Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/51d624-184e-4037-8c0f-71290deec53b/1/dL_NdUDQ8V7CXc5ZO9dHwntzbe0.mft
File: dL_NdUDQ8V7CXc5ZO9dHwntzbe0.mft (raw, json)
Hash identifier: dW76DU3nhna+kp4IrBMlWj5kzO89ic9R18S3YU3ZjLw=
Subject key identifier: 43:88:89:8A:45:F0:3F:9F:14:BE:D6:76:77:EF:D7:34:D7:E6:C4:1E
Authority key identifier: 74:BF:CD:75:40:D0:F1:5E:C2:5D:CE:59:3B:D7:47:C2:7B:73:6D:ED
Certificate issuer: /CN=74bfcd7540d0f15ec25dce593bd747c27b736ded
Certificate serial: 019511A2E76D62BC321627D451C8024C462E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL_NdUDQ8V7CXc5ZO9dHwntzbe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d624-184e-4037-8c0f-71290deec53b/1/dL_NdUDQ8V7CXc5ZO9dHwntzbe0.mft
Manifest number: 06DC
Signing time: Mon 17 Feb 2025 02:00:43 +0000
Manifest this update: Mon 17 Feb 2025 02:00:43 +0000
Manifest next update: Tue 18 Feb 2025 02:00:43 +0000
Files and hashes: 1: dL_NdUDQ8V7CXc5ZO9dHwntzbe0.crl (hash: VapC5EVzlM9KwKVG4Ro5ZzCuwZuoGAGi/K40dQhiLAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d624-184e-4037-8c0f-71290deec53b/1/dL_NdUDQ8V7CXc5ZO9dHwntzbe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/51d624-184e-4037-8c0f-71290deec53b/1/dL_NdUDQ8V7CXc5ZO9dHwntzbe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dL_NdUDQ8V7CXc5ZO9dHwntzbe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:e7:6d:62:bc:32:16:27:d4:51:c8:02:4c:46:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74bfcd7540d0f15ec25dce593bd747c27b736ded
Validity
Not Before: Feb 17 02:00:43 2025 GMT
Not After : Feb 18 02:00:43 2025 GMT
Subject: CN=4388898a45f03f9f14bed67677efd734d7e6c41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:12:47:91:d6:c5:76:4c:00:51:96:74:d5:
4d:10:27:18:fd:92:04:3b:22:15:73:8f:58:af:5f:
24:92:9c:4c:92:9b:d6:ad:5a:83:60:c6:f9:db:9b:
63:47:46:64:3a:ac:5c:24:93:df:d4:35:25:81:26:
21:50:ba:74:e5:e4:bd:f0:e2:ab:e8:c5:a8:78:a7:
bb:99:3f:b0:f1:86:5b:6f:28:c9:c1:77:6c:c2:e0:
66:54:3d:eb:b7:3c:6b:b1:52:66:2a:bc:05:36:b1:
cf:c5:e7:9f:36:ea:a1:f7:14:a4:86:d7:e6:4f:22:
3a:f2:36:3a:52:4f:f3:ac:e3:3c:0e:8e:50:64:d1:
d6:47:8f:66:40:fd:e0:95:cd:1c:ef:ef:1b:00:b8:
0e:7d:32:41:2f:95:e6:13:5c:dc:66:f2:48:f3:45:
0e:46:f2:db:00:41:a8:f6:4a:81:b8:d5:ac:fe:d0:
66:8d:96:4c:81:9c:2b:75:18:93:95:16:aa:45:07:
64:35:27:36:f5:65:03:73:72:60:c2:50:c4:cf:eb:
57:99:cd:38:60:9b:d0:37:af:c4:c0:7a:a9:0e:c4:
04:c1:53:e5:37:5d:45:8e:67:9b:de:01:2a:ba:a7:
ca:82:d6:43:ab:11:fc:21:18:39:7e:bc:a6:29:53:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:88:89:8A:45:F0:3F:9F:14:BE:D6:76:77:EF:D7:34:D7:E6:C4:1E
X509v3 Authority Key Identifier:
keyid:74:BF:CD:75:40:D0:F1:5E:C2:5D:CE:59:3B:D7:47:C2:7B:73:6D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL_NdUDQ8V7CXc5ZO9dHwntzbe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d624-184e-4037-8c0f-71290deec53b/1/dL_NdUDQ8V7CXc5ZO9dHwntzbe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d624-184e-4037-8c0f-71290deec53b/1/dL_NdUDQ8V7CXc5ZO9dHwntzbe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:0a:4f:35:6b:54:c1:cf:fb:18:73:63:88:47:32:35:83:de:
19:0d:de:03:e9:8d:ae:cc:4e:39:20:46:fb:d0:af:b6:88:71:
24:e5:58:66:01:a2:c1:08:77:7c:ef:a4:fa:90:e3:ce:fe:3e:
24:3a:5e:cd:d3:c9:f2:3d:60:ad:1f:7a:69:96:6b:d4:ed:25:
25:ac:2b:cc:99:39:35:9a:05:91:b9:e0:ea:7f:04:72:b2:b7:
5b:c4:a6:09:91:fa:b4:d1:f6:cc:b5:73:ca:d9:fc:2c:71:88:
b4:b5:24:66:27:fa:13:50:0f:eb:70:ed:e7:26:74:62:d7:98:
3e:66:33:7f:59:39:f0:15:86:98:32:73:ee:4c:33:86:1b:ce:
12:0e:02:8b:97:3c:38:4a:79:4b:79:fc:ab:60:1c:7b:e3:cc:
8a:4b:1b:fb:1c:40:23:50:35:df:6a:2f:79:60:c3:3e:69:0f:
1e:80:2d:88:db:09:a8:a9:c7:7e:bb:cb:23:ca:88:48:99:fb:
30:88:e3:e6:3f:64:4b:c6:78:1b:d2:4b:b4:40:f1:9d:18:30:
f3:3b:c9:fa:05:2d:b9:e3:c3:a0:3e:cb:bd:54:78:02:44:f5:
07:86:24:54:c6:c6:d4:bc:7d:6c:66:e8:b8:6b:8c:6a:42:42:
70:68:21:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:03 2025 by rpki-client