Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File: dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier: GWslP04wRYsaZRu2JZqf0rLSFY4/zZKdV9nF2Kdb6Wc=
Subject key identifier: 6D:A6:4D:08:BC:9B:3C:D6:B2:FC:A4:67:66:D0:58:BC:78:D3:5F:BF
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer: /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial: 01958C29651DBC05EDBE6C3DDBE6841D008E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number: 02E1
Signing time: Wed 12 Mar 2025 21:01:17 +0000
Manifest this update: Wed 12 Mar 2025 21:01:17 +0000
Manifest next update: Thu 13 Mar 2025 21:01:17 +0000
Files and hashes: 1: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: kpoWPjm/gmDLxMQQLYtf8C2XvnhuuyRk9lXwBb5RUBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:65:1d:bc:05:ed:be:6c:3d:db:e6:84:1d:00:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
Validity
Not Before: Mar 12 21:01:17 2025 GMT
Not After : Mar 13 21:01:17 2025 GMT
Subject: CN=6da64d08bc9b3cd6b2fca46766d058bc78d35fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:17:f9:25:6a:1e:1c:ba:e8:99:db:60:5c:
b0:0a:c2:54:82:82:7d:ea:89:14:bc:b4:61:af:7a:
e0:25:27:e2:a4:ae:4c:d8:e0:da:30:07:b4:fc:9d:
1a:a9:08:21:99:a2:13:2c:23:61:d1:ac:58:7f:7a:
96:b7:5a:7e:66:36:ee:ee:53:b9:24:95:30:72:42:
74:7d:8e:e1:27:d7:0a:a3:85:ef:34:17:ef:c5:19:
df:d9:05:cb:a8:2c:9e:23:05:a9:d4:61:95:90:b7:
b7:ce:da:17:25:8f:75:38:7e:59:f4:b7:c1:4a:e2:
7d:ee:49:15:8d:f5:6c:86:f8:41:41:e3:37:f8:c2:
50:25:50:d1:3b:bd:17:c8:0c:b8:a5:78:fa:5b:39:
ad:fa:e1:85:2e:af:7e:83:be:59:8d:10:0d:fb:d0:
96:e5:4d:2a:1a:63:bd:0e:aa:89:5d:43:01:c2:2e:
99:65:85:3b:7f:5c:0d:2b:e8:d5:8b:99:06:51:67:
88:29:db:f1:3f:82:bf:b9:56:87:d8:0f:8a:c5:bb:
6d:70:8d:d1:6c:42:8f:d1:56:c3:1b:9a:ec:18:ee:
2c:b5:a4:48:30:ba:7f:11:b8:3b:13:1c:6e:ef:54:
63:00:29:b0:87:d1:fe:a2:df:94:90:9c:44:93:69:
5b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A6:4D:08:BC:9B:3C:D6:B2:FC:A4:67:66:D0:58:BC:78:D3:5F:BF
X509v3 Authority Key Identifier:
keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d4:a2:90:1b:b1:09:52:2c:18:8f:43:08:3f:89:f6:22:50:
dd:71:eb:4d:25:87:b4:d2:1a:f2:f1:4c:54:8e:a9:81:fd:03:
d3:be:dc:e2:bf:3c:38:69:97:58:a4:20:e0:41:07:52:71:b5:
3c:26:22:42:72:a1:26:e1:ea:ba:fb:8f:09:9c:d8:81:d6:c2:
cd:3c:08:14:6f:25:99:69:6e:d5:b3:84:75:fc:2e:91:e8:cc:
f7:f0:96:41:ab:d3:8a:73:33:0c:88:d0:3c:58:c7:dd:dd:3d:
cf:fa:4b:cc:c5:a7:bd:98:10:06:13:96:f1:1a:fe:87:b1:06:
89:f1:63:0d:96:a5:8a:c8:b5:00:1f:ab:71:dc:0d:31:1c:c0:
e0:79:27:a0:6a:bc:d9:16:5f:45:fc:1a:5a:cb:96:1f:8d:ff:
0d:fa:13:6f:5c:5f:09:62:5f:31:e2:3b:e8:f5:55:83:0a:08:
a4:87:6f:4a:98:32:dd:b7:49:a9:3e:7d:dc:e8:33:43:4b:b6:
2c:f7:43:1f:cc:1b:67:66:8b:12:3a:6c:8a:ae:99:08:ed:6b:
8d:d8:64:8e:16:a3:c7:9c:e1:cd:cb:24:5e:46:b2:a0:63:47:
52:0f:54:89:02:cd:29:c5:a5:f7:d4:1a:d8:d6:71:fa:86:d3:
59:de:83:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:13:17 2025 by rpki-client