Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft
File: dkVpLUvTDPnpidVbrI0I53FEk6s.mft (raw, json)
Hash identifier: SIhcFMCLVcbMGZYu12dgyvTSMfP+vjmJF3IZAa1hatk=
Subject key identifier: 91:9A:3E:B3:3C:A1:79:78:12:A5:BA:BD:B0:8C:9A:17:97:23:CE:58
Authority key identifier: 76:45:69:2D:4B:D3:0C:F9:E9:89:D5:5B:AC:8D:08:E7:71:44:93:AB
Certificate issuer: /CN=7645692d4bd30cf9e989d55bac8d08e7714493ab
Certificate serial: 019657943D20F30AA537720AEB7ADE4F68D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 09:00:54 +0000
Manifest this update: Mon 21 Apr 2025 09:00:54 +0000
Manifest next update: Tue 22 Apr 2025 09:00:54 +0000
Files and hashes: 1: dkVpLUvTDPnpidVbrI0I53FEk6s.crl (hash: 0FtiN6kwRcEvJbTN2EPSMLpkpqoIDzc6M1F6OXSwE4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:3d:20:f3:0a:a5:37:72:0a:eb:7a:de:4f:68:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7645692d4bd30cf9e989d55bac8d08e7714493ab
Validity
Not Before: Apr 21 09:00:54 2025 GMT
Not After : Apr 22 09:00:54 2025 GMT
Subject: CN=919a3eb33ca1797812a5babdb08c9a179723ce58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:28:f8:3a:36:5c:d9:bc:d3:eb:7e:0e:b9:72:
e8:c2:c8:6b:ce:46:8d:0a:6b:1a:29:33:24:e3:3b:
1c:c0:97:43:00:47:c4:b2:c9:84:ce:70:28:1a:ef:
91:d3:9f:f0:18:7c:d6:08:69:ac:74:da:51:06:18:
96:d3:d1:cc:70:01:45:d0:40:93:86:fc:62:64:5d:
b4:c8:9f:8c:00:f1:ea:77:39:b1:07:d5:f3:b8:43:
44:6d:69:95:1e:c7:9a:22:fa:13:1d:eb:89:cb:e2:
b1:06:5c:11:68:55:e2:bb:37:8d:7a:40:6d:f7:d3:
9e:dc:a3:20:c2:de:b6:6f:f2:3f:87:11:8a:7d:9c:
ef:9e:27:7b:93:8b:6a:73:a7:69:78:22:90:51:45:
77:db:30:28:c5:ff:49:4d:d2:02:5a:75:ec:30:8d:
37:17:d5:9a:fc:72:80:bc:47:c6:fd:c0:3f:6d:bc:
e4:d5:f8:d8:c4:58:08:c8:9d:ee:a6:21:10:47:00:
e5:88:59:06:9a:97:2a:8a:79:9b:79:b3:47:50:9b:
00:82:64:73:fd:a1:05:25:94:94:64:1a:00:26:fe:
1e:ab:20:2a:84:e0:65:60:7e:50:8a:e2:f7:18:63:
aa:46:29:03:b1:ca:fd:c8:a1:86:64:87:d3:df:a9:
1d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9A:3E:B3:3C:A1:79:78:12:A5:BA:BD:B0:8C:9A:17:97:23:CE:58
X509v3 Authority Key Identifier:
keyid:76:45:69:2D:4B:D3:0C:F9:E9:89:D5:5B:AC:8D:08:E7:71:44:93:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:43:e9:d5:1c:4e:c4:62:f9:9e:2f:f5:54:9d:8f:c7:b4:b1:
03:f7:07:28:1a:d3:17:90:2f:0f:66:73:43:a7:46:8e:47:a8:
1b:e7:24:19:6e:ad:66:ee:91:a1:9b:7c:c4:33:b3:ac:94:2d:
ce:a7:93:f0:7d:4a:4e:a0:20:3d:3b:3c:d7:5e:7f:12:5e:64:
f4:76:ca:c7:58:18:96:48:51:dd:00:2f:40:e7:87:cd:42:fe:
0d:cb:9c:7a:92:cd:2f:db:82:d9:9f:5a:ce:2a:d4:0e:c9:aa:
2a:22:e9:8a:15:df:1c:2b:c2:3b:59:a4:92:13:bd:ad:f8:65:
0e:89:a2:8c:08:d3:ff:fe:53:57:ef:66:1e:a5:91:81:10:f9:
fb:fc:25:a1:17:5b:82:06:e0:d3:62:d8:8a:9e:86:4d:2b:f8:
e1:88:b1:62:67:5f:be:b0:b3:ac:29:67:eb:52:27:1a:2f:1b:
eb:bf:8c:13:18:a1:82:f4:18:84:1c:b5:70:ad:63:c8:7f:b8:
33:b7:78:83:bc:77:25:4a:37:60:da:d7:26:6c:d4:6c:02:8a:
f7:9a:db:c7:7e:90:f9:70:88:46:b4:25:74:29:2c:a6:43:f0:
a1:0c:95:c8:c2:94:8e:b2:c3:b6:86:c3:1b:b7:65:68:95:3e:
89:2a:03:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:17:09 2025 by rpki-client