
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
File: dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft (raw, json)
Hash identifier: 0HzhdoTUS52IBBwqSbbbtkfRf9wj56pSEA5LWf7EpxY=
Subject key identifier: BD:B5:2D:5F:C5:22:67:37:A3:60:6B:39:13:30:C0:E6:7C:2A:D5:F2
Authority key identifier: 76:96:23:B8:B3:7F:C8:C5:74:5D:57:5C:09:EF:C4:CE:A8:B6:DA:09
Certificate issuer: /CN=769623b8b37fc8c5745d575c09efc4cea8b6da09
Certificate serial: 01958C60A7999FDF80B34954DE3CA2EC4575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
Manifest number: 0BCD
Signing time: Wed 12 Mar 2025 22:01:39 +0000
Manifest this update: Wed 12 Mar 2025 22:01:39 +0000
Manifest next update: Thu 13 Mar 2025 22:01:39 +0000
Files and hashes: 1: dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl (hash: Aj9ijh2ifRhwZGHG9USI8r6qOprStLe9/VfHFeF+7Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:a7:99:9f:df:80:b3:49:54:de:3c:a2:ec:45:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769623b8b37fc8c5745d575c09efc4cea8b6da09
Validity
Not Before: Mar 12 22:01:39 2025 GMT
Not After : Mar 13 22:01:39 2025 GMT
Subject: CN=bdb52d5fc5226737a3606b391330c0e67c2ad5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:cc:03:35:1d:80:0d:47:2c:cb:40:2b:2e:
d7:3d:f7:cb:ea:07:54:d0:43:95:68:67:05:79:7c:
5f:ba:27:b5:ea:2e:45:88:8a:24:40:bc:67:43:2a:
fb:6f:0a:0a:44:70:ef:25:87:0e:2d:84:b9:db:5d:
8d:18:8c:16:af:cd:ad:c8:30:5a:14:ad:56:d3:0c:
eb:32:70:7b:ed:a3:cb:b6:65:79:ad:ed:b5:d3:88:
d5:a3:dc:6b:02:30:b2:1a:37:6b:ab:91:ff:23:0a:
c4:07:63:28:73:c1:41:aa:3c:1d:b0:68:75:44:35:
c5:8d:c2:49:2d:24:3b:c5:9e:36:16:a1:fa:59:8b:
7c:18:0e:cd:b7:57:87:d5:99:36:d6:b4:e3:76:19:
05:af:8b:cc:c4:58:13:b8:2d:a7:90:03:3e:32:3e:
b0:c7:e6:93:64:78:f3:a0:32:c8:e2:01:82:2d:da:
98:41:a5:9a:06:41:78:fd:74:14:4c:36:ee:b2:67:
b8:99:a2:6f:8b:fb:09:f9:59:9e:d1:68:b0:bf:27:
91:60:8f:15:9b:fb:ae:7f:ba:3b:58:a9:68:83:14:
fe:a9:e5:b4:4a:35:c9:8b:a6:01:f7:10:79:d8:54:
ce:a3:fe:e7:09:76:80:c5:e4:c7:c2:c4:c3:64:d0:
20:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B5:2D:5F:C5:22:67:37:A3:60:6B:39:13:30:C0:E6:7C:2A:D5:F2
X509v3 Authority Key Identifier:
keyid:76:96:23:B8:B3:7F:C8:C5:74:5D:57:5C:09:EF:C4:CE:A8:B6:DA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a0:1a:58:2e:6a:73:7c:b7:03:ec:cc:02:46:bb:b1:27:3f:
36:42:7a:04:09:9a:6d:72:e0:ba:c6:f1:4e:19:c5:97:3b:f7:
a5:77:76:13:d7:9e:ba:94:ff:b5:47:80:75:59:76:b6:72:aa:
9a:87:88:3d:25:c4:0e:ca:8f:66:81:3e:3d:e0:0a:86:78:c8:
19:b9:74:b2:88:6b:a0:d7:40:00:74:78:02:28:f7:1a:21:8e:
7f:b9:c0:e7:c1:a2:f6:e1:12:ed:73:02:c6:e7:6c:1b:00:80:
5b:d6:4f:b5:d7:ce:42:c8:45:91:47:23:b1:49:80:f5:f4:3b:
63:e5:15:06:e8:6b:bd:7b:5a:af:27:0a:cd:09:c3:2f:88:1f:
7e:7a:81:24:bf:79:86:33:b1:ae:0a:c6:b4:b3:76:09:5d:da:
77:cc:5e:40:0e:db:be:3b:3a:0e:36:c4:a1:85:ec:09:04:6f:
12:6e:c4:dd:24:48:60:89:51:db:7b:27:c8:33:c1:27:ee:8b:
be:42:30:76:aa:e4:52:fe:ec:62:d6:46:e9:e8:96:e7:90:53:
9d:59:06:ea:52:28:03:10:40:db:51:36:5a:60:70:5e:1e:8d:
c1:f9:4d:8d:c6:64:15:2b:29:57:a2:f7:cd:89:2e:99:0e:0a:
fd:88:fe:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:39 2025 by rpki-client