Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
File: msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft (raw, json)
Hash identifier: RZnKWUntxlONoG5qIRkCuo2cqmNKeAlvQCGgKoY9zu0=
Subject key identifier: 89:3B:E4:A8:7C:AF:7A:75:BC:B2:A7:61:B0:F3:B3:F9:3E:DF:BC:1F
Authority key identifier: 9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
Certificate issuer: /CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Certificate serial: 01965011E18C318C66EFFF3B39D6BB827577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
Manifest number: 1170
Signing time: Sat 19 Apr 2025 22:01:11 +0000
Manifest this update: Sat 19 Apr 2025 22:01:11 +0000
Manifest next update: Sun 20 Apr 2025 22:01:11 +0000
Files and hashes: 1: msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl (hash: TMxCK/D0ZDq1KlArhg8RxlsCmUl1RrT1M7CXGyax27E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:e1:8c:31:8c:66:ef:ff:3b:39:d6:bb:82:75:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Validity
Not Before: Apr 19 22:01:11 2025 GMT
Not After : Apr 20 22:01:11 2025 GMT
Subject: CN=893be4a87caf7a75bcb2a761b0f3b3f93edfbc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:63:ac:85:ae:6d:73:20:05:84:39:5d:8e:3f:
d0:92:da:48:b3:e2:d7:41:cc:a5:60:a2:a1:64:48:
1a:bd:4c:6b:e2:b5:1c:09:7a:ce:0d:1a:96:6b:12:
d5:40:5e:7b:65:99:06:fd:58:fd:c0:b9:86:6d:59:
d1:78:64:1b:07:2b:e9:b4:1f:5c:b5:40:76:9d:f6:
0d:90:b3:f0:52:cc:f1:54:6c:06:af:df:a3:04:f9:
42:51:fe:26:c5:a8:c9:9f:bc:16:5d:b7:f4:86:f8:
bd:9d:7a:d9:ff:01:8d:c5:53:d5:65:43:ef:a3:26:
3a:47:09:16:41:ce:d3:cb:d1:77:fc:3b:6b:c8:da:
58:b2:29:8f:00:3e:ce:6b:ad:9e:85:de:07:80:b3:
30:ed:5c:d1:d0:b9:47:74:e3:06:ac:79:d6:e9:ab:
59:d8:44:57:cf:f2:9a:f5:95:76:2a:56:81:78:3f:
c0:94:b6:cf:d0:87:37:df:2d:0d:8e:4e:f3:f5:7c:
3b:44:5c:ac:f1:c4:ee:e2:5a:5b:54:b8:16:04:1c:
1c:2a:d4:68:a4:87:d5:ef:a7:4f:73:73:72:ea:28:
50:c9:80:47:f7:76:71:ba:07:5a:42:12:cd:66:49:
32:23:45:75:84:6f:bf:ff:67:98:35:f4:d1:3b:b8:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3B:E4:A8:7C:AF:7A:75:BC:B2:A7:61:B0:F3:B3:F9:3E:DF:BC:1F
X509v3 Authority Key Identifier:
keyid:9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:be:2b:43:81:e6:3a:65:a8:06:40:db:ed:f5:7a:74:e8:a8:
d1:8e:3c:56:53:26:ee:ec:19:fb:31:32:1c:12:52:3e:6e:fe:
96:e9:d6:cc:4e:f6:7c:6b:0f:f2:26:b6:e9:6a:62:e9:90:ca:
fe:bc:67:24:b0:42:63:d7:74:23:fe:31:1b:dc:5b:37:83:73:
ec:dc:a4:ed:4c:aa:66:71:22:66:42:6d:f5:3a:50:9b:90:35:
90:c4:9b:24:e7:18:c4:1b:ad:89:1c:6e:dc:ad:a6:2d:2d:a1:
c8:01:10:f7:f5:0e:48:f6:c6:4a:c2:e1:5a:b0:e6:f0:ab:27:
b5:be:c9:25:0f:5d:98:01:9a:07:b6:cb:49:bc:d6:67:12:3e:
33:3f:6c:f8:cc:87:eb:4c:1f:e9:a1:b3:51:28:fc:94:97:1e:
d5:84:49:b9:ca:55:cb:e8:e6:34:fe:c6:8b:6a:9a:83:97:68:
b4:5d:df:5a:ee:55:e6:34:1c:23:67:c7:d5:35:ee:b3:1f:d7:
5e:42:98:53:d6:e7:d3:32:1f:c3:1b:c3:c4:a6:ad:71:b8:fc:
ef:b4:3a:b2:f4:47:ab:5f:43:f4:2e:0b:c3:e2:dd:8b:69:6a:
37:3a:6a:62:43:fb:f0:a3:f5:cc:a6:f4:10:2f:e0:1e:04:fc:
6d:38:d4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:14:59 2025 by rpki-client