Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: Nw21RHRMxuRE3kP6GQaQEfbWhNGUvxPfSRIK2dc8zks=
Subject key identifier: 81:D8:5C:F1:1D:12:0E:92:59:A8:F5:64:40:AC:3C:48:F8:ED:C6:82
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 01965538364DB20AC8ADD76EFFD310D9E965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 22:01:09 +0000
Manifest this update: Sun 20 Apr 2025 22:01:09 +0000
Manifest next update: Mon 21 Apr 2025 22:01:09 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: Wxd+XAgjeBRXw0JFMC/4rl7vMpURG96EguFr0U1Mecs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:36:4d:b2:0a:c8:ad:d7:6e:ff:d3:10:d9:e9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Apr 20 22:01:09 2025 GMT
Not After : Apr 21 22:01:09 2025 GMT
Subject: CN=81d85cf11d120e9259a8f56440ac3c48f8edc682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:a4:bc:fc:31:39:f6:4b:86:27:e4:e3:7f:
28:ae:5b:df:c3:b5:f3:82:1e:9b:01:79:5c:ea:0a:
8b:d1:9b:af:df:bd:f2:05:05:2b:7c:fd:d1:c3:a5:
d3:5a:b1:c1:0d:14:35:d2:5d:86:ab:3a:f8:b2:9b:
03:04:5e:8d:54:3d:a1:68:11:03:2f:a9:0b:64:9e:
0a:e2:cf:7d:41:0b:4e:03:44:12:24:e2:3b:96:40:
b8:25:20:0a:c9:8a:84:ca:cd:d0:89:59:19:40:3e:
cc:29:c4:ff:c7:8a:8b:0f:8c:85:31:02:3a:27:6e:
34:34:b4:60:e8:b6:28:1f:fc:41:f0:45:38:2a:73:
f7:b1:4b:ce:1d:55:f7:96:8f:08:fc:1b:5f:0c:b8:
08:fe:e3:a0:3f:a0:6d:b6:4f:91:d6:82:69:95:19:
2d:da:80:b2:d6:e3:38:a2:00:4f:ec:ab:3f:e0:cc:
54:fd:71:48:b7:e1:90:90:0a:87:7d:30:42:cb:ec:
00:51:2f:b5:62:ca:85:27:f1:2d:a5:89:b0:58:34:
fe:e3:b7:f8:c3:fe:bd:31:50:ad:56:dd:99:30:72:
50:b5:b5:67:df:ae:95:a7:6a:07:6e:ca:92:7c:60:
52:09:a1:c3:7f:c4:c9:03:e8:d1:46:12:e3:ba:16:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D8:5C:F1:1D:12:0E:92:59:A8:F5:64:40:AC:3C:48:F8:ED:C6:82
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:76:e9:5d:57:10:03:64:35:9e:37:7b:15:27:81:4f:ba:dc:
88:23:21:86:e4:06:a2:27:c2:c4:3a:bd:df:63:38:d3:6a:ca:
7f:70:53:18:b4:e4:3d:40:70:38:ce:e6:60:98:2e:8f:1e:55:
11:20:6b:13:b6:31:a1:f3:4a:e1:fd:b8:e9:20:5a:91:36:c2:
53:9a:f4:89:40:89:09:54:05:bc:6f:c6:03:1d:56:68:3f:ce:
f6:cf:c4:f1:04:13:37:13:17:40:c7:dd:3d:23:8e:ea:41:63:
20:5f:9f:7b:28:44:13:9a:b7:e9:ce:c8:01:88:fe:6a:58:e7:
d4:d7:22:b5:89:b3:11:27:4e:d8:30:5b:2f:e5:df:cd:9e:c2:
5e:c0:e6:a3:75:2c:ba:f6:50:26:ea:64:ad:6d:bd:03:21:69:
14:bb:a5:dd:40:83:9f:10:d1:91:e5:17:c0:fb:0e:07:b9:15:
58:0d:98:90:6b:97:fb:42:24:b7:ad:f8:9e:c2:ae:53:76:05:
06:c4:c8:8f:ef:70:5c:55:dd:dd:56:c5:68:86:61:32:da:a9:
e0:a5:ef:b9:74:fb:cc:43:75:ee:cf:10:f3:04:07:63:6e:c6:
aa:5d:cf:da:a6:4c:b1:06:77:b4:6d:c6:72:c2:a1:bd:23:ca:
e2:ce:24:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:22:23 2025 by rpki-client