Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd07-837b-404a-8374-baaa9df517e7/1/Dwtr5Xhb-hruttYyBayhdrcqIxI.mft
File: Dwtr5Xhb-hruttYyBayhdrcqIxI.mft (raw, json)
Hash identifier: z6I2Ht4sWxSYy0u3yKZuzj4qRd6afGEhfAQZSH9vdR8=
Subject key identifier: 02:A0:32:87:FA:D9:DA:60:9E:EC:DC:FB:98:B6:FA:9F:65:2E:02:FD
Authority key identifier: 0F:0B:6B:E5:78:5B:FA:1A:EE:B6:D6:32:05:AC:A1:76:B7:2A:23:12
Certificate issuer: /CN=0f0b6be5785bfa1aeeb6d63205aca176b72a2312
Certificate serial: 0196BF6F173F591BD91F9E9B5ACFCBA6B6F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwtr5Xhb-hruttYyBayhdrcqIxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd07-837b-404a-8374-baaa9df517e7/1/Dwtr5Xhb-hruttYyBayhdrcqIxI.mft
Manifest number: 0A11
Signing time: Sun 11 May 2025 13:00:50 +0000
Manifest this update: Sun 11 May 2025 13:00:50 +0000
Manifest next update: Mon 12 May 2025 13:00:50 +0000
Files and hashes: 1: Dwtr5Xhb-hruttYyBayhdrcqIxI.crl (hash: anlW0F8QuClmYdA/SLoGWPaneUI9XL6y4IHagdavWQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd07-837b-404a-8374-baaa9df517e7/1/Dwtr5Xhb-hruttYyBayhdrcqIxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd07-837b-404a-8374-baaa9df517e7/1/Dwtr5Xhb-hruttYyBayhdrcqIxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dwtr5Xhb-hruttYyBayhdrcqIxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:17:3f:59:1b:d9:1f:9e:9b:5a:cf:cb:a6:b6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0b6be5785bfa1aeeb6d63205aca176b72a2312
Validity
Not Before: May 11 13:00:50 2025 GMT
Not After : May 12 13:00:50 2025 GMT
Subject: CN=02a03287fad9da609eecdcfb98b6fa9f652e02fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:4a:29:a0:1e:59:5e:02:c5:3d:74:d6:92:
95:df:3a:ed:e5:f3:30:cb:63:89:dc:5e:4a:8b:1e:
2d:55:d7:51:57:37:cf:2a:92:41:99:56:ff:fe:39:
24:97:4a:97:76:d3:4a:60:a1:34:65:da:74:1c:77:
f4:86:59:54:c7:06:da:1e:51:38:66:11:9a:88:7e:
25:9a:6d:d5:5e:c8:cf:61:7b:af:e9:48:8c:be:18:
73:98:ea:8a:3a:17:8a:65:68:73:b1:28:81:ec:00:
43:71:83:71:3e:d3:32:07:25:1c:b9:08:7d:d4:3f:
4a:6c:bd:d5:e0:f2:b6:80:18:6c:a6:56:5e:c3:d8:
ec:47:7a:74:17:4a:43:9d:df:93:91:07:3c:81:e5:
7e:11:80:85:6e:9b:27:24:43:91:8e:c0:f6:f5:3d:
3a:b3:1b:ed:b1:d4:a2:4b:a8:1e:de:9b:4d:1f:29:
6a:29:cf:62:45:43:89:97:69:82:ed:3f:71:36:4d:
8d:bd:78:3c:01:95:74:21:e3:b8:68:a8:00:53:5e:
28:22:cf:b7:b1:2f:aa:c5:53:03:66:f3:d3:08:d2:
a2:71:d5:0c:07:27:88:76:42:0d:d9:11:31:ca:8b:
23:e1:83:8c:08:e6:8f:b3:87:42:de:cf:ff:54:7b:
c4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A0:32:87:FA:D9:DA:60:9E:EC:DC:FB:98:B6:FA:9F:65:2E:02:FD
X509v3 Authority Key Identifier:
keyid:0F:0B:6B:E5:78:5B:FA:1A:EE:B6:D6:32:05:AC:A1:76:B7:2A:23:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwtr5Xhb-hruttYyBayhdrcqIxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd07-837b-404a-8374-baaa9df517e7/1/Dwtr5Xhb-hruttYyBayhdrcqIxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd07-837b-404a-8374-baaa9df517e7/1/Dwtr5Xhb-hruttYyBayhdrcqIxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:50:4d:f7:39:c3:63:40:9d:93:b7:db:64:08:c7:25:5f:f5:
37:42:b8:a4:87:76:a6:87:eb:57:9d:b0:68:33:ea:4e:34:0c:
37:66:8b:2c:f2:8c:62:b3:f8:94:3c:f5:3e:f1:30:70:23:eb:
5d:e6:82:2c:8a:a1:a4:59:1a:74:33:26:b3:97:66:f8:b1:2e:
da:6b:c0:40:b3:c6:09:e1:65:29:ce:a9:7d:8f:b5:fd:24:a3:
59:68:df:cf:57:fe:e5:dc:3d:13:ef:d1:cb:35:2d:fa:b1:ce:
17:2a:21:c9:2a:d3:40:c9:24:d3:c1:ec:a6:6e:5a:5d:b2:e9:
42:7d:61:05:1a:07:21:17:11:49:3d:98:7e:55:e7:25:0a:8c:
28:2a:c2:92:1d:4e:44:a7:27:7f:a8:5a:af:89:9b:0f:60:52:
c2:91:82:a1:d5:f8:55:06:c1:73:38:a2:30:50:1f:63:4d:56:
df:93:d8:c1:9d:2c:61:d3:a3:ae:1d:29:3f:39:ca:02:03:27:
84:84:30:e1:bc:77:23:8e:b4:ed:11:a7:4e:fe:7e:43:74:96:
40:9a:b6:73:30:1e:49:87:2c:e2:cd:26:04:b0:48:12:9b:f9:
64:04:06:0d:57:be:b9:f2:74:64:9f:d1:6d:a1:75:ec:b0:41:
cb:1c:27:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:03:40 2025 by rpki-client