Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File: dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier: XuZ0iWK1hD9DqhyG3yql6is7/mCv2g/UBw8c64OJWGg=
Subject key identifier: BC:C0:36:8A:36:B3:08:3E:75:B0:D4:FB:4B:DB:B1:67:DA:7D:0B:D9
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer: /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial: 01965500B0AF727899EC500FDF5E19279C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number: 0349
Signing time: Sun 20 Apr 2025 21:00:30 +0000
Manifest this update: Sun 20 Apr 2025 21:00:30 +0000
Manifest next update: Mon 21 Apr 2025 21:00:30 +0000
Files and hashes: 1: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: h36UGBaDr+U0uejmjWpPQ3U44qh2x8eqAu7/dcCYQPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:b0:af:72:78:99:ec:50:0f:df:5e:19:27:9c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
Validity
Not Before: Apr 20 21:00:30 2025 GMT
Not After : Apr 21 21:00:30 2025 GMT
Subject: CN=bcc0368a36b3083e75b0d4fb4bdbb167da7d0bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:2c:f1:a4:99:b1:3c:62:1f:8c:72:76:ec:
8a:b5:56:dc:d6:55:da:77:53:6b:0e:2b:bf:61:e2:
c5:6b:61:2a:0e:24:26:d6:fb:d0:74:75:7d:4a:2b:
17:99:cf:40:c9:3a:b3:e0:c4:8a:f3:b2:cb:c6:89:
10:e9:9b:36:5d:e7:5e:df:bc:30:14:bf:8f:90:09:
f4:9e:76:5e:c5:d3:c8:ae:b7:f2:ab:c6:87:44:02:
f4:8c:2b:58:79:64:d8:6a:e1:91:a3:80:b4:97:39:
fe:fa:bf:b6:04:a2:c6:e4:84:b0:51:71:16:98:18:
4b:35:59:67:ad:b8:07:3c:ab:4c:ae:f8:35:2d:c4:
48:f5:3a:04:ed:c0:93:78:24:e8:ae:18:7d:c0:20:
c4:96:f8:f3:4e:da:ce:6a:ec:e1:c4:7a:73:aa:de:
f5:9b:a8:24:bf:15:06:eb:15:83:76:c4:f9:a8:3e:
c8:9b:65:fa:19:e3:5a:01:bb:e5:5e:0d:c5:8d:08:
91:eb:6f:40:78:66:37:7e:27:81:66:7e:f3:90:28:
a4:bb:8a:4a:72:4f:e8:a1:6a:4b:10:7a:47:3a:09:
54:f0:0e:f7:43:94:5a:b2:d1:dc:19:37:30:f8:db:
a1:5f:07:1f:e6:23:d5:50:80:d7:a0:f5:b7:ec:d6:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C0:36:8A:36:B3:08:3E:75:B0:D4:FB:4B:DB:B1:67:DA:7D:0B:D9
X509v3 Authority Key Identifier:
keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7a:20:46:4e:3f:f7:e4:3a:12:f1:d3:54:bd:d0:49:14:30:
58:86:5d:ba:fc:8e:04:f6:51:75:23:f9:22:2c:ec:37:b8:d2:
d6:57:84:94:50:20:77:5a:ac:d5:f5:75:80:ef:21:f9:6f:d4:
38:d1:92:1e:90:e2:21:49:72:a8:33:8a:c6:86:f8:12:52:7e:
04:e5:5e:5d:14:79:6a:98:d9:58:ab:1e:58:e8:dd:6f:21:cf:
76:ee:33:5d:87:b3:c7:c3:fb:31:54:1e:73:02:53:be:e3:e5:
98:18:26:2c:f4:6c:37:0d:f3:17:94:59:6e:f7:a1:04:01:15:
64:14:3a:fa:18:33:d5:f1:ce:27:84:b6:d8:ca:97:8a:6c:27:
b5:0d:3d:4b:83:be:db:15:90:fb:1a:55:04:11:0b:5f:5d:e7:
fb:63:00:b0:62:20:59:72:ce:4f:28:fe:ba:98:79:b0:ca:9a:
40:66:f3:70:c1:fa:ca:a8:7d:ea:11:02:a0:37:dd:ce:09:c2:
84:a1:06:2a:74:2a:bf:ca:ac:53:3c:cb:c4:3d:2c:99:25:a4:
20:7a:9f:9c:72:a2:0a:4b:aa:84:bd:b3:34:bc:d0:f2:7e:e3:
85:90:f6:93:06:6a:d7:71:42:61:59:df:85:a4:b7:13:82:81:
a6:66:5a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:38 2025 by rpki-client