Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
File: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft (raw, json)
Hash identifier: i/BToN+QGQMY52GZ9f7VXYgjQz3c/RLoEJ455vAIkv4=
Subject key identifier: 03:52:61:71:BB:68:A9:36:76:9C:C0:8E:E2:23:12:95:38:EA:49:2E
Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
Certificate issuer: /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Certificate serial: 019610FBD6B8482117B6C87ACCAD060BECB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
Manifest number: 14DE
Signing time: Mon 07 Apr 2025 16:01:02 +0000
Manifest this update: Mon 07 Apr 2025 16:01:02 +0000
Manifest next update: Tue 08 Apr 2025 16:01:02 +0000
Files and hashes: 1: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl (hash: T1vxi/P9NEgtt3dZdh87V13hk3ZVnQPbhOkd+wyTgdQ=)
2: lcvUmc0LhKo6ANY0ugW3mmP3-ik.roa (hash: +B49PEbia08zz2cV1E64Pu8VSfW83hABBkamjBdKnyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fb:d6:b8:48:21:17:b6:c8:7a:cc:ad:06:0b:ec:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Validity
Not Before: Apr 7 16:01:02 2025 GMT
Not After : Apr 8 16:01:02 2025 GMT
Subject: CN=03526171bb68a936769cc08ee223129538ea492e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:8e:7c:2c:6d:0a:43:9e:fc:49:40:4b:d1:
8d:25:c4:c6:33:12:4e:bf:ed:ed:7e:e3:0e:a1:5a:
bf:94:c8:89:b8:7b:45:40:0d:54:99:20:a0:55:e2:
aa:45:15:7a:6e:35:6d:93:fb:71:c2:58:bb:07:e1:
44:05:06:96:18:cd:5b:98:93:75:ba:54:99:fc:87:
80:15:ea:04:14:4c:44:6e:cc:41:f7:9f:68:2b:8a:
67:b2:1d:e1:bf:25:7c:11:8e:01:66:c3:cf:56:c2:
1c:e3:15:53:58:af:c8:ad:08:ea:61:df:16:3a:1c:
d0:c4:fd:e7:84:46:d9:26:5d:ba:75:01:d3:96:21:
e1:58:c2:6f:d0:26:98:13:5c:c6:df:57:f2:3f:2a:
92:eb:54:6b:68:7f:b2:e1:fd:18:27:f9:f0:c8:9b:
f5:c3:a5:91:11:45:6e:f8:47:1e:aa:0c:00:ab:9e:
7a:f6:29:65:7d:d7:be:08:80:8c:1d:b2:e1:25:40:
9c:0a:3c:34:2f:a3:e2:2e:8e:16:f4:da:1b:d2:a8:
ef:78:85:0c:78:39:ec:c5:db:61:f7:b6:90:fd:12:
7f:d4:bc:42:ea:63:af:54:2d:d8:37:8e:bf:9b:8f:
f2:56:1e:44:b2:1b:a7:f5:ff:23:13:d9:03:9c:94:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:52:61:71:BB:68:A9:36:76:9C:C0:8E:E2:23:12:95:38:EA:49:2E
X509v3 Authority Key Identifier:
keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e6:49:a5:8b:2f:de:59:41:53:c5:2d:d7:ac:4e:b0:07:7e:
34:f3:59:83:a8:ad:b1:4a:fd:27:d5:ef:0c:cd:6a:09:78:df:
e7:3b:a7:7e:8b:fe:91:ac:62:ec:db:9f:90:f0:9e:77:f1:9e:
47:f7:e0:d4:f8:c5:77:3b:7a:01:65:eb:ee:45:62:01:ae:71:
89:6f:79:2a:57:d1:a7:6e:94:c8:33:79:3a:38:8b:d2:37:71:
30:4a:9d:32:b9:7b:b5:09:2a:7a:85:ff:4e:3c:76:53:1c:c2:
6d:62:1c:c1:f8:59:31:69:f7:92:2c:b9:a2:a8:14:de:1d:0f:
3d:eb:14:8d:a0:69:5a:9e:32:fa:82:bb:24:b5:21:fc:3f:e3:
0b:a9:3b:09:b2:16:a2:16:b7:83:f0:c0:79:9b:e8:13:85:0d:
86:81:47:89:be:80:d1:12:07:e4:e3:99:cd:79:cf:fd:99:f0:
34:ba:b6:f9:26:46:4f:ed:dc:c4:ba:7e:72:26:76:e9:10:91:
a8:fa:e0:ce:ab:d3:fd:ee:ed:24:d3:7c:99:50:63:90:ef:89:
fa:70:75:81:56:b9:69:96:c6:1d:9e:8c:42:e3:ad:96:44:33:
16:68:48:3f:5f:23:9a:14:8b:d2:2b:99:9d:51:d2:c1:b8:c2:
97:69:d0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:38:42 2025 by rpki-client