Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier: g0YGAZ/7j/CgT/6MxEx2YPvJ15nlLPw1kFSOHtn9HPE=
Subject key identifier: CC:F1:34:03:2D:FC:D7:8A:03:E1:26:0B:7B:19:CE:60:86:00:A5:B4
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial: 019653B6EB368CBAC8C1F924B24B3A6AA354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number: 08E8
Signing time: Sun 20 Apr 2025 15:00:18 +0000
Manifest this update: Sun 20 Apr 2025 15:00:18 +0000
Manifest next update: Mon 21 Apr 2025 15:00:18 +0000
Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: hHKQzW/pxVoTZZUG17QerGevS6x75x7hwzMepdtVnAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:eb:36:8c:ba:c8:c1:f9:24:b2:4b:3a:6a:a3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
Validity
Not Before: Apr 20 15:00:18 2025 GMT
Not After : Apr 21 15:00:18 2025 GMT
Subject: CN=ccf134032dfcd78a03e1260b7b19ce608600a5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:25:0b:38:96:e5:04:4f:6e:6e:6d:83:d4:69:
3a:5c:59:db:0c:6d:7f:6e:53:08:c2:da:5d:6d:63:
59:24:75:de:a5:7f:0b:a6:b6:7c:f1:8f:20:53:88:
e0:80:78:e2:52:1f:77:6f:ef:e2:7d:77:c1:88:21:
29:03:d9:a1:f0:7a:28:41:be:50:bc:73:50:ce:b5:
df:9c:5c:55:c1:69:d8:23:3c:6f:5a:96:30:4d:32:
ce:e8:05:5e:83:91:d8:93:98:0f:0b:84:59:0e:5d:
62:d0:73:60:60:42:3e:e3:47:81:78:97:c4:9e:b5:
12:4c:ff:a6:c1:df:45:17:46:8d:b5:8e:cc:d7:27:
82:60:cb:b6:13:91:c8:b4:53:aa:08:fd:28:3d:74:
e2:8c:c1:d1:e1:90:d4:d4:ef:bb:0d:84:6d:54:1d:
67:90:a6:3b:eb:ca:74:a2:0b:dc:fd:51:7d:73:37:
64:7c:11:29:2c:2c:4d:79:fb:c9:13:57:c9:6b:81:
35:04:fb:02:78:6e:d7:04:57:8c:10:d1:3d:05:e8:
a8:d8:7a:da:cc:f6:ed:3d:b3:bd:e3:aa:f0:b0:4c:
3b:81:e2:3f:82:0e:2c:8d:b4:97:1a:36:93:84:2e:
bf:31:53:ee:1f:de:6d:89:c8:83:05:e5:6d:1e:99:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F1:34:03:2D:FC:D7:8A:03:E1:26:0B:7B:19:CE:60:86:00:A5:B4
X509v3 Authority Key Identifier:
keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:85:9c:59:23:4c:39:8e:3c:97:9a:08:05:40:2f:fb:a0:ba:
7d:26:49:78:75:a2:8d:af:db:38:5d:92:6d:a7:5d:ba:33:13:
e6:04:5e:84:be:a6:b5:5c:01:60:74:22:06:d9:b0:1d:10:1b:
03:59:a2:12:5a:58:2b:93:78:0c:af:49:47:c1:ce:01:06:0b:
9b:5f:52:50:ea:ce:d7:d0:27:49:74:af:be:72:95:dc:59:ab:
64:ba:d7:fd:f8:76:3a:b9:a7:3e:29:f9:d4:db:a8:26:12:32:
2f:3c:c5:c2:c9:22:f2:03:99:d5:e1:0e:10:1b:42:5d:da:e0:
f6:0b:a8:33:e6:85:fd:2f:49:1e:f9:46:06:3b:a7:86:c0:6e:
fd:2d:27:45:b0:be:d4:dc:8e:f2:0b:cb:3e:9d:7b:93:23:40:
f2:64:0f:36:e7:e9:b9:5d:1b:65:12:db:bb:f8:d8:69:c7:d4:
d8:52:6f:1e:f3:51:b1:3c:ee:d1:e6:83:1d:45:9a:71:a8:74:
5a:af:ba:77:de:a7:23:e5:a6:63:23:c2:5c:f2:44:cd:af:7e:
fb:67:5c:f6:c3:f5:4b:e2:12:ce:2c:35:61:5a:e5:04:a4:d3:
59:c1:a9:6d:88:15:67:32:10:a2:28:fb:53:3a:00:09:21:ab:
75:2e:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:42 2025 by rpki-client