Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
File: dQRxYHUyqMev1g1PMXqtxJDrogY.mft (raw, json)
Hash identifier: 5jHO/H0QPbHCx+fQ9RWthJ6FlohDVnX9S37+27gKlaY=
Subject key identifier: A1:7E:89:64:FD:39:34:83:E4:FE:91:4B:2B:FB:D3:06:6C:98:26:62
Authority key identifier: 75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
Certificate issuer: /CN=750471607532a8c7afd60d4f317aadc490eba206
Certificate serial: 01964D7F2279643BC8D28E620C01EE654859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 10:01:39 +0000
Manifest this update: Sat 19 Apr 2025 10:01:39 +0000
Manifest next update: Sun 20 Apr 2025 10:01:39 +0000
Files and hashes: 1: dQRxYHUyqMev1g1PMXqtxJDrogY.crl (hash: aL31nq8dP4VxjStCf9gP6vC7Ts8vH4d5gCLbhkdkw3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7f:22:79:64:3b:c8:d2:8e:62:0c:01:ee:65:48:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750471607532a8c7afd60d4f317aadc490eba206
Validity
Not Before: Apr 19 10:01:39 2025 GMT
Not After : Apr 20 10:01:39 2025 GMT
Subject: CN=a17e8964fd393483e4fe914b2bfbd3066c982662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:18:d8:f2:fa:b5:33:e9:5c:76:d5:a3:4c:
98:8c:66:c6:3c:b7:19:84:db:33:a6:48:6b:ca:93:
87:83:7c:bd:2c:d0:f5:06:28:af:f2:79:00:bd:cf:
29:1d:85:a8:9b:f5:3e:ff:0c:e5:af:9e:5d:f5:59:
38:e8:53:93:38:54:44:3d:41:3e:ce:ab:1a:68:a4:
a2:be:04:d1:1e:85:cc:b1:0f:b5:c3:ed:02:4a:51:
4e:df:2d:36:82:67:a3:30:2f:eb:63:c7:eb:82:8f:
25:37:67:1f:b7:f4:25:1b:8f:66:b5:8e:6e:f0:3a:
ac:5e:da:bb:77:0b:9c:41:d9:e3:a1:f1:79:c9:74:
26:77:0c:45:8e:1d:fb:3e:96:b9:31:9b:2e:67:a6:
43:65:38:31:b2:fe:9f:96:3e:c7:ac:f0:61:a7:34:
f2:90:be:d1:bc:93:f2:28:f1:84:b4:b5:e3:cc:23:
d3:ae:51:73:b8:00:16:70:5c:38:0f:e1:73:85:e8:
20:4e:a2:be:42:08:69:d9:6e:5a:46:4e:27:fd:5f:
97:6c:00:cf:d5:70:16:27:a9:18:1e:25:18:cd:30:
c3:66:43:c2:2c:7d:b6:58:99:f7:fb:af:67:ee:d1:
20:cb:a0:81:08:cb:84:09:5e:43:ce:fd:d7:cb:a0:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7E:89:64:FD:39:34:83:E4:FE:91:4B:2B:FB:D3:06:6C:98:26:62
X509v3 Authority Key Identifier:
keyid:75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b8:78:d3:18:58:11:02:3f:a6:28:c7:54:b8:55:01:ae:8c:
8b:22:32:fb:1d:8a:3e:f5:72:7a:ce:df:a7:6c:38:2d:ff:fd:
af:2a:37:c8:04:7f:e8:c6:46:2a:cf:16:a8:17:2c:16:c6:6e:
37:d7:8c:1c:a6:6e:fc:fa:1e:32:3e:f6:e9:ed:f4:af:c0:1d:
99:22:70:97:a4:7e:8f:0e:63:dd:7c:be:af:f7:ca:c8:5e:a7:
76:14:02:f0:8f:99:9b:68:8e:c7:8c:ca:84:8c:29:7d:5a:c6:
6b:76:22:dd:6c:34:1a:57:4e:c4:ad:41:0d:da:06:5f:03:1c:
9b:b5:13:89:93:1c:30:cb:7d:f0:62:da:4d:a1:47:61:4c:19:
8f:80:ad:56:9e:fe:c7:fc:a8:9b:c7:d8:06:84:b3:98:db:6e:
5d:15:61:89:09:c0:86:96:98:16:16:a3:7b:58:33:59:ba:e8:
be:bc:f8:d6:f8:c0:a4:a8:28:b7:e5:3c:32:00:dd:7d:de:46:
57:53:93:2a:3e:77:45:4f:8e:da:f0:8a:39:98:3b:76:15:65:
07:95:b8:d6:d4:93:cb:45:fa:2a:1e:f2:2e:5a:88:c8:f1:1a:
d9:ad:63:25:a5:0f:90:6b:60:a2:40:8a:b8:d9:60:1b:1a:4e:
bd:76:ee:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:09 2025 by rpki-client