Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
File: dNUnZVf32kEAET2Fc5VmSBVA5hw.mft (raw, json)
Hash identifier: RYs+GBSdV10YBQnsfuwqC30KgdSxRlCSl9yg2TZocvY=
Subject key identifier: B7:77:ED:28:E6:74:D9:01:2D:C8:5F:8E:B3:32:C4:72:AE:49:6A:E9
Authority key identifier: 74:D5:27:65:57:F7:DA:41:00:11:3D:85:73:95:66:48:15:40:E6:1C
Certificate issuer: /CN=74d5276557f7da4100113d85739566481540e61c
Certificate serial: 01964FDA466BE19C3B1349720DD7C2FC6201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
Manifest number: 07AD
Signing time: Sat 19 Apr 2025 21:00:27 +0000
Manifest this update: Sat 19 Apr 2025 21:00:27 +0000
Manifest next update: Sun 20 Apr 2025 21:00:27 +0000
Files and hashes: 1: dNUnZVf32kEAET2Fc5VmSBVA5hw.crl (hash: 0BjQq5yTokU/dTT30zra8qboyNUL8Sg4lQ0TDgAHLZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:46:6b:e1:9c:3b:13:49:72:0d:d7:c2:fc:62:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d5276557f7da4100113d85739566481540e61c
Validity
Not Before: Apr 19 21:00:27 2025 GMT
Not After : Apr 20 21:00:27 2025 GMT
Subject: CN=b777ed28e674d9012dc85f8eb332c472ae496ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:55:68:b4:98:61:95:36:8e:a2:38:b8:fa:
44:2a:09:1e:30:8a:39:a7:c5:49:1f:f1:b6:b2:ac:
66:cc:80:7b:c8:59:da:d0:32:82:a9:13:8a:b8:fb:
21:45:06:56:4d:af:23:b0:f4:52:35:8b:d9:3b:e6:
fb:a6:2b:7a:8d:e9:65:c3:19:dd:89:2c:03:ee:ef:
51:a4:0a:05:ce:8d:84:d8:e0:b4:84:79:68:a6:f0:
c8:c8:2e:82:90:b2:c3:b6:8f:1f:2e:00:17:b4:c5:
b2:82:f2:b7:e0:8b:23:1f:0e:3e:9c:63:79:39:8c:
6e:5c:e7:8d:5a:cb:18:60:10:d8:e2:b1:d2:46:ad:
49:15:10:fb:f9:8a:ca:56:75:71:17:8f:b8:17:83:
11:26:e5:14:c4:db:f1:34:c6:28:e4:ed:e7:c4:5c:
f4:ed:d8:70:13:7b:0d:33:ef:11:56:de:a1:88:8e:
95:84:42:4d:cc:53:e8:c6:39:a6:23:04:50:34:71:
75:d9:59:16:22:4a:83:15:a2:8b:2c:46:54:c4:57:
9e:ef:b6:08:76:04:90:8f:50:3a:92:eb:f8:97:7f:
5f:de:c1:51:5f:ad:60:e0:93:6a:4f:46:25:06:24:
22:81:f3:bc:38:3e:49:99:ad:2c:9c:f6:c1:82:bf:
31:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:77:ED:28:E6:74:D9:01:2D:C8:5F:8E:B3:32:C4:72:AE:49:6A:E9
X509v3 Authority Key Identifier:
keyid:74:D5:27:65:57:F7:DA:41:00:11:3D:85:73:95:66:48:15:40:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:36:3b:8d:d8:59:87:81:6f:30:0b:c9:1c:b1:69:91:40:83:
6d:eb:f7:e9:e2:c5:32:9f:be:82:f9:81:5e:76:3c:4b:99:b4:
37:1a:3e:16:11:76:09:ef:a4:a3:98:a6:91:f5:fe:89:68:da:
cf:6b:54:1a:f0:7b:4a:df:45:03:c8:42:e4:27:41:7a:40:65:
8e:8e:1f:0c:1e:9e:94:b3:fa:c9:db:92:be:7d:aa:6e:57:d5:
4f:23:a2:7a:92:6f:40:04:94:0d:9d:05:57:8a:a8:e8:fc:76:
2f:1d:b9:f9:89:ba:6c:a9:07:63:62:96:f8:6d:7b:c8:4f:6f:
ec:f7:5d:34:44:1c:a8:9b:e2:1d:f2:09:4a:b2:19:fe:52:4b:
5c:04:9a:ed:8f:b0:29:bb:d3:20:be:bd:3c:b6:32:6d:99:9a:
99:be:d1:31:df:63:6e:de:a0:9e:73:0b:e3:43:f7:dc:af:e8:
81:b9:13:e9:96:c6:fa:04:36:d8:d8:66:f2:76:ec:ce:4a:1d:
0c:ef:29:2e:6e:bc:35:1b:2d:5f:c6:e7:28:35:ad:3e:de:62:
02:fb:13:8c:a4:3c:d6:2a:33:af:e8:c1:46:27:df:71:f1:9b:
0f:f7:25:39:78:1a:18:21:e1:9a:6f:3e:7d:c4:1a:ff:44:3e:
33:8e:c2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:49:40 2025 by rpki-client