Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: 1Sg0fs8NMU8Aih7nsxtLty2Kz5yRM1Ou4w+FdOYbquA=
Subject key identifier: 3B:83:09:61:18:B1:B1:B7:9C:94:FA:C8:8D:2E:8E:73:1C:59:50:3C
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 019655A5E095E429FF7BB665CE627F4C0BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 11AC
Signing time: Mon 21 Apr 2025 00:00:56 +0000
Manifest this update: Mon 21 Apr 2025 00:00:56 +0000
Manifest next update: Tue 22 Apr 2025 00:00:56 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: /vth+OqH1nKVpxx9fH5ultBOA1uPbbSCISna5fmz124=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:e0:95:e4:29:ff:7b:b6:65:ce:62:7f:4c:0b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Apr 21 00:00:56 2025 GMT
Not After : Apr 22 00:00:56 2025 GMT
Subject: CN=3b83096118b1b1b79c94fac88d2e8e731c59503c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:cc:6c:04:74:20:bd:b4:46:b2:67:19:84:
fb:8c:e6:23:55:99:b9:65:b9:bd:a5:91:b2:74:84:
ca:30:fe:cf:e0:8d:99:c0:d0:85:be:6e:87:52:8c:
84:59:95:76:55:2e:74:a5:0c:c1:4d:c0:38:5c:32:
e2:c9:72:59:fd:5b:c6:ae:ea:1e:3a:d4:ad:b3:2f:
d9:03:ac:91:c5:06:70:ec:04:65:6c:4d:41:c0:dc:
43:22:b0:c9:ce:7b:8d:59:0c:58:d7:68:da:b5:6e:
9c:56:b0:d6:a1:3c:9c:77:95:42:81:ff:98:a4:60:
cd:09:1c:d1:0a:74:69:a5:21:6d:21:f9:f9:ab:34:
96:ce:9f:70:bb:29:13:05:0e:fe:8e:21:be:2d:4e:
28:ec:59:8a:88:cc:d9:5b:9a:a7:00:ac:65:df:a7:
53:c6:f3:a9:b5:b3:b0:8c:b2:b6:57:ae:d4:fb:1b:
63:fd:5d:5c:b4:02:7b:d2:5c:aa:06:7e:b6:5e:ea:
5f:59:7e:b1:43:b8:6b:f1:e7:76:04:cf:49:b9:81:
ad:dd:a1:ed:f2:6b:c5:32:a6:c9:82:d9:0d:22:0f:
0e:83:f7:a6:d3:1e:6c:82:b0:61:84:f3:57:2c:fc:
3e:a3:5c:80:a1:a0:cf:a2:70:74:a8:cf:87:c9:ef:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:83:09:61:18:B1:B1:B7:9C:94:FA:C8:8D:2E:8E:73:1C:59:50:3C
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d8:49:37:1f:ce:55:f7:99:71:7f:3e:7d:b1:df:3d:e9:2d:
9d:3f:15:b7:f4:33:ad:d3:97:04:e3:c3:4d:9d:e8:20:10:a9:
a9:3e:d3:9c:44:6a:99:bd:a2:41:cc:2a:a5:fa:82:8c:ec:04:
bb:7c:aa:bb:89:00:1d:ae:c1:97:6c:f3:74:68:a0:fe:7a:37:
49:b6:04:22:fa:8c:8a:6a:49:58:3b:dd:24:9b:50:80:0f:3d:
88:ac:f4:c0:df:e0:fe:b3:47:b2:2c:55:ef:23:cf:4a:42:1f:
d3:6c:bb:92:4d:68:ff:e4:bc:08:5c:8f:18:92:b9:99:2d:b2:
4c:ab:91:0c:b9:31:2f:b5:57:67:e8:e7:18:9f:11:a3:e1:ef:
d2:dd:37:59:ee:46:61:e4:90:21:3a:49:18:a3:89:dc:75:8a:
34:7f:fe:b0:de:9a:d3:af:e1:7a:ae:ba:1a:af:15:30:ca:84:
85:0e:88:37:98:33:90:d2:90:b5:af:e8:e0:b8:3a:2c:c5:0c:
c9:46:3d:aa:73:57:fd:50:8e:e4:82:f0:ef:4a:62:ab:10:fd:
c7:c5:02:c4:54:94:e2:6a:ab:e3:ac:eb:16:5d:97:54:05:a8:
6e:bf:8c:32:e8:bd:90:e1:ed:42:2a:ce:df:1d:1e:72:61:f0:
d6:1a:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:34:41 2025 by rpki-client