Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
File: Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft (raw, json)
Hash identifier: PQjYbKkALh4zl0kHnXltw32Xbq/N2lTMOeZFugG7CGA=
Subject key identifier: 5F:AF:DE:6F:9F:98:62:24:1C:2C:6D:03:9B:3C:74:2E:DF:06:45:F5
Authority key identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
Certificate issuer: /CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Certificate serial: 0196485839DCE96258E89225FB66D2D289EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
Manifest number: 14F4
Signing time: Fri 18 Apr 2025 10:01:03 +0000
Manifest this update: Fri 18 Apr 2025 10:01:03 +0000
Manifest next update: Sat 19 Apr 2025 10:01:03 +0000
Files and hashes: 1: Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl (hash: 0wwo4dUymx5aIVVI2YkWUIreW7Zh/uEkZZZ7RMrkixs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:58:39:dc:e9:62:58:e8:92:25:fb:66:d2:d2:89:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Validity
Not Before: Apr 18 10:01:03 2025 GMT
Not After : Apr 19 10:01:03 2025 GMT
Subject: CN=5fafde6f9f9862241c2c6d039b3c742edf0645f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:b3:6e:bb:ed:82:ca:db:97:40:b8:40:5a:
6f:09:25:c7:10:95:4e:09:6a:b3:50:1e:5f:41:50:
ab:ea:04:90:8e:de:b3:f5:85:34:ad:26:dc:28:86:
df:24:3c:a0:5c:24:0f:c6:3e:5f:15:c0:d0:f3:b4:
f5:96:f7:f1:c3:10:7c:cc:e6:1f:9e:0d:d5:c0:9f:
72:30:a5:04:31:03:26:77:85:c3:a6:30:ac:ee:bb:
ee:90:14:4a:82:29:22:90:df:27:d3:04:c7:5e:88:
0e:88:0f:b8:e7:c7:f4:80:18:9a:2d:26:46:bc:a0:
5c:b4:ad:17:23:24:37:35:c0:a5:20:89:54:7c:4d:
e9:2e:a3:09:6f:da:30:ee:ec:48:71:85:d8:6a:c5:
af:d2:12:19:96:da:8d:c2:d7:45:17:c2:54:2e:8a:
46:3c:18:b7:23:58:69:cd:e9:bf:17:29:93:b0:e3:
5c:a4:df:e2:4c:0a:4f:4f:56:9f:19:44:4f:75:7a:
cc:61:d5:e5:91:74:92:c9:6e:d9:34:99:f2:b7:aa:
40:34:2d:1b:b1:53:90:a1:bc:4e:33:d2:79:a2:cc:
6e:fd:4a:51:4a:4d:e4:33:8d:a1:0b:5e:1d:c7:33:
f2:8c:67:c9:e6:7c:ac:2c:54:3e:9f:c6:eb:1a:6b:
0c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AF:DE:6F:9F:98:62:24:1C:2C:6D:03:9B:3C:74:2E:DF:06:45:F5
X509v3 Authority Key Identifier:
keyid:0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ce:04:98:e8:a8:e5:8d:40:da:eb:d4:2b:fc:1f:bc:2a:39:
aa:03:60:ab:ea:21:82:c5:d2:fa:0a:b9:64:3b:95:80:ff:61:
6a:c0:d6:ab:a0:97:c8:d6:96:d6:5c:50:69:e5:1d:a1:d4:f8:
60:25:8a:95:bc:d1:f0:44:4b:04:fb:25:16:32:25:54:6e:2f:
7b:a7:93:97:fc:1d:79:b7:bb:64:45:42:63:15:0a:03:9a:0b:
bb:7a:8a:98:e7:85:1a:ea:b5:c4:be:be:30:b1:fc:59:44:f6:
8f:6a:a9:63:8f:e9:04:ac:22:3b:01:51:d6:a4:ac:25:ee:e0:
9e:2f:bf:e0:f4:b7:a4:77:0d:0b:4e:56:e0:28:b7:15:b6:52:
31:96:2f:fc:7a:62:5c:0c:bf:29:cd:ed:83:4e:51:e4:34:02:
5b:d2:b1:86:21:ff:8f:46:01:7c:2a:a2:ad:7a:6e:14:31:72:
17:d3:f9:1d:bc:51:f2:f3:12:18:37:84:7c:58:34:7a:c0:6d:
70:ef:c6:2f:1f:7d:f2:06:5c:9e:93:63:48:b7:ed:ea:ca:ab:
aa:cb:c6:4e:d0:51:cb:51:9a:5e:2f:1b:61:67:64:c9:31:34:
ce:e7:a1:82:81:70:b0:6a:4f:4f:00:c6:d4:3c:9c:b0:4a:df:
6b:57:93:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:31:34 2025 by rpki-client