Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
File: dbciFa46YYMFwSMUKzSd8mZyoU0.mft (raw, json)
Hash identifier: kAkcVp/9e5VTtbrpTnN2/TaKkqNvLdtOxPB57ujTHRI=
Subject key identifier: 7E:62:CA:F1:B7:A5:07:70:1E:84:2C:06:D5:B8:19:A0:AF:FE:62:FB
Authority key identifier: 75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
Certificate issuer: /CN=75b72215ae3a618305c123142b349df26672a14d
Certificate serial: 01963FC24AF72313709137165BE79D3F72D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
Manifest number: 01E4
Signing time: Wed 16 Apr 2025 18:00:19 +0000
Manifest this update: Wed 16 Apr 2025 18:00:19 +0000
Manifest next update: Thu 17 Apr 2025 18:00:19 +0000
Files and hashes: 1: dbciFa46YYMFwSMUKzSd8mZyoU0.crl (hash: w4JgxbUA1I/j241qpWn7Ut0oKnaqWYjdn3SXrfN7BR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:4a:f7:23:13:70:91:37:16:5b:e7:9d:3f:72:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b72215ae3a618305c123142b349df26672a14d
Validity
Not Before: Apr 16 18:00:19 2025 GMT
Not After : Apr 17 18:00:19 2025 GMT
Subject: CN=7e62caf1b7a507701e842c06d5b819a0affe62fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bc:10:27:a0:b0:51:d5:f1:59:3e:98:24:54:
3f:4a:81:3b:a8:6e:26:3b:32:d7:cb:cb:f5:7b:d8:
10:58:21:06:06:27:f8:d5:09:ac:2e:0e:b0:3a:eb:
4e:67:90:66:f9:c2:76:b6:91:f8:98:0b:c9:c9:60:
9a:c0:30:b4:ff:bb:ac:11:ef:2d:73:db:90:a4:cb:
5e:b4:cc:9b:35:2a:b3:56:d4:83:64:52:f8:7c:76:
fc:ff:55:88:ca:c1:fa:f3:76:d6:97:27:df:07:1d:
80:20:d8:30:de:4c:ba:11:30:5e:8e:3a:a2:1f:6c:
54:9b:b3:00:72:f9:45:d5:70:e4:fb:ec:40:88:63:
96:a3:a4:04:ad:6c:00:e9:c9:4a:b1:c4:12:53:1c:
bb:45:95:08:33:00:40:d7:44:41:5e:64:68:0e:ee:
6e:ad:78:91:5c:2f:43:cf:a5:40:d0:d3:53:9f:bd:
e9:8e:6a:d5:06:27:10:ba:b0:1e:2b:24:d4:28:3e:
78:47:3c:70:0b:0f:bb:5a:dd:10:88:f3:55:47:c4:
b7:4a:58:bf:20:5b:cb:b7:5f:0c:94:e4:b9:85:03:
bf:6b:80:48:90:a0:54:b6:2a:c8:4d:d2:a4:0a:ee:
71:e1:01:7c:17:7c:3f:e3:9b:00:ff:4d:82:9c:18:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:62:CA:F1:B7:A5:07:70:1E:84:2C:06:D5:B8:19:A0:AF:FE:62:FB
X509v3 Authority Key Identifier:
keyid:75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:18:f6:1e:4d:02:7a:06:7b:72:e1:ee:49:d1:2b:ae:f3:28:
86:50:6c:ef:4d:37:d6:e8:2f:1b:91:79:5a:4c:89:ad:bc:34:
27:df:c2:d4:f3:ae:5c:1e:c6:4a:7e:e3:eb:7a:9e:e7:f2:0e:
eb:84:d6:2a:20:73:05:e6:f4:5c:59:2f:8e:a8:4c:14:e1:fa:
33:7e:ec:b4:6b:8b:8e:78:2f:24:ff:78:11:d0:32:f5:cb:b4:
31:58:d2:04:09:ba:8d:13:25:35:02:c7:e4:5c:f2:08:6a:fb:
43:b3:74:da:ec:ec:7c:06:5c:c2:2e:d9:47:ce:2b:3b:67:62:
dc:39:54:76:80:de:12:2f:6c:a9:78:4e:d3:d2:0b:50:72:4c:
23:6f:c1:06:0c:08:f1:73:83:b3:90:43:09:70:c6:6f:e2:06:
de:66:8b:be:fe:18:d5:bd:20:cb:f4:d3:ad:c3:84:d4:bc:75:
de:67:bf:10:8e:b7:b0:07:8f:12:e9:fb:b4:42:42:d7:86:c6:
83:e5:86:a3:0f:6c:6d:47:c1:7b:a7:4e:7f:eb:53:f8:73:f7:
ed:a9:f2:b3:b5:45:d4:67:94:85:62:3d:49:e3:87:5e:f5:c8:
7d:1f:91:34:58:65:b5:cf:ae:07:0d:a9:5a:fa:7b:07:3a:d7:
e6:cc:7d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:28:26 2025 by rpki-client