Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
File: dQRxYHUyqMev1g1PMXqtxJDrogY.mft (raw, json)
Hash identifier: d0dzHyJ8zyNoazOauSrOHfR3HpLVJ+iKFbrPZPWgHP8=
Subject key identifier: 26:35:FD:8A:14:ED:A7:60:A8:65:42:BB:89:CA:39:8F:24:19:FE:80
Authority key identifier: 75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
Certificate issuer: /CN=750471607532a8c7afd60d4f317aadc490eba206
Certificate serial: 0196BD807F49F2619C546BB852D8DBFA7906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
Manifest number: 1530
Signing time: Sun 11 May 2025 04:00:36 +0000
Manifest this update: Sun 11 May 2025 04:00:36 +0000
Manifest next update: Mon 12 May 2025 04:00:36 +0000
Files and hashes: 1: dQRxYHUyqMev1g1PMXqtxJDrogY.crl (hash: iLNwc3QDGDcHWF102TTpRwYno4aQt917taE4U+G2CBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:7f:49:f2:61:9c:54:6b:b8:52:d8:db:fa:79:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750471607532a8c7afd60d4f317aadc490eba206
Validity
Not Before: May 11 04:00:36 2025 GMT
Not After : May 12 04:00:36 2025 GMT
Subject: CN=2635fd8a14eda760a86542bb89ca398f2419fe80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:5e:cd:71:b3:d2:c2:82:7d:e7:40:73:01:
4b:ad:3b:5f:28:54:f7:43:0e:8a:d5:51:5b:17:6a:
1d:a4:1a:c2:04:09:9d:75:87:6b:79:57:fd:8f:cb:
92:54:b6:70:3f:76:a2:7d:96:73:53:6c:d5:9e:93:
83:f7:f0:94:26:a4:1e:e5:e0:4e:2f:e2:62:07:82:
e9:ba:c6:4a:88:38:3c:ab:39:4e:43:90:57:56:5d:
25:46:72:5e:67:4c:a9:80:88:5d:bf:6d:3a:1d:23:
8a:b0:0f:05:b8:f7:69:2d:90:21:cb:34:09:a0:05:
39:77:ab:dd:81:07:ad:ba:2a:e5:f4:44:3c:93:a8:
b0:6b:5c:51:80:9d:c6:1b:2a:07:66:38:47:82:be:
40:5a:40:53:f3:96:3d:26:08:fd:5a:5e:21:68:e3:
6d:2a:8a:d7:18:e9:4f:c1:d4:0d:24:ca:02:c2:e6:
dd:77:66:6a:df:a5:8c:e1:78:8a:6b:64:a0:42:24:
27:40:7a:a6:a0:0a:54:57:58:b9:f4:de:75:09:24:
bc:a9:1c:2b:f6:80:66:2b:dd:c6:73:ab:6b:fb:a3:
f2:6f:a7:d1:da:5a:fe:d2:3a:c5:fa:77:47:70:3e:
9d:57:d8:99:2c:db:53:85:8e:07:bf:e4:a6:a2:b3:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:35:FD:8A:14:ED:A7:60:A8:65:42:BB:89:CA:39:8F:24:19:FE:80
X509v3 Authority Key Identifier:
keyid:75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ce:68:2c:e3:aa:58:c7:4f:8f:34:2c:b3:7a:2d:4c:88:0f:
13:6e:64:e4:77:fa:2d:d7:e3:c4:41:9b:13:87:cb:94:9b:03:
65:97:15:0b:99:83:1a:f6:4b:b9:03:44:77:ee:c8:2c:41:07:
14:99:63:57:9d:c9:47:31:a2:e7:71:13:a4:ab:89:de:4e:ec:
ea:6f:1b:da:60:9d:ab:c9:78:f4:57:76:0a:e2:0d:05:0c:89:
12:aa:66:b0:d3:94:b6:a9:39:e6:3c:59:9d:bb:74:9b:41:bf:
cb:e0:75:0c:e3:6c:4b:60:d4:4b:b5:ba:4c:28:29:02:e6:a6:
32:b6:80:25:64:19:2b:f9:45:28:0e:30:ed:69:b8:a5:ae:76:
36:5f:5d:0f:3c:73:9e:a5:ef:f0:0b:be:28:1c:0b:be:1f:a3:
e9:62:e0:d3:9e:a5:23:9c:f5:b1:cc:ee:64:3d:75:cf:2a:0e:
f6:74:0e:d2:95:b2:63:16:82:db:90:30:a7:e8:6a:29:90:79:
db:f1:05:45:91:89:e6:4f:be:0d:95:b0:e8:b0:09:e8:bf:01:
9f:02:27:3c:68:cf:ff:5f:fe:08:eb:ea:70:94:52:94:89:69:
61:9d:bb:c3:9c:c6:08:21:b6:7f:ac:9c:5c:3f:6d:d9:58:32:
a1:78:fa:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:36:47 2025 by rpki-client