Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
File: dWQXildKJgm7bv8cxSG0U9dch9w.mft (raw, json)
Hash identifier: +n2LHTdZ71kNZ6u4tIF3gYrQQZA1uJ8ciXcf10iCLZo=
Subject key identifier: 14:87:56:16:7F:0F:EB:42:1C:0B:93:C0:79:08:93:B4:4C:99:70:21
Authority key identifier: 75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
Certificate issuer: /CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Certificate serial: 0195790FF84B2C16300262FF758B314CCD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
Manifest number: 0BEC
Signing time: Sun 09 Mar 2025 04:00:44 +0000
Manifest this update: Sun 09 Mar 2025 04:00:44 +0000
Manifest next update: Mon 10 Mar 2025 04:00:44 +0000
Files and hashes: 1: dWQXildKJgm7bv8cxSG0U9dch9w.crl (hash: nnssVnggGdfpKMPOb1UUIhaStpgIdTURvdqm75wBXOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:0f:f8:4b:2c:16:30:02:62:ff:75:8b:31:4c:cd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Validity
Not Before: Mar 9 04:00:44 2025 GMT
Not After : Mar 10 04:00:44 2025 GMT
Subject: CN=148756167f0feb421c0b93c0790893b44c997021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:69:04:69:88:ed:63:ff:17:ab:af:65:58:
b1:83:d3:fd:28:06:9d:97:09:b3:0f:dc:78:d0:7c:
af:28:04:60:3c:8c:30:a1:d5:ec:d6:9c:3a:2f:47:
ec:8d:49:ea:e1:b4:87:6f:30:ff:65:b5:5f:ff:2d:
81:41:73:da:89:97:3d:04:fd:ee:2e:83:6e:2e:96:
ed:80:b0:05:0d:ab:b6:cd:6e:aa:1e:6f:0f:cb:e0:
62:03:f9:d1:a9:dc:fd:3c:a3:34:37:e5:eb:b6:d4:
fe:e3:63:08:8f:d5:4b:96:9c:43:3b:57:dd:b8:32:
8c:da:b1:29:e1:86:99:cc:bd:38:b9:ed:50:59:8e:
fa:0f:d0:76:24:65:f6:e5:39:a3:27:f1:63:8c:ae:
bd:54:c9:ed:1d:ae:a3:a7:7a:be:96:0f:22:09:33:
1d:f1:23:e0:71:32:57:aa:48:d2:1e:50:04:d0:5a:
c5:4d:37:99:9e:16:35:98:24:4c:5d:04:70:fc:0b:
01:f9:16:84:ab:e9:ff:f3:57:d0:21:48:fa:69:60:
44:66:d4:da:91:d5:a9:b2:ab:bf:8e:a1:3c:07:7b:
c6:a6:a2:cc:cd:bc:04:ce:b7:9b:65:8b:65:79:8d:
eb:a4:88:c8:b4:c1:e8:fa:47:5c:f3:8b:25:ed:bf:
94:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:87:56:16:7F:0F:EB:42:1C:0B:93:C0:79:08:93:B4:4C:99:70:21
X509v3 Authority Key Identifier:
keyid:75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:18:8b:fe:54:fb:d6:2a:89:d6:fd:3c:3f:17:50:83:0a:22:
82:f7:7d:fd:c5:6e:cc:ef:68:e5:20:f3:13:db:24:20:35:20:
72:04:65:a8:cc:cb:57:a7:6b:3a:40:75:88:e9:b3:c2:f6:d1:
7f:b2:44:04:45:d8:8b:c8:b3:fe:cb:25:af:29:0f:ee:de:ac:
64:66:85:b2:6a:a3:8a:c7:c2:07:13:7c:e2:a5:9d:f7:d6:85:
43:58:24:84:ab:af:92:0f:3c:3c:c7:51:82:4a:c8:da:38:2c:
ac:01:1a:1a:18:40:78:3b:3b:d3:9e:6d:98:f3:6d:e9:aa:6f:
f7:64:72:b9:84:ae:60:73:3e:ce:4f:b4:ec:db:bf:f7:15:eb:
e2:84:f3:dc:34:f3:e0:c1:54:e9:a3:c2:20:43:24:2f:2d:3e:
08:86:91:f6:ee:8b:51:86:9a:d4:cd:4e:1f:1a:e3:e9:31:c2:
8c:f5:74:b8:26:df:be:04:28:e9:0f:51:9f:77:bd:40:68:84:
8f:48:e1:81:03:e6:22:35:b7:1c:5e:92:b9:cc:d9:ee:b8:78:
8b:4d:7e:48:58:b3:67:10:a6:a4:d1:1c:d6:7d:72:1c:59:f6:
7a:52:c7:96:8b:89:fc:9f:e6:40:1e:08:fc:81:61:4b:c9:14:
26:f3:b2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:31:51 2025 by rpki-client