Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier: HQX3TRHjjgVS1jMMmP9GLDBKkWu+xF2tLMWhNfLAxqc=
Subject key identifier: 4B:2E:96:38:F3:B4:32:46:59:48:8D:61:E3:53:63:06:7E:03:FF:DF
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial: 0196BA48EBED1622414DBBC2A1B338A915D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 13:01:03 +0000
Manifest this update: Sat 10 May 2025 13:01:03 +0000
Manifest next update: Sun 11 May 2025 13:01:03 +0000
Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: 6rn5hrMd4ud21G1Ox3mmOBecOzGa2qzqSjlHUcWfAcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:eb:ed:16:22:41:4d:bb:c2:a1:b3:38:a9:15:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Validity
Not Before: May 10 13:01:03 2025 GMT
Not After : May 11 13:01:03 2025 GMT
Subject: CN=4b2e9638f3b4324659488d61e35363067e03ffdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:1e:94:40:c3:0c:73:b8:fd:af:3f:fb:40:
9a:21:d7:72:ad:32:ba:48:84:ed:86:ba:bd:3b:fa:
e8:ca:a5:e8:69:32:bf:7b:48:6b:4b:8a:07:cc:e9:
7b:e6:e1:63:71:97:41:38:3e:6e:fe:ea:47:a4:bd:
12:73:23:fa:ca:a3:81:83:29:77:f6:f0:86:48:4b:
a8:8f:21:ca:9b:0d:d3:5b:a1:d4:75:a9:3b:a4:af:
cd:53:f8:e3:75:24:29:cd:e9:47:69:4d:6f:ab:a2:
1f:da:87:3a:95:54:7f:f8:53:d5:e0:92:9c:ee:aa:
b0:a4:9e:c1:bf:da:d0:71:f0:4e:c5:76:76:67:aa:
e1:9e:9c:7e:80:36:91:7b:f5:c2:f9:73:cb:ce:d5:
25:62:b6:87:33:b4:a0:1f:77:1f:6c:38:ab:54:de:
59:3a:0b:3c:7a:f4:62:97:20:09:c1:13:91:bb:be:
aa:7c:6a:89:93:a6:c9:2d:10:dd:88:a2:83:34:ea:
c2:0e:e7:e2:1b:65:a2:33:dd:bd:f3:a1:59:56:f4:
a0:4e:c6:30:6c:1d:92:38:8a:a8:9a:7a:38:b9:65:
f8:5a:fd:a7:5d:96:65:d7:8b:a9:3c:49:7d:ac:80:
7e:0b:21:df:ae:9e:0f:ef:e7:56:3c:c2:5c:86:9c:
b7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2E:96:38:F3:B4:32:46:59:48:8D:61:E3:53:63:06:7E:03:FF:DF
X509v3 Authority Key Identifier:
keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:65:21:bd:5e:b2:97:28:00:dc:d6:88:29:a8:79:1a:7d:b5:
f0:d6:80:16:19:4a:ee:f9:6a:40:9d:7e:3e:cf:47:41:83:51:
45:d6:54:58:8d:5d:f3:10:84:1a:d6:72:e1:68:5c:ee:5a:07:
e0:81:8e:4b:b1:2d:fa:3b:e9:36:dc:8c:aa:69:e9:10:5d:6f:
4b:07:f4:17:70:8b:2d:0a:b1:b8:8e:f9:4f:83:32:20:0a:d1:
0c:1e:59:31:4c:c5:28:44:de:14:2c:70:5d:73:1c:a6:81:2f:
77:a6:0d:fb:f4:20:3e:c5:4f:b0:2d:f7:79:32:5d:7b:4f:5b:
50:4f:77:39:f7:f0:1c:1c:3c:fb:2d:8c:b1:09:88:ad:f1:a5:
2d:ef:49:ca:20:46:ca:26:a5:dd:bf:b0:30:8b:35:25:9e:17:
9d:c5:c1:37:3b:9d:af:30:4b:0a:df:88:e0:5c:46:e5:9f:bc:
38:92:ca:ef:64:51:e1:df:47:c7:1e:25:6b:83:88:fc:74:f0:
a3:9a:93:d3:13:27:67:58:25:93:18:a7:34:4d:67:02:57:7f:
fd:f2:44:57:b7:20:f6:1a:c1:fa:a6:62:0c:e1:b6:04:4e:66:
07:b3:ee:fa:eb:dc:c0:80:b2:0f:a3:c1:1f:1f:ff:aa:53:62:
a5:28:37:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:13:56 2025 by rpki-client