Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: YjVg8pgEosm3fLWqX5C8OwN98GYd/4f2aShaFsWkjkU=
Subject key identifier: 24:32:D6:BF:65:E1:84:99:4C:0F:05:00:3E:DC:96:DD:E4:1D:71:32
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 01965F4D80884645B8EF84886192D0D9F38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0B03
Signing time: Tue 22 Apr 2025 21:00:36 +0000
Manifest this update: Tue 22 Apr 2025 21:00:36 +0000
Manifest next update: Wed 23 Apr 2025 21:00:36 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: /fpptKtqyz6+8OhhL017l3q+vzrXeIChqUmQpGeXVL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:4d:80:88:46:45:b8:ef:84:88:61:92:d0:d9:f3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: Apr 22 21:00:36 2025 GMT
Not After : Apr 23 21:00:36 2025 GMT
Subject: CN=2432d6bf65e184994c0f05003edc96dde41d7132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:02:56:c5:4c:86:65:4b:02:75:2e:da:f4:
07:f6:68:83:ef:3c:d0:b2:f2:24:3b:bf:89:79:5e:
47:8e:78:2f:f5:88:48:88:ee:79:38:8a:3e:50:58:
6e:04:9b:1c:8a:1b:53:b2:e8:b3:04:64:3d:5a:83:
df:7d:26:05:1d:e7:cf:48:30:ea:04:fa:90:37:ef:
c7:9e:d1:1f:8d:76:38:3c:23:d2:70:2b:ca:c6:b4:
5d:a7:c7:0f:14:26:fb:f2:47:f4:cb:67:9b:33:f1:
e7:49:cf:b8:7e:ad:8b:94:ee:e4:24:ce:0d:82:85:
12:d1:c1:1e:23:d4:c9:e0:6b:6f:b8:53:af:50:a2:
4a:75:47:66:ff:c5:9b:42:13:dc:44:c9:ce:80:fc:
bd:0e:5d:3b:fb:fa:47:e0:69:0c:79:f0:e9:05:17:
16:b9:40:ce:47:c5:c0:67:28:1d:4c:f4:15:09:0e:
58:ff:75:9a:4d:be:a6:9c:83:04:23:38:b9:7f:2a:
99:72:f8:bc:a7:d2:11:08:43:3c:2f:81:df:7c:fa:
33:49:6d:9e:25:ad:b1:92:04:7d:75:ee:d9:22:ae:
22:38:66:81:28:99:f2:67:87:9b:d9:f3:93:e8:74:
5a:ad:50:1f:fa:ee:b0:eb:f6:df:ba:dc:72:22:f9:
9d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:32:D6:BF:65:E1:84:99:4C:0F:05:00:3E:DC:96:DD:E4:1D:71:32
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:dc:8a:17:05:62:13:df:65:f3:31:9d:9e:b3:d8:79:b1:5d:
10:4c:36:0d:6c:72:b8:d7:5b:7b:9e:54:28:dd:03:5c:47:0a:
da:8c:07:a3:7c:bc:00:7c:c6:ae:75:8c:2f:5e:4f:c6:11:c2:
be:7f:d1:61:d8:72:d8:6d:39:f0:4d:a0:6d:b3:cb:fd:77:89:
82:5f:33:e8:ca:19:88:47:9c:b2:39:ff:f3:3d:8d:a2:c4:70:
36:8b:57:3e:e2:35:f5:9b:31:96:9c:2c:52:46:7e:70:3d:02:
e6:c1:a3:44:05:0b:33:e8:28:69:8c:83:65:a1:2d:1e:9f:e3:
1d:71:aa:6a:71:78:8c:a8:09:80:f4:b5:79:c0:b7:6a:72:7e:
4f:3f:c0:c3:2e:0c:2b:5b:b5:c1:59:c9:66:e7:e5:fc:d7:b5:
e3:2a:9d:6f:a8:0a:89:1e:cb:19:b7:6c:fb:9c:61:fd:e9:be:
9a:a5:f8:32:01:22:c4:13:04:57:f8:8f:c5:30:e4:06:04:d6:
0d:82:13:58:c9:67:39:18:ef:87:a9:97:27:5a:fd:59:67:8b:
ac:45:87:d3:d1:c7:d1:5c:da:c2:3e:cb:9a:ac:b0:0c:75:c7:
3e:5e:85:57:33:ca:83:21:61:48:d4:83:93:f0:5f:24:20:e3:
4a:d5:18:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:19:59 2025 by rpki-client