Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: yDrkgJdg0zUx2LARs2s++XLZmpUsuiTSm+Q9DMHNnzw=
Subject key identifier: B6:CB:FF:6E:61:99:BF:83:02:E0:4B:F7:8D:FA:1B:7C:6C:3C:69:5E
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 01965B03BE631F479504079A396B5F32854C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 14FE
Signing time: Tue 22 Apr 2025 01:01:33 +0000
Manifest this update: Tue 22 Apr 2025 01:01:33 +0000
Manifest next update: Wed 23 Apr 2025 01:01:33 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: g2gKVGwDZUMtxVk99FG9rR92xakk4o16rs27rKJbmIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:be:63:1f:47:95:04:07:9a:39:6b:5f:32:85:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Apr 22 01:01:33 2025 GMT
Not After : Apr 23 01:01:33 2025 GMT
Subject: CN=b6cbff6e6199bf8302e04bf78dfa1b7c6c3c695e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:44:dd:8e:fd:9d:65:1b:24:76:5e:8c:90:
4d:b5:8c:b8:dc:c4:7a:ae:a1:34:f6:e4:b7:20:c2:
95:7d:18:40:d2:c2:c4:bd:ac:e4:89:33:d8:40:99:
e4:75:8b:0f:1a:02:73:aa:1f:48:20:e8:f6:d3:27:
d0:9a:5d:21:73:39:7c:24:84:1e:25:7f:8a:a5:89:
ce:cd:e3:ba:05:1f:e3:19:e1:58:38:eb:29:72:a4:
1e:5a:8c:4d:c0:a2:15:af:57:51:d9:d6:24:cb:bf:
5f:02:8d:05:c1:85:6f:3f:ea:4f:1e:24:a9:c7:5c:
dc:ab:e5:48:ab:1d:0a:71:72:69:19:fe:28:43:8b:
5a:1d:02:a5:3f:b0:ba:a2:78:35:a5:10:64:78:e0:
24:16:02:4c:34:06:ac:6d:f5:a7:ec:61:b8:01:cd:
dd:09:bd:1b:2f:b8:9f:16:8d:79:22:7c:69:91:bf:
b2:fa:44:66:e2:1f:41:15:26:4c:5b:d2:19:05:bc:
b8:c7:52:42:d7:01:31:74:20:81:58:2e:73:c1:3c:
d3:fc:6c:4c:1e:8b:2e:2d:89:3c:a4:c2:24:18:1c:
22:2b:a6:c4:10:dc:d4:87:2b:d9:c3:9b:d8:86:8d:
e3:75:b5:09:3f:c4:c8:87:06:4b:87:02:4f:85:2c:
74:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CB:FF:6E:61:99:BF:83:02:E0:4B:F7:8D:FA:1B:7C:6C:3C:69:5E
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:85:f2:27:19:a9:1e:90:3b:a8:77:77:a8:0a:fb:75:3b:93:
71:44:41:0a:2e:1f:df:2e:f7:cf:f9:a9:e7:57:96:99:3c:dc:
3a:fc:84:8d:6b:8a:e0:04:ec:89:d3:6c:a5:ee:66:a3:ba:96:
90:6b:e5:7e:57:88:d5:d6:26:e5:34:97:7e:da:8e:8e:11:fb:
3b:03:03:20:14:4a:2c:7b:fe:dd:4f:4c:44:fc:5f:2d:d9:95:
29:16:65:d6:01:26:10:76:6e:81:67:d4:9f:96:36:b4:5a:0b:
fe:65:13:47:8c:99:cc:9d:9d:12:b4:30:3f:8d:3e:be:7a:9c:
76:d7:7d:d6:98:6d:c8:8f:e4:59:b4:58:6e:b7:c4:9c:e8:26:
00:e5:47:35:de:bd:d7:a0:4f:c6:5a:1c:9d:16:a8:4c:bf:2a:
09:f7:17:4a:89:a1:39:d0:cd:70:d7:25:ce:9c:a7:d8:03:8a:
36:1b:37:7f:98:d8:cb:d8:9d:f3:52:6f:a0:6a:d4:e3:31:d8:
de:2e:59:bd:44:f5:96:89:d4:34:ba:53:e0:90:67:f2:22:c3:
9c:87:5c:ff:f7:cb:fa:f1:b2:d3:34:6c:0e:4c:a9:d8:e8:83:
5c:e6:3a:0a:12:3d:fc:ae:31:9f:da:60:ae:3c:22:f8:89:a8:
16:67:45:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:01:20 2025 by rpki-client