Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
File: dpcDbZO0rGcPD_xakM6ral-LwpU.mft (raw, json)
Hash identifier: Cfqg6UybUAe87BHI3I2U2bne+aD5tvA/EYP6IBsAFx4=
Subject key identifier: 7F:58:4F:F1:83:D8:D2:F7:B8:6E:6D:C3:A0:7A:92:85:64:4E:B9:87
Authority key identifier: 76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95
Certificate issuer: /CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
Certificate serial: 0194C3888B88CF7C11761E6CCB9ADFCB13D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
Manifest number: 0C4C
Signing time: Sat 01 Feb 2025 22:01:33 +0000
Manifest this update: Sat 01 Feb 2025 22:01:33 +0000
Manifest next update: Sun 02 Feb 2025 22:01:33 +0000
Files and hashes: 1: dpcDbZO0rGcPD_xakM6ral-LwpU.crl (hash: UGLqXFANNbKkrrrP6H2SU/QbnE+GYsZfgL5eRs54yZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:8b:88:cf:7c:11:76:1e:6c:cb:9a:df:cb:13:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
Validity
Not Before: Feb 1 22:01:33 2025 GMT
Not After : Feb 2 22:01:33 2025 GMT
Subject: CN=7f584ff183d8d2f7b86e6dc3a07a9285644eb987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:14:f7:26:ed:d6:f1:2f:92:35:2c:c4:ae:
41:b4:67:30:f0:de:92:f2:00:b3:7c:ce:6d:d6:02:
a0:08:88:d7:10:27:66:7d:6d:b3:2c:77:ca:b3:a8:
4e:71:9c:41:2b:81:87:62:f9:5e:51:db:fd:b5:fc:
2f:47:25:4b:17:82:da:df:ea:09:12:69:ba:c5:d6:
8c:a6:1e:3d:c2:2c:72:fe:02:8a:bb:fd:ab:c1:75:
2a:da:44:49:81:e1:85:84:ba:1e:43:d7:8e:31:62:
6b:4f:99:1e:f5:4d:e5:df:48:1c:f5:2f:4e:67:5d:
c5:0c:32:3d:41:f0:50:37:82:c6:0b:4b:99:56:17:
53:f8:0f:57:9e:aa:ff:54:b5:7b:88:ce:94:f6:c1:
cd:97:de:56:50:01:a8:99:ea:3a:b7:16:ac:ba:25:
bd:cd:70:62:37:7d:64:3b:be:1b:fc:70:20:56:7f:
56:a3:e7:64:ef:1a:cf:46:db:7c:5f:2f:c0:bf:2c:
5f:df:7b:b7:2d:78:03:e4:ce:ab:09:1f:25:1e:f7:
b2:4d:6b:36:9f:04:13:42:63:78:6a:9a:9d:a4:37:
fe:d2:4f:8d:f6:5a:d0:bd:94:41:28:93:db:bb:89:
ba:ff:91:39:2c:1f:10:8b:53:33:ff:e8:13:90:aa:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:58:4F:F1:83:D8:D2:F7:B8:6E:6D:C3:A0:7A:92:85:64:4E:B9:87
X509v3 Authority Key Identifier:
keyid:76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:73:75:6e:a2:7b:d4:14:d3:18:b5:0b:91:39:00:32:8d:93:
bf:51:99:25:74:f5:29:ea:5e:6f:0c:fc:2a:12:c1:9e:ef:29:
c1:05:4a:6e:0c:21:15:90:81:e8:51:d4:ed:3f:9e:4b:26:fa:
db:49:87:d0:d5:a9:d2:7c:a4:2d:05:18:18:6d:62:59:37:c5:
67:07:19:83:20:88:fc:1c:77:72:12:b9:ad:48:6b:21:d4:c1:
c7:b5:e6:0d:d9:d4:88:04:b6:5f:fa:dd:86:57:47:6d:2f:3a:
99:36:e6:11:99:28:8c:35:04:75:3b:b0:b1:bc:52:0a:74:1b:
6b:27:02:d6:03:4f:80:ec:f9:65:68:a2:09:e5:59:48:e0:91:
15:92:13:92:be:33:bd:37:d9:71:6e:8d:d2:a1:f3:94:51:7f:
e1:46:44:6a:a2:1e:76:6a:09:33:d3:9a:6c:a4:cc:5c:2c:91:
9f:e1:78:55:94:29:0e:16:f4:fe:0a:dc:38:e9:e6:d4:13:a0:
5e:fe:c9:fd:4c:b2:d3:03:65:cd:fb:af:06:ab:a5:40:e6:83:
dd:d8:e6:a3:5c:b1:90:d2:ef:e3:82:ba:56:12:db:31:a1:1e:
cb:07:c3:3b:87:2c:05:f1:1e:13:03:11:c3:00:d8:8f:25:cc:
f2:c0:5f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:25 2025 by rpki-client