Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
File: danDqBE5lKqnp7EhGTd3kbIB8Gw.mft (raw, json)
Hash identifier: PndFrEusDhYK48hggNBfqXYbozSq00yEeHv3tBRwBtI=
Subject key identifier: 3F:E4:AF:08:AA:7D:B8:1F:5E:D0:2F:AB:FD:A9:90:30:CF:67:60:A1
Authority key identifier: 75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C
Certificate issuer: /CN=75a9c3a8113994aaa7a7b12119377791b201f06c
Certificate serial: 01965ACBC97CA5677527EF3EFBBC31441CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
Manifest number: 01D2
Signing time: Tue 22 Apr 2025 00:00:26 +0000
Manifest this update: Tue 22 Apr 2025 00:00:26 +0000
Manifest next update: Wed 23 Apr 2025 00:00:26 +0000
Files and hashes: 1: danDqBE5lKqnp7EhGTd3kbIB8Gw.crl (hash: XgHLyBlOmNxXDWmksnf1FihDRoTSNqAWKYKjYY7RHws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:cb:c9:7c:a5:67:75:27:ef:3e:fb:bc:31:44:1c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a9c3a8113994aaa7a7b12119377791b201f06c
Validity
Not Before: Apr 22 00:00:26 2025 GMT
Not After : Apr 23 00:00:26 2025 GMT
Subject: CN=3fe4af08aa7db81f5ed02fabfda99030cf6760a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5a:52:9a:1d:d6:08:99:7b:d5:66:17:8c:7b:
8f:0d:ee:c0:ef:32:1c:ba:de:98:1b:2e:8b:1d:2b:
15:9d:3d:38:11:7b:a1:24:4e:0f:64:a1:89:36:cd:
7f:5d:e9:c8:42:15:45:5e:4f:a2:91:b8:22:cf:1c:
a1:e6:ad:f3:dd:b3:6f:6e:5f:67:3c:72:21:4d:18:
0f:6e:85:e3:ac:da:cd:35:5c:34:4e:64:ed:ea:83:
bd:31:d4:3d:57:17:c6:1d:04:12:a8:be:25:4b:a0:
4f:0b:ee:b5:7f:fd:29:4e:6e:3a:54:fc:91:eb:66:
5d:8e:f6:ee:a5:c8:1f:68:57:ec:85:80:ac:bd:4f:
40:31:b5:46:c1:9f:6c:ea:f9:3d:ac:23:59:dc:81:
bb:f7:dd:11:b9:bf:68:05:a4:fc:f3:8b:54:71:7d:
70:15:f3:d4:68:1c:82:14:c2:5d:d3:0f:5a:46:24:
dc:28:40:3a:dd:e6:3f:f5:c2:5f:4d:59:3c:22:8c:
12:39:37:16:aa:eb:40:47:0a:12:51:68:57:ea:8b:
81:31:e2:8e:ec:0c:07:8d:0b:c6:0b:6c:29:a3:5b:
cd:83:50:1a:81:b2:41:8d:04:11:43:44:19:cf:96:
f5:7f:3b:e4:18:7c:15:aa:fa:9a:a3:fe:18:74:50:
79:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E4:AF:08:AA:7D:B8:1F:5E:D0:2F:AB:FD:A9:90:30:CF:67:60:A1
X509v3 Authority Key Identifier:
keyid:75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:82:4e:79:cf:76:bd:4b:1d:ec:4e:66:0d:6f:1e:a6:bf:92:
4a:5f:fa:b1:ef:7f:6a:0a:90:38:08:bb:a7:88:2d:37:88:d6:
63:8a:e3:42:4f:81:94:30:0a:46:b0:b0:a3:87:14:26:88:c9:
60:05:b7:d1:2a:d9:87:35:9e:ee:d5:ae:5c:21:a0:86:6d:19:
2f:81:f8:3b:85:6c:e5:1a:27:83:35:6f:1a:cb:ba:16:9c:0a:
af:25:10:c5:7a:53:1f:e0:e2:7e:6d:0e:2b:e5:e1:45:6d:ad:
17:4e:d7:d5:fd:ef:87:f8:d5:c1:2b:9f:bd:3b:60:15:82:3a:
f4:ee:6a:1e:cb:56:5f:66:c9:bf:b1:46:b5:eb:dd:06:b0:aa:
eb:2b:ab:a8:25:fa:2c:ac:91:cc:cc:2f:76:f1:39:f6:9d:ec:
f9:20:f7:21:30:28:eb:c9:41:e3:d4:62:14:d0:1a:26:5f:45:
1c:26:71:44:23:70:96:47:ac:da:45:6e:7a:df:9c:79:34:d5:
42:9d:06:2d:a6:72:e2:bc:03:97:67:dc:23:00:49:f0:f5:9f:
6f:55:bf:07:a7:d2:37:1b:b5:0b:f2:b2:3e:93:35:c2:d8:96:
86:5c:e7:2a:f4:4d:bb:25:3c:91:80:ac:b8:82:14:4b:68:c0:
b4:ca:fe:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:48 2025 by rpki-client