Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
File: dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft (raw, json)
Hash identifier: /+r1Xt1H54gryv0TyaVIbh4Ywq/o+AimSqH/QM7qi/A=
Subject key identifier: B3:C8:BB:25:E1:52:16:DB:90:FF:A8:98:76:1B:78:D8:2C:F3:DC:5F
Authority key identifier: 74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
Certificate issuer: /CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Certificate serial: 0196BDEE74284BA54E3C7A030E9FC831196C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
Manifest number: 0D0B
Signing time: Sun 11 May 2025 06:00:43 +0000
Manifest this update: Sun 11 May 2025 06:00:43 +0000
Manifest next update: Mon 12 May 2025 06:00:43 +0000
Files and hashes: 1: dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl (hash: kYWR6FrMVI/DbL8qst3PEsKCgBSNC9LEpgmzQxhOETo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:74:28:4b:a5:4e:3c:7a:03:0e:9f:c8:31:19:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Validity
Not Before: May 11 06:00:43 2025 GMT
Not After : May 12 06:00:43 2025 GMT
Subject: CN=b3c8bb25e15216db90ffa898761b78d82cf3dc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:b7:00:a9:f6:43:c4:d7:d2:31:fb:b0:56:
59:43:53:7b:5c:25:10:48:0f:55:04:e6:65:2c:a9:
20:42:53:0c:75:74:2e:bb:c2:f8:d7:7c:c8:4f:22:
68:57:e2:f1:6b:6c:44:39:66:cd:8b:6c:ad:16:d2:
53:90:bc:e2:02:f3:b2:50:8f:fe:ae:a4:85:76:bb:
84:a4:7d:67:9d:f7:84:de:f0:5a:0d:83:f2:56:ae:
da:51:4d:4b:12:f1:85:e5:dc:65:23:74:91:c2:02:
05:b1:8a:f1:0f:61:9e:6f:9d:1d:21:1a:08:a2:7b:
5e:37:8d:49:c8:a8:7e:5b:45:8f:96:e0:25:eb:40:
32:8c:b3:0c:f4:b8:05:5b:54:76:c1:69:e3:ea:df:
a9:cf:31:33:81:74:d0:87:2a:ce:55:95:52:19:a6:
0b:db:aa:6b:a3:be:09:d6:21:05:7a:55:ed:44:1e:
04:6c:c7:d1:b1:bf:6e:fc:32:08:b7:86:b8:c5:53:
4e:f9:ef:20:5c:a9:1e:42:af:ad:e6:97:87:21:86:
00:95:0c:45:9f:c2:14:d5:b6:98:ea:9c:50:2f:ef:
df:37:83:73:af:10:7d:74:ae:90:d1:53:ad:69:2c:
b5:76:0a:a3:cc:6e:83:b6:c0:6d:0f:25:74:83:a8:
77:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C8:BB:25:E1:52:16:DB:90:FF:A8:98:76:1B:78:D8:2C:F3:DC:5F
X509v3 Authority Key Identifier:
keyid:74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a9:dd:3b:eb:a0:0e:a2:ab:be:2a:53:02:34:df:bc:c7:d0:
25:38:ce:6a:97:e7:f6:a7:a9:2c:60:04:42:ab:0c:16:fa:e7:
55:b8:e3:e0:2f:85:38:5a:72:7d:7b:cb:21:a4:b2:75:65:b7:
4d:0a:02:ce:00:2a:21:a8:ce:a7:cf:03:da:27:cd:da:d5:18:
9d:f0:70:09:8e:2b:55:4e:11:a8:c1:aa:c9:6a:32:d7:63:0f:
d9:0d:9c:a3:1b:4b:7f:0e:f6:5f:f8:f8:a4:f5:39:27:20:5e:
d6:8f:24:be:ae:f0:03:24:db:58:af:70:6c:68:fb:7f:f2:36:
75:6e:29:c3:66:9a:1f:52:e7:27:d8:27:eb:ad:0a:83:c1:31:
c9:e3:68:d8:93:94:63:90:59:dd:4c:5d:52:ed:8f:14:3d:82:
9a:6c:b5:3e:95:b1:1d:b7:ea:43:c1:28:f1:c9:0c:da:8f:ad:
82:b2:52:d6:89:7c:b7:87:06:3f:93:10:f1:d3:c8:83:1f:2e:
dd:9e:14:58:be:3a:b3:7c:4e:c4:eb:dc:aa:a9:51:bb:97:e7:
5b:b8:81:6c:b3:74:1c:05:e4:9d:d6:16:4a:94:1d:35:83:6c:
3a:db:0d:ff:89:68:33:df:17:cb:c9:8e:30:4d:44:0a:77:bf:
41:24:f0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:36:00 2025 by rpki-client