Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
File: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft (raw, json)
Hash identifier: K6icedaAuTDYt5CJxsjFrR2Dp7Ml6D38+yheGpzjGDg=
Subject key identifier: 30:AE:6E:A4:4B:FA:25:8F:D9:F9:FF:CD:67:1C:F6:1C:BB:94:C8:07
Authority key identifier: 0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
Certificate issuer: /CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Certificate serial: 01964D7F2996BBAC226E5C7D07F3095289EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
Manifest number: 1232
Signing time: Sat 19 Apr 2025 10:01:41 +0000
Manifest this update: Sat 19 Apr 2025 10:01:41 +0000
Manifest next update: Sun 20 Apr 2025 10:01:41 +0000
Files and hashes: 1: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl (hash: rluTjyQBmuBlv6G6QywOrXqz5kHxWaG81baHawNBQ4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7f:29:96:bb:ac:22:6e:5c:7d:07:f3:09:52:89:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Validity
Not Before: Apr 19 10:01:41 2025 GMT
Not After : Apr 20 10:01:41 2025 GMT
Subject: CN=30ae6ea44bfa258fd9f9ffcd671cf61cbb94c807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:45:a9:b2:9a:18:80:30:d6:28:34:6e:64:
f7:dc:85:bf:14:7d:19:3d:1d:ad:24:b2:1b:19:33:
5d:98:e5:b3:41:0c:00:b9:31:37:1e:3a:37:ad:22:
ff:cf:cf:91:f5:30:20:0b:b3:78:36:4a:b7:21:8e:
e0:77:36:14:7b:b1:44:df:1a:f0:9a:da:b3:06:73:
a0:23:0e:3d:bc:0b:13:39:f5:26:58:37:e0:5c:0d:
49:d9:a2:59:10:f5:33:c4:f5:28:a7:2d:54:c9:63:
d8:41:03:19:8e:51:e9:04:94:e8:e3:d4:49:5c:ce:
b1:df:9d:2a:e5:71:55:0c:8e:f2:a3:91:68:ec:a3:
d2:fc:17:46:53:2b:e6:af:0c:79:7d:15:64:21:79:
02:87:07:42:a4:c2:c3:9b:ed:0b:79:71:60:24:bb:
48:b0:2f:c7:a2:9f:e4:c8:4e:cc:bf:a7:45:48:07:
57:7b:e4:a4:fc:aa:a1:0c:8f:c7:4a:c0:78:a1:90:
8f:b5:29:0c:52:cb:6b:06:fb:55:3f:4a:03:1f:56:
91:2b:be:2c:4c:fa:08:3e:eb:ce:6e:35:c1:23:f8:
9a:97:d8:8c:58:a4:19:f9:44:9d:2f:31:9a:e1:a8:
21:b4:2d:d2:67:87:23:ce:22:35:9b:1b:ab:d6:a2:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AE:6E:A4:4B:FA:25:8F:D9:F9:FF:CD:67:1C:F6:1C:BB:94:C8:07
X509v3 Authority Key Identifier:
keyid:0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:85:84:50:19:a5:f6:23:ef:a0:c8:79:84:4f:2d:14:4f:b0:
48:db:35:6a:03:c3:2e:a0:56:0f:01:35:24:f8:79:93:db:82:
0f:95:90:4a:b9:c1:8c:78:90:4a:2c:76:64:6d:b7:15:5a:cf:
18:1d:7a:63:84:62:aa:e4:57:5c:60:52:eb:90:d0:9a:6d:f6:
96:44:ed:80:8e:6d:c9:d5:de:cf:f5:59:81:01:3b:23:5b:1f:
a6:7f:fa:58:d8:ba:97:98:52:07:f4:3c:6f:1d:28:72:69:40:
a2:df:53:e1:6c:b4:84:cb:7c:ee:97:fa:8b:a8:12:f8:f7:20:
9d:4c:82:91:60:1c:d1:1e:c3:6d:a1:61:dc:44:33:4b:af:ed:
fb:c5:73:0c:17:bb:c4:1d:8c:ab:05:f8:52:86:ea:3b:09:18:
00:04:c9:e9:55:ce:ec:74:8d:e5:bc:be:e9:73:63:9f:b0:65:
33:1a:3c:53:f9:38:3e:7a:7a:5a:39:60:b0:31:65:4f:0c:64:
71:c1:a6:ed:dd:f1:90:ad:44:68:d2:69:cc:42:0a:59:20:cb:
7e:1c:b2:0f:34:92:91:2c:09:5f:60:b7:b9:e4:d5:96:0e:e8:
24:9a:ef:8a:6d:0d:fe:6d:05:34:b6:53:ab:a1:2b:7b:b6:04:
5e:c2:05:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:22 2025 by rpki-client