Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
File: dGNy_s6bo5ZuFegFXAWHxQPAOas.mft (raw, json)
Hash identifier: O6tOcOawCV5wZKMZacwUnF6dT+yL8dlfpmV36BEWMco=
Subject key identifier: 62:30:92:5F:E4:D4:58:09:32:18:9F:41:C9:E3:F4:9B:AD:FA:8C:DC
Authority key identifier: 74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
Certificate issuer: /CN=746372fece9ba3966e15e8055c0587c503c039ab
Certificate serial: 0196B3D92E010F17BE2E352ED0413185F980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
Manifest number: 0FD6
Signing time: Fri 09 May 2025 07:01:16 +0000
Manifest this update: Fri 09 May 2025 07:01:16 +0000
Manifest next update: Sat 10 May 2025 07:01:16 +0000
Files and hashes: 1: dGNy_s6bo5ZuFegFXAWHxQPAOas.crl (hash: O+6E8A6YrsW1Dq5W8lo7DIo5+d1Qd+9J8ByvqrEO4kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d9:2e:01:0f:17:be:2e:35:2e:d0:41:31:85:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746372fece9ba3966e15e8055c0587c503c039ab
Validity
Not Before: May 9 07:01:16 2025 GMT
Not After : May 10 07:01:16 2025 GMT
Subject: CN=6230925fe4d4580932189f41c9e3f49badfa8cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:ce:a9:2d:7b:90:03:4f:81:db:37:3b:4c:
7b:aa:2c:9a:f2:82:ba:77:50:a1:62:82:43:88:99:
27:d0:7a:46:21:c1:f4:51:dc:b4:1b:3b:a0:ce:24:
5d:59:07:aa:3e:c6:27:b5:c1:3d:53:4c:23:9e:8e:
cc:56:5a:a5:46:80:62:cc:d0:78:8f:03:40:dc:99:
d1:2a:9a:a4:32:52:d6:36:47:d8:0e:a4:db:a6:b8:
35:17:f9:15:40:04:af:78:9a:63:1f:ff:1e:cc:b3:
17:52:ba:dd:b2:6d:af:25:c1:c6:8b:6c:6a:86:90:
32:bf:03:45:37:40:a0:46:66:8f:30:0b:88:cc:1b:
e3:fb:d2:b8:8c:27:56:0f:9f:7d:95:1f:e1:5b:5b:
d0:e8:73:c6:e4:b7:97:7b:ec:33:16:0e:e7:41:67:
67:9d:2f:1d:3b:af:5a:c2:c8:04:d0:07:45:c2:97:
01:b5:e0:76:0e:76:85:36:23:f9:b0:25:08:96:79:
78:e5:9b:58:7d:1d:47:44:a0:63:f2:e0:70:8f:50:
fc:82:0b:37:7e:8f:0a:dd:77:fc:5f:e6:ec:41:87:
6f:8b:40:0d:cc:63:d4:de:39:3a:1c:7c:a5:2d:f4:
09:63:4a:65:d9:91:ce:78:95:9e:8a:39:05:78:41:
7d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:30:92:5F:E4:D4:58:09:32:18:9F:41:C9:E3:F4:9B:AD:FA:8C:DC
X509v3 Authority Key Identifier:
keyid:74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f6:e0:91:f3:c8:82:a9:8e:86:28:7f:09:42:fe:65:5c:00:
0a:2b:40:15:3a:34:18:45:95:06:bd:29:c9:b4:ee:2f:0b:2f:
d1:1f:36:8f:50:b0:63:27:3b:a4:7e:fc:1a:22:e1:ea:41:02:
d3:a8:24:9d:d2:09:9b:07:81:34:d6:6b:69:d3:48:4d:dc:b7:
e8:b8:01:9e:82:d3:f7:f6:b2:19:01:27:f2:76:69:89:25:be:
16:48:3a:ea:2c:8b:4e:21:61:81:b4:a1:b8:ee:f4:c4:fd:16:
27:64:0c:42:7d:53:d5:91:55:7d:20:df:9f:cf:3a:93:3b:88:
8f:6b:09:49:1b:96:b5:4f:71:a1:15:f1:84:a7:d7:c4:cb:2a:
83:ea:7e:5c:9f:35:4d:2d:67:49:3c:0b:72:c9:69:56:ab:14:
5e:5a:8c:12:e3:b3:93:b9:e0:17:a6:32:79:95:99:53:0d:2d:
ba:23:25:28:53:9c:b4:9b:46:a7:a5:17:b3:92:26:a9:34:89:
d1:3a:2d:37:28:5a:48:65:c1:03:2c:9f:05:af:f1:5a:6c:99:
a8:08:98:f2:07:cd:7e:7d:cc:07:f0:a5:be:29:72:07:14:aa:
c4:bc:45:86:af:6a:78:01:7f:bb:9b:51:be:3d:1c:96:b8:85:
2a:09:59:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:56:05 2025 by rpki-client