Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
File: DZxWoYyYei0aLnBEt-MbMhv3rBY.mft (raw, json)
Hash identifier: VWeQVLtQH31toIog0pd1lBjRlNbTh8No/c8LmFdIh0I=
Subject key identifier: 3C:9F:E5:93:6B:F5:40:AE:31:38:5B:A6:18:5E:6B:62:1E:EA:6F:9C
Authority key identifier: 0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
Certificate issuer: /CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Certificate serial: 0196591453A61DA07DE1CC2A079CAC235615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
Manifest number: 0691
Signing time: Mon 21 Apr 2025 16:00:26 +0000
Manifest this update: Mon 21 Apr 2025 16:00:26 +0000
Manifest next update: Tue 22 Apr 2025 16:00:26 +0000
Files and hashes: 1: DZxWoYyYei0aLnBEt-MbMhv3rBY.crl (hash: +a8N+j4WQYCh2k+I9aVXPxhDazDHxBhGigPR2xrEwJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:53:a6:1d:a0:7d:e1:cc:2a:07:9c:ac:23:56:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Validity
Not Before: Apr 21 16:00:26 2025 GMT
Not After : Apr 22 16:00:26 2025 GMT
Subject: CN=3c9fe5936bf540ae31385ba6185e6b621eea6f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:64:62:28:b8:80:df:69:ec:00:7d:a4:d1:
c9:a4:98:15:1e:c9:f3:64:d0:49:83:4e:c0:0c:c7:
ac:c5:bb:90:d9:fc:e1:fc:19:55:53:14:79:a3:8d:
bc:ff:5a:b8:c3:3b:50:b7:35:1e:f1:61:ef:0e:d2:
b2:27:52:f0:ba:8f:45:9d:17:bc:17:60:12:d6:d8:
94:a0:2d:35:b3:4d:a6:ab:3f:12:c1:23:06:f6:74:
2e:e1:ca:a7:50:84:68:6f:9d:12:47:9e:b2:0f:68:
23:a4:63:a4:af:f1:08:30:7f:10:49:62:f3:33:20:
32:e9:89:83:09:50:47:67:90:47:87:85:2d:04:30:
4b:22:b2:e2:28:9e:61:79:56:cf:e3:7a:04:cb:f2:
c5:0b:fc:81:7a:c3:cb:c3:20:d2:25:a6:5c:6b:15:
ae:f5:96:39:0e:6e:57:26:ed:93:06:56:8f:af:a8:
2d:81:70:7f:c7:25:64:fe:0f:9a:b7:f0:5e:55:be:
1c:45:01:ed:49:6a:d2:09:0c:6b:13:fe:6c:36:ea:
ce:68:10:64:03:da:74:9d:de:a2:74:03:8b:4e:cc:
2a:00:34:21:ec:63:cd:fc:61:2e:f7:e5:38:e4:db:
fd:54:af:15:7f:43:e0:4e:2a:12:d7:05:b0:8c:bd:
c4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9F:E5:93:6B:F5:40:AE:31:38:5B:A6:18:5E:6B:62:1E:EA:6F:9C
X509v3 Authority Key Identifier:
keyid:0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:93:07:16:74:89:e0:a9:26:f9:64:f3:7a:d7:cf:0f:c5:8f:
46:7a:42:df:49:98:da:40:be:7c:8b:2c:63:04:2f:15:e5:28:
34:f4:35:0f:e1:08:d4:2c:80:c9:ff:7a:ed:a3:0b:9b:81:15:
88:09:ee:ea:47:67:b7:cc:0c:11:39:48:e1:7a:c6:24:1b:de:
b1:ad:a5:48:56:6a:ef:81:33:57:d7:82:de:28:24:ba:19:4f:
a5:c3:f1:57:4e:c1:d2:4e:c7:46:df:a5:58:8b:86:87:d7:73:
7f:cc:d4:72:5f:54:03:cc:5b:f1:ae:2f:9b:9d:00:8a:85:41:
23:60:9e:64:14:a5:a8:2a:85:b9:8b:0b:61:93:97:5d:29:da:
5a:e6:87:66:e2:6d:54:4a:a6:91:a8:55:8d:14:2c:d0:94:4a:
4f:90:d1:82:14:70:be:e4:2d:fd:39:13:62:c6:8b:ea:cc:8f:
35:7c:19:a8:a5:15:d2:23:57:9e:93:b4:22:f1:64:17:a8:52:
ea:13:78:8e:ee:1a:28:9e:0b:e9:60:34:33:44:ba:d2:a2:6a:
41:dd:e4:a5:df:e9:9f:c2:74:bf:c5:2f:ef:d7:53:ac:54:97:
97:42:60:0d:5c:1f:5c:aa:02:ac:fb:d9:a4:dd:92:f7:b5:80:
4f:0f:e7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:05:15 2025 by rpki-client