Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
File: DpFsLKNrUAlu4v5EuUUpwto8PsI.mft (raw, json)
Hash identifier: tCRmX21OaNdPI+aP7cd6cUjf0PCtukdXZ09Kg8tpSvs=
Subject key identifier: 03:1D:49:1A:C6:81:69:31:26:75:46:18:38:F3:1C:3D:DA:B0:A1:AC
Authority key identifier: 0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2
Certificate issuer: /CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2
Certificate serial: 019512107D8AFC94D1970DE17E924157802F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
Manifest number: 01DD
Signing time: Mon 17 Feb 2025 04:00:25 +0000
Manifest this update: Mon 17 Feb 2025 04:00:25 +0000
Manifest next update: Tue 18 Feb 2025 04:00:25 +0000
Files and hashes: 1: DpFsLKNrUAlu4v5EuUUpwto8PsI.crl (hash: 40KQTdlEdcqQMrnICyQY9xIiNZlLOXmfnWIv5myIELI=)
2: QGeFBaZMcPUbZlccMoyAnOzy3gE.roa (hash: 7YeLQ57g/FUFF/JvQDJhVLUE18/59LuhhMGoWNanM4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:7d:8a:fc:94:d1:97:0d:e1:7e:92:41:57:80:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2
Validity
Not Before: Feb 17 04:00:25 2025 GMT
Not After : Feb 18 04:00:25 2025 GMT
Subject: CN=031d491ac68169312675461838f31c3ddab0a1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:83:35:a7:12:08:5c:1f:e8:48:ce:e8:5b:
cc:40:cc:8d:eb:38:58:9e:02:99:37:51:88:37:76:
1f:11:ab:43:fa:f3:1d:c3:45:fc:16:34:a3:a3:76:
1c:78:01:9a:aa:e1:f2:be:7a:f7:3a:73:79:d6:95:
30:6a:dc:87:aa:57:2e:9d:7d:f6:52:66:93:cb:03:
fa:8b:93:4f:d6:37:9e:aa:c5:0b:73:a6:39:4d:a5:
b2:9b:e0:84:01:a0:04:e4:2b:4c:a3:96:3b:a6:82:
c2:c4:49:e8:05:72:dd:1a:ec:37:44:5a:54:63:85:
7c:78:bb:ba:00:e8:51:90:47:f5:0a:74:91:58:92:
df:02:ee:2c:05:5f:40:d9:51:b6:68:2e:aa:63:c0:
c8:ee:e8:04:0e:3d:bd:82:ab:7a:1b:3e:c6:01:28:
2e:5f:c4:ed:23:61:a3:60:a2:aa:f6:f4:60:73:6f:
e2:95:f5:9b:36:b5:a2:f0:a0:c1:89:52:1a:0c:79:
6d:48:cc:1b:b9:a7:66:9d:3f:d7:a8:84:ae:27:8d:
5a:ba:71:84:95:7a:b4:bd:0c:2b:d7:a4:43:a6:c2:
de:56:f8:3f:68:dc:62:3f:33:fd:1f:f1:70:8a:38:
a3:70:b3:0b:9b:b9:08:5a:8f:91:67:7d:e0:c5:0f:
0e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1D:49:1A:C6:81:69:31:26:75:46:18:38:F3:1C:3D:DA:B0:A1:AC
X509v3 Authority Key Identifier:
keyid:0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:98:bc:b3:8f:ee:52:83:0f:50:59:43:3a:98:c8:47:a1:ca:
9e:7e:21:1a:b5:95:79:45:58:bf:e7:1c:3d:82:6c:0b:ba:a2:
ff:2d:a9:58:66:4c:a5:ce:bd:7d:34:2a:25:fa:ad:86:11:7c:
21:fe:5f:6b:ab:ca:4e:c1:c9:45:7a:63:32:34:18:ea:84:e6:
c4:78:fb:4d:91:eb:67:8a:23:e9:f3:82:01:38:35:3d:07:9d:
4d:c4:38:45:74:87:ab:4b:6b:ea:de:7c:31:7a:10:50:24:7a:
2b:c7:bc:4d:e5:9a:01:39:b7:bf:f4:16:ad:05:ba:b7:b3:67:
d0:de:1e:45:d8:6c:dc:f7:33:3d:7c:2f:03:95:db:33:e3:49:
db:4b:35:5e:66:f2:01:e6:99:20:6a:41:54:17:c8:5c:fd:6e:
35:b3:5f:92:0a:5d:c4:ef:1c:b6:b9:9d:57:82:a1:1b:4d:63:
dc:12:d1:4c:10:73:ad:14:95:18:cf:4c:4e:9d:b3:cb:d9:f3:
74:9f:74:d5:1f:a4:ae:cd:b8:db:c2:f8:d4:95:c4:89:37:21:
fa:2c:b6:17:b3:39:6b:20:1c:ee:b4:61:03:ed:c9:92:a7:43:
f0:f6:1f:2e:a1:bc:b1:e6:56:da:e5:cd:ac:7e:1f:0d:0b:c7:
56:92:fa:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:22 2025 by rpki-client