Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
File: dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json)
Hash identifier: D6HrJvEvCuHkrsrSS3UigWzXNXK0IS3B9oQ+Da+rG7A=
Subject key identifier: F0:CB:D5:D0:D1:2B:F9:45:20:DB:26:C9:95:AC:8A:9B:3A:C9:E0:E0
Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
Certificate issuer: /CN=75caa7991288876680d7ac90a8569f3fc20387fa
Certificate serial: 019653B7DC91D9A89AAEA5CA0E42F0CA99F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 15:01:20 +0000
Manifest this update: Sun 20 Apr 2025 15:01:20 +0000
Manifest next update: Mon 21 Apr 2025 15:01:20 +0000
Files and hashes: 1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: /6d/9wFtrxQpwJTBguC4EchBC9O1h/4xDn8WW1GlKRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:dc:91:d9:a8:9a:ae:a5:ca:0e:42:f0:ca:99:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa
Validity
Not Before: Apr 20 15:01:20 2025 GMT
Not After : Apr 21 15:01:20 2025 GMT
Subject: CN=f0cbd5d0d12bf94520db26c995ac8a9b3ac9e0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:a8:64:8f:98:1c:9b:43:47:3e:f6:a0:d8:
3e:88:46:41:05:9b:87:0c:23:f9:c5:c1:e9:d3:8f:
f6:19:5f:10:d1:7c:74:15:ce:1a:46:f3:d2:29:97:
f9:4b:ec:20:93:9f:51:c3:8a:75:0e:ef:c8:8e:43:
ed:d6:f5:83:f9:3c:a8:fb:45:e8:59:fe:9b:45:43:
a8:34:9d:1a:29:1a:f0:d0:6a:d9:67:cb:4a:2b:6c:
af:5f:af:d2:05:39:b6:c7:dd:73:a1:03:6b:e3:f7:
1e:3c:36:42:60:7f:43:30:6a:9b:49:b7:ca:84:b9:
e1:8e:68:1e:49:fc:bc:36:c2:9c:df:99:a0:40:5e:
55:df:aa:9b:3a:ee:cb:f3:52:28:00:4d:d7:12:78:
08:dc:f9:f1:41:ed:ad:1a:14:e8:65:f6:09:f8:ca:
62:94:4b:03:cf:e7:58:f6:31:07:fb:08:11:f2:15:
4f:cf:06:41:36:da:bd:a1:fb:a0:97:3f:a5:06:ae:
dd:1b:a9:da:b0:23:ea:4a:29:c9:7d:2e:10:5a:48:
51:6c:1a:d3:38:53:86:b9:de:f3:63:db:d4:1a:f2:
5a:02:68:07:79:18:37:de:fe:59:92:3f:6b:b0:48:
91:1e:00:dd:c5:f1:21:80:f7:e8:03:61:c0:24:69:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CB:D5:D0:D1:2B:F9:45:20:DB:26:C9:95:AC:8A:9B:3A:C9:E0:E0
X509v3 Authority Key Identifier:
keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:51:df:7d:57:fe:4a:75:04:b5:6a:bb:6e:62:e2:bf:29:f6:
88:a3:ba:c6:07:78:c8:77:31:24:ae:28:00:61:3c:f7:0a:c1:
42:d4:82:0d:b1:64:2a:98:a3:d3:6c:ca:0d:7b:52:74:67:ae:
8c:94:35:a4:c7:4a:40:ea:50:90:50:22:ce:ae:f9:7c:dd:db:
d6:19:ed:27:88:6d:14:a5:46:96:05:e7:96:5d:e5:36:cd:bf:
56:99:49:3b:fe:f9:5a:53:fc:00:a1:d3:39:dd:02:73:b0:b6:
c5:4a:c9:df:34:a3:70:06:c7:ae:3a:87:d0:3c:b0:4f:3a:e0:
d0:40:ee:71:28:79:8e:db:ce:68:a4:ed:97:a1:50:ea:cb:48:
3d:b4:9d:99:d1:5c:f0:b3:b7:ed:04:d1:f5:94:51:ba:fc:b3:
66:b7:dc:85:77:b4:00:07:cb:3e:3d:8a:6a:15:2e:19:ce:7c:
50:73:24:82:96:a8:a3:db:73:47:1a:7d:6f:5c:ae:77:7a:83:
8c:d9:6e:57:10:8d:24:05:ac:5d:f8:9f:3f:a9:6c:13:fa:1d:
bb:06:ac:49:5d:c1:72:3d:3c:50:b1:4b:f5:a2:5c:2c:ab:7c:
a7:72:31:6f:80:c0:60:23:45:24:07:10:ab:3f:a9:4e:7c:30:
93:23:78:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:15 2025 by rpki-client