Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
File: dggs9uV3xDJnGZEkoogbNzLO9AQ.mft (raw, json)
Hash identifier: IAo5Ok73XhK0fKKcGskewMTHqXgE4bsyXlNaaVi9+7o=
Subject key identifier: 4A:51:C4:DE:52:0F:13:C8:AE:65:26:11:CC:22:78:FA:D9:77:FB:68
Authority key identifier: 76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04
Certificate issuer: /CN=76082cf6e577c43267199124a2881b3732cef404
Certificate serial: 0196598201A75CD5FFF2E95B3AE32E7A16D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 18:00:14 +0000
Manifest this update: Mon 21 Apr 2025 18:00:14 +0000
Manifest next update: Tue 22 Apr 2025 18:00:14 +0000
Files and hashes: 1: dggs9uV3xDJnGZEkoogbNzLO9AQ.crl (hash: tV20UEHMq5z5PZyRbseHOfnv+FTKJKGOou2rKR7zH/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:01:a7:5c:d5:ff:f2:e9:5b:3a:e3:2e:7a:16:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76082cf6e577c43267199124a2881b3732cef404
Validity
Not Before: Apr 21 18:00:14 2025 GMT
Not After : Apr 22 18:00:14 2025 GMT
Subject: CN=4a51c4de520f13c8ae652611cc2278fad977fb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f9:32:3b:b3:d7:a6:e1:b6:79:36:74:4e:e4:
9f:8e:8c:dc:30:d6:65:cf:cc:26:88:e3:aa:03:50:
49:db:9d:9a:17:aa:a6:56:fb:8c:81:8f:88:98:7a:
ab:4d:38:7a:15:d0:4a:58:95:a7:f4:6a:3c:ba:4d:
d3:c2:26:6d:6e:ed:22:61:77:ea:97:5b:f3:50:a2:
8c:4a:92:3a:47:dd:ab:58:8b:2c:28:b7:3b:49:67:
21:e6:31:9d:4c:14:f7:55:72:fc:06:38:f6:e2:ba:
1b:de:c8:b7:a0:29:17:9d:05:3f:c1:9e:aa:b6:df:
8f:01:8f:9d:3a:33:f8:1b:02:7d:59:c2:31:4d:eb:
b7:cf:78:e2:5f:93:6e:8c:73:ef:e4:cc:2e:fa:3e:
0a:42:bc:6c:a2:98:b9:32:78:59:08:80:fe:83:74:
83:e8:ee:87:0f:30:5f:ff:08:1f:b6:8f:e7:dc:b7:
96:8d:39:96:17:9a:be:9a:a4:d1:ba:5c:84:8f:52:
1f:ac:90:35:ba:a9:fc:0e:87:4b:27:b4:97:ae:ff:
25:ff:83:46:95:b7:09:b3:b0:47:73:57:23:9b:f7:
3c:86:93:e4:56:1c:ff:0e:ef:00:35:6e:6f:e0:dd:
7a:ed:47:e0:90:6d:d6:c5:41:41:db:62:cd:c7:4b:
8d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:51:C4:DE:52:0F:13:C8:AE:65:26:11:CC:22:78:FA:D9:77:FB:68
X509v3 Authority Key Identifier:
keyid:76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4b:86:23:aa:ee:27:df:fc:c3:2c:18:a2:ba:23:77:6a:d0:
8c:7d:8e:db:9b:15:16:26:08:1a:89:33:18:03:6d:01:70:53:
60:d5:cf:fe:3d:1b:35:a4:2f:e4:10:7e:1e:52:58:d9:7d:59:
8a:c8:b6:9e:f7:ee:fe:a3:88:12:e2:84:dd:cc:30:70:4e:ac:
6e:a1:65:d1:3d:7e:f7:b8:fe:2d:25:cc:18:e1:42:f1:39:20:
24:f9:63:8a:ea:b2:c8:ef:bd:63:78:a3:b9:23:6e:95:10:df:
28:62:e2:c1:de:03:cc:fd:04:ab:4a:51:83:e9:92:4e:22:a5:
1d:91:fb:f4:05:60:fb:ec:05:1c:21:1a:a3:1b:6e:b6:eb:a6:
6a:e8:b8:6f:fe:a2:62:00:8a:85:09:be:3d:92:4d:ac:60:1d:
eb:58:9d:cf:50:f0:3d:60:ae:0d:00:ac:13:d4:59:d6:c7:5a:
71:f6:43:21:51:12:96:63:b0:ca:ba:e7:94:d7:29:32:09:c7:
7a:65:1e:61:2b:c7:4f:2d:95:ce:d0:1c:90:d7:c7:c9:33:ed:
ab:ca:ed:b8:7b:a3:d2:59:d5:9a:9f:86:f2:cc:c8:b8:45:fa:
d1:57:e0:80:45:79:54:1a:33:39:f7:4c:34:3a:c6:d7:5e:d0:
48:d8:d0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:25 2025 by rpki-client