Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
File: dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft (raw, json)
Hash identifier: 9qH+ECGV8LPi3FYRf2jMqjWzth6wFAHf9CVM0DC45A8=
Subject key identifier: D2:85:A7:EA:C6:C6:AB:15:81:A8:94:53:F4:7F:78:BA:3E:6D:80:98
Authority key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
Certificate issuer: /CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Certificate serial: 0196470E184325991A0D7F42C5B61BCB274F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
Manifest number: 14F2
Signing time: Fri 18 Apr 2025 04:00:28 +0000
Manifest this update: Fri 18 Apr 2025 04:00:28 +0000
Manifest next update: Sat 19 Apr 2025 04:00:28 +0000
Files and hashes: 1: dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl (hash: HUw910dIi2bpr+9JnM0VjR8+LiNJWf0I9jciGahUF2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:0e:18:43:25:99:1a:0d:7f:42:c5:b6:1b:cb:27:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Validity
Not Before: Apr 18 04:00:28 2025 GMT
Not After : Apr 19 04:00:28 2025 GMT
Subject: CN=d285a7eac6c6ab1581a89453f47f78ba3e6d8098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:06:66:e8:2c:77:93:fe:b2:79:9c:96:59:
e3:82:8d:cc:32:75:da:6f:84:fe:c5:59:e5:c7:ec:
ce:e5:45:ae:dc:a0:20:67:62:3a:5c:f4:aa:27:05:
30:2f:ce:e7:d7:1b:b0:24:ec:66:e1:99:3e:13:01:
3c:ad:fb:57:b5:e9:18:e4:f4:ac:05:dd:c2:c7:fd:
32:b1:c8:8b:7c:72:fd:89:7e:01:1a:57:49:02:dc:
0c:54:fe:c3:e7:f0:4b:0d:a4:49:fc:45:8a:e9:7d:
9a:72:4e:21:45:98:ef:74:9e:36:32:db:30:c9:6d:
92:7b:ea:4f:6d:24:62:eb:86:d8:a2:85:85:d4:ac:
22:94:ce:bc:46:a8:63:f1:90:33:2f:f4:19:0c:66:
e2:c6:c1:34:de:ff:c9:70:39:49:22:e3:36:42:5c:
24:ef:85:c3:0e:5e:bd:e1:2c:8f:70:59:cc:65:04:
0c:dc:5c:ba:cc:bd:c2:d0:0e:7e:c1:9c:cc:9a:eb:
0f:7d:f4:14:57:d5:50:af:ef:a9:7e:6f:05:d7:1f:
a5:4d:3a:b3:c6:10:ae:f5:9a:b1:40:78:31:04:8b:
d1:31:f3:2b:74:93:55:88:6d:ec:81:75:24:a3:9e:
fb:33:c4:79:d0:8d:ef:57:f6:d4:9c:c7:11:3c:d3:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:85:A7:EA:C6:C6:AB:15:81:A8:94:53:F4:7F:78:BA:3E:6D:80:98
X509v3 Authority Key Identifier:
keyid:75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:28:5d:76:82:d6:74:f3:80:18:ba:c7:72:45:dc:6f:04:dd:
b5:13:9b:57:a7:3b:eb:a0:49:a7:ad:81:35:8a:f7:8e:4d:41:
f1:20:6f:fe:44:8d:18:e8:29:38:98:a8:2f:fc:ec:db:8b:82:
4c:e1:3b:1e:ff:3c:8a:a2:8d:c1:6e:05:53:8b:95:56:08:36:
de:84:f8:7e:6e:a4:38:c9:70:81:30:48:5a:da:cc:e1:ee:fb:
52:ab:f0:8b:94:5c:c5:f7:19:dd:5f:00:98:8b:31:8d:de:64:
59:a3:fd:1d:7d:0f:f1:39:0d:1e:fc:01:f1:ca:ea:6e:2b:ed:
01:44:50:33:7a:b0:b6:6b:a5:5b:bc:13:85:63:0c:15:a0:17:
0f:dc:10:a4:e1:88:57:c6:73:76:22:1d:94:2a:9d:9e:54:5d:
4e:74:26:e5:b3:e3:9a:c1:e5:19:fa:bc:53:eb:d6:7e:0d:5d:
1b:e7:94:f7:a7:e2:60:be:0f:ad:8f:0e:06:3b:a2:9c:04:99:
fc:1c:75:a6:2a:f0:e4:ea:ed:86:e0:9b:30:fc:84:34:f0:4f:
89:2d:cb:da:58:72:9f:5f:01:88:b5:34:6d:6e:e4:dc:38:8a:
a2:71:e7:54:cd:1a:0f:b7:ee:0c:4c:7f:fa:0b:52:66:3b:ec:
47:1c:15:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:48:16 2025 by rpki-client