Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
File: dCadQgSZl1rpNPNM45WTgRTJuns.mft (raw, json)
Hash identifier: FEb6rtPT641ahFRcKmxOmJiJDlXa8+NhoQdzKUYQVik=
Subject key identifier: 2E:BF:EC:70:E6:E8:3F:06:98:22:77:D4:65:97:F6:E5:28:E3:80:84
Authority key identifier: 74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B
Certificate issuer: /CN=74269d420499975ae934f34ce395938114c9ba7b
Certificate serial: 019643D66D0369797CF2EA669831FB0AAC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
Manifest number: 1049
Signing time: Thu 17 Apr 2025 13:00:48 +0000
Manifest this update: Thu 17 Apr 2025 13:00:48 +0000
Manifest next update: Fri 18 Apr 2025 13:00:48 +0000
Files and hashes: 1: dCadQgSZl1rpNPNM45WTgRTJuns.crl (hash: SPsQpkU2CNyZoYZ2HltTzAe6juCkOCy4apZIiB8tlBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:6d:03:69:79:7c:f2:ea:66:98:31:fb:0a:ac:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74269d420499975ae934f34ce395938114c9ba7b
Validity
Not Before: Apr 17 13:00:48 2025 GMT
Not After : Apr 18 13:00:48 2025 GMT
Subject: CN=2ebfec70e6e83f06982277d46597f6e528e38084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:b0:32:be:12:7e:d6:6d:b7:11:a2:47:89:
ac:01:28:b6:45:21:27:64:a8:b1:70:c3:06:4e:03:
98:8a:30:8d:65:df:22:57:62:b7:04:9d:6f:da:75:
99:13:d7:a8:54:d4:16:52:07:bd:aa:ef:40:e2:cf:
8d:ac:a2:ce:99:c8:b1:4a:ae:12:6f:d0:20:a7:1c:
dd:cb:db:6b:fa:b1:db:a7:76:42:eb:85:af:ab:8f:
ed:d9:aa:6b:b7:5f:ea:d4:de:8e:5e:60:b4:5c:42:
54:aa:60:79:3e:ad:04:82:28:62:94:1b:23:a6:11:
86:9b:db:c9:2a:e0:0d:62:47:d8:51:15:58:a4:7b:
70:23:63:a4:f0:3e:3e:9e:c2:8f:7c:8e:2c:ab:45:
76:80:39:dd:6c:8b:f0:22:f5:0c:95:f0:d0:f3:f1:
dc:bb:23:8e:a8:b8:16:6e:dd:08:db:5b:c6:af:38:
5c:4f:68:3c:25:76:bc:b9:3f:8e:e9:06:4c:fd:22:
61:e6:44:26:a8:8d:6f:b3:69:ba:d3:dd:55:a3:25:
ef:90:3e:aa:21:17:18:e3:39:3f:0d:29:f2:e3:95:
65:ff:bb:d8:d7:9d:fb:61:7a:e7:08:79:91:0a:58:
74:11:b7:88:29:c5:06:40:05:ca:00:81:29:b9:97:
f3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BF:EC:70:E6:E8:3F:06:98:22:77:D4:65:97:F6:E5:28:E3:80:84
X509v3 Authority Key Identifier:
keyid:74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9b:3c:88:02:9e:40:41:4f:61:ce:17:df:59:fc:a8:e8:e9:
d0:17:43:9f:6a:f2:59:f8:4e:38:d4:54:8d:28:b4:93:05:0f:
cf:6f:56:c5:ed:cc:b7:87:f6:b9:97:b2:15:2e:45:a2:1f:ee:
6b:1d:0f:ec:92:2b:dc:fd:75:91:33:ec:f2:ff:0d:53:3d:d4:
2f:d4:0c:22:1c:f9:20:3c:2e:38:ae:db:c2:b1:d2:c5:bf:48:
88:5d:8a:6f:62:cf:81:1e:48:a2:65:44:33:60:37:13:06:30:
74:ad:ab:f5:69:5e:a9:c2:8f:d1:84:e0:15:b8:4d:be:8e:f9:
13:34:20:94:10:70:83:49:32:77:b6:b5:61:36:bd:df:09:34:
09:3c:ef:64:59:e4:3e:8d:95:7d:af:3f:14:eb:54:95:6e:8d:
64:5f:ee:d1:48:34:b6:ba:45:8a:e7:77:8e:5b:62:76:34:b9:
e9:19:28:ef:53:95:89:51:b4:7f:60:c4:ed:61:cc:ef:cf:a9:
0c:b4:3c:bb:1b:5f:cc:ae:df:3f:bc:09:fb:99:cd:fa:9b:91:
5a:9b:b6:ab:12:b9:df:95:9f:d3:ed:7e:61:ff:1f:bd:51:d9:
c3:19:5e:e9:16:cf:16:6c:92:44:ff:aa:7e:eb:b6:cc:7d:07:
58:b8:0d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:47 2025 by rpki-client