a5:ff:dc:
2f:02:41:d1:a5:98:ed:61:dd:b5:68:64:eb:7c:40:db:b9:15:
73:29:a4:c1:20:fd:29:42:3a:f9:e5:05:9d:a9:2f:a7:ec:60:
ed:c2:ff:ac:e2:71:53:63:b5:3c:d8:11:fb:73:33:03:35:09:
4b:02:85:9b:0b:9d:71:c0:36:d3:39:39:5b:88:40:7d:e3:89:
9d:ce:c0:d1:bf:45:c9:cd:47:4b:02:71:16:f1:fd:71:72:ef:
9b:66:f4:89:a7:e6:f2:6a:9c:f2:d5:89:8f:d5:1d:c0:65:47:
51:f1:2c:1e:2d:2c:d9:a8:f0:cb:43:f9:2a:43:8f:7b:6e:e8:
e3:5f:c6:13:f7:95:a0:a8:dc:d2:52:c0:94:3d:5c:a3:d4:84:
c3:9f:86:f1:a3:80:bc:02:52:a7:55:40:b4:d0:d0:29:74:4d:
d0:bd:7f:45:50:46:bf:27:74:e3:10:5c:c5:37:33:ec:aa:22:
92:83:c7:a1:ef:53:ba:c5:99:6e:72:b5:6d:f1:bb:69:ae:fa:
ff:51:e2:e4:b5:e5:69:b2:79:a7:f5:7b:de:15:4f:b3:5e:f7:
4a:56:76:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:21:07 2025 by rpki-client