Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.mft
File: DRLgx3dBkaVcPRkx-_IABDNf0hw.mft (raw, json)
Hash identifier: cFnq/FdDnSVBOH3ZA0RIJ8vWwjcykyl2hMALyIqUT24=
Subject key identifier: 1D:10:CC:21:00:3D:1A:F1:D2:E0:46:8D:EE:D8:F7:83:6F:E8:1F:DB
Authority key identifier: 0D:12:E0:C7:77:41:91:A5:5C:3D:19:31:FB:F2:00:04:33:5F:D2:1C
Certificate issuer: /CN=0d12e0c7774191a55c3d1931fbf20004335fd21c
Certificate serial: 01958C296EA94CE39BF4654F9FFED244379F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRLgx3dBkaVcPRkx-_IABDNf0hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.mft
Manifest number: 149A
Signing time: Wed 12 Mar 2025 21:01:20 +0000
Manifest this update: Wed 12 Mar 2025 21:01:20 +0000
Manifest next update: Thu 13 Mar 2025 21:01:20 +0000
Files and hashes: 1: DRLgx3dBkaVcPRkx-_IABDNf0hw.crl (hash: gNnPT5U2HmCabdNdTf4Eo0oQVBxMwMQSM7EbHuEG7sQ=)
2: RSYdG5gg-YCPUfslf96tr_CDk9g.roa (hash: M9FWyf6d3I10rIL5aBwIBRBiTbEoITfpKpVAl4zvaYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRLgx3dBkaVcPRkx-_IABDNf0hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:6e:a9:4c:e3:9b:f4:65:4f:9f:fe:d2:44:37:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d12e0c7774191a55c3d1931fbf20004335fd21c
Validity
Not Before: Mar 12 21:01:20 2025 GMT
Not After : Mar 13 21:01:20 2025 GMT
Subject: CN=1d10cc21003d1af1d2e0468deed8f7836fe81fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:9a:72:c5:fa:95:8b:ad:f3:fc:63:0f:40:
64:6d:1d:27:72:d3:ab:6e:2d:20:41:9d:2f:ec:5e:
f3:6c:6b:88:f6:8f:1f:c5:fe:6c:37:0e:cc:95:2b:
9e:51:d2:81:55:74:30:9f:f2:2d:c3:f6:de:60:1a:
d2:f2:30:73:83:b5:c3:51:5b:27:ac:ab:e0:01:82:
5f:32:5c:62:8a:1c:e0:0f:ab:27:50:cb:4e:e2:dd:
1b:c4:01:35:91:35:15:3b:47:39:96:90:42:a6:49:
91:c7:f5:87:bb:ee:fb:e2:bc:ac:6c:ac:21:48:44:
f7:e8:db:22:aa:23:40:2b:37:f3:51:f1:e7:51:b7:
08:b9:d2:9a:c8:13:e4:79:53:93:e6:7a:24:58:c0:
56:ed:19:37:6d:fb:27:43:d8:b6:f3:04:60:d6:d2:
22:ca:6d:d8:53:2d:fe:46:c2:36:c5:b8:75:32:de:
04:53:e3:8e:1a:9d:c2:00:63:c7:9f:b0:83:31:bb:
17:d8:b2:37:01:3a:f0:08:b6:ae:cf:93:8f:d7:fe:
45:04:4a:bc:5b:c4:0d:92:b0:40:df:7e:1c:f3:6c:
94:72:45:da:c0:73:46:86:1a:47:9f:19:0f:4f:6b:
18:b7:7a:04:99:48:1e:6a:91:c5:ab:33:e6:b0:db:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:10:CC:21:00:3D:1A:F1:D2:E0:46:8D:EE:D8:F7:83:6F:E8:1F:DB
X509v3 Authority Key Identifier:
keyid:0D:12:E0:C7:77:41:91:A5:5C:3D:19:31:FB:F2:00:04:33:5F:D2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRLgx3dBkaVcPRkx-_IABDNf0hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d8:0d:78:cd:39:df:d3:c3:e0:c1:1d:3a:78:d4:37:40:9a:
65:c9:04:d0:28:97:8a:c8:12:03:63:74:3d:4a:03:09:e4:db:
37:ac:d9:11:38:fd:58:84:19:e5:cb:f8:48:6d:1d:74:1a:9b:
6b:71:4b:fe:67:ba:0e:6d:1c:8a:a5:85:61:fc:9b:d1:bc:94:
93:94:ed:e4:a5:68:60:8c:63:7f:a2:be:41:c7:a5:d2:59:e0:
78:0d:3c:ff:32:8a:d8:00:ee:8f:94:82:c3:19:0f:ea:e9:14:
d7:d9:9b:d3:f6:ff:a4:59:ea:2f:04:da:9b:7d:6d:3c:5f:42:
a0:92:3c:e5:59:cc:5f:04:51:2f:30:f0:e9:7e:8a:43:09:f8:
82:c9:e7:d8:12:cf:77:53:ec:d2:7b:97:61:ce:a8:a6:eb:a5:
57:e9:ae:02:aa:c3:0d:aa:0b:7a:34:95:cd:1e:fe:fd:bc:d4:
b5:f4:06:07:46:a5:94:9d:78:46:23:2c:97:62:99:75:3d:d5:
c2:de:75:b2:f0:be:5a:0f:11:54:e5:17:a8:d9:cc:34:16:1c:
c6:96:24:ef:fe:0f:b4:10:04:5f:3d:a7:03:45:7f:66:7e:e4:
fb:6f:33:74:7a:3c:d2:aa:9c:0a:5f:4d:d2:b4:2f:69:fd:cf:
4a:9e:01:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:39 2025 by rpki-client