Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
File: dlIO_x7h4o493PuJ58tvfYmnfJw.mft (raw, json)
Hash identifier: dI6wm9ZHJbRZHwWMjfq90OwcP2KyyD++4WUFsbo9rwA=
Subject key identifier: 03:DD:E3:45:B4:41:D8:53:DF:D0:8B:40:54:81:3B:F0:B4:C7:BE:91
Authority key identifier: 76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
Certificate issuer: /CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Certificate serial: 0196575D25204EF14709337D20BB723779C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
Manifest number: 8B
Signing time: Mon 21 Apr 2025 08:00:44 +0000
Manifest this update: Mon 21 Apr 2025 08:00:44 +0000
Manifest next update: Tue 22 Apr 2025 08:00:44 +0000
Files and hashes: 1: dlIO_x7h4o493PuJ58tvfYmnfJw.crl (hash: 6KdQjSxhKxvWXtPEuTG5/to85cujAPV1Y8ofdD7ylEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5d:25:20:4e:f1:47:09:33:7d:20:bb:72:37:79:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Validity
Not Before: Apr 21 08:00:44 2025 GMT
Not After : Apr 22 08:00:44 2025 GMT
Subject: CN=03dde345b441d853dfd08b4054813bf0b4c7be91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:f4:5a:25:64:af:eb:83:b9:eb:a6:e1:77:
42:b3:34:b4:2f:63:77:82:4d:1e:22:f1:9a:2a:0e:
8b:18:7b:bd:3a:48:6c:96:21:31:9e:21:e1:e1:1b:
ad:a8:dd:79:90:d1:47:d5:6b:8f:14:cd:b9:fd:95:
29:6c:fe:e7:51:b9:43:78:56:35:16:da:1b:32:59:
06:43:4c:80:8c:b2:4b:54:a0:8b:0b:d1:59:01:c8:
e0:75:d3:42:13:4e:07:34:e4:72:3d:8d:7b:d9:07:
5a:9a:46:85:35:e4:9f:7e:ec:4a:83:53:29:a5:b3:
02:6b:66:74:88:06:4f:eb:21:54:e7:99:74:8c:82:
1a:6c:5f:50:92:36:8c:8f:40:3a:d5:04:87:c6:76:
b6:a5:f6:6d:88:2d:87:11:3a:20:90:81:5a:a3:99:
40:05:e1:3f:72:4f:a7:9b:3e:33:f2:89:71:17:21:
d3:55:aa:c8:89:16:57:1b:65:6d:fd:92:e0:40:f6:
4a:c1:61:cc:62:da:5f:06:a8:08:a5:02:8c:58:09:
8b:a8:3e:82:b4:8e:93:dd:09:50:8d:5a:fc:3a:fd:
09:a0:2e:87:63:d5:8e:f1:d5:17:77:4a:15:e1:1b:
93:c3:50:98:8d:61:ba:fd:f7:8f:0d:00:30:99:1c:
2d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DD:E3:45:B4:41:D8:53:DF:D0:8B:40:54:81:3B:F0:B4:C7:BE:91
X509v3 Authority Key Identifier:
keyid:76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:89:4e:8f:d2:47:3b:2c:0f:16:38:5a:bf:f3:6d:f8:1f:4b:
4b:65:2d:ac:ab:cf:b6:e7:58:95:db:dd:01:7e:80:c2:64:5c:
37:43:c9:62:21:02:48:66:ad:b1:a6:95:f1:b2:c2:78:2a:2b:
c8:0b:e7:29:a2:05:2e:33:02:6c:45:e7:65:0d:60:68:d0:a1:
cd:20:06:90:37:24:b0:b6:fc:cc:bb:e0:73:41:39:92:11:ed:
03:5e:9b:dc:25:22:d0:88:87:44:2b:8e:6f:45:82:06:39:c9:
48:cd:7e:cb:21:4b:d3:b3:d2:1e:d6:ed:c7:24:81:a3:23:75:
2b:32:cd:6d:2c:03:72:c0:fb:9e:91:84:7a:8a:e8:2b:c7:f2:
97:89:42:2f:24:32:7a:9f:ac:1a:f1:52:eb:39:ea:78:f5:a2:
63:4d:07:7b:86:37:7c:94:96:76:77:b0:92:5f:99:4a:a3:77:
fe:fe:6d:3d:1c:4c:80:f4:04:3c:df:44:f1:c2:26:81:c7:b5:
c0:f4:84:56:73:96:3e:7d:98:c8:09:23:fe:f5:e3:46:89:d8:
5c:49:06:f6:00:a0:ae:8d:21:df:21:30:5f:bf:cd:ae:2d:06:
1f:5a:c2:a5:00:64:bb:db:8a:5d:76:6b:c8:f6:e2:1a:84:c7:
23:9f:bb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:47:19 2025 by rpki-client