Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
File: dUI-b2St_Fh6CPgawqySYOsu1hU.mft (raw, json)
Hash identifier: gISwpXROmaL9zC7AQ99DmGypdv+HGz0znZsNb81h9Qg=
Subject key identifier: 6D:91:83:E5:79:D7:18:ED:90:C7:7E:39:7B:14:97:50:98:35:7E:AC
Authority key identifier: 75:42:3E:6F:64:AD:FC:58:7A:08:F8:1A:C2:AC:92:60:EB:2E:D6:15
Certificate issuer: /CN=75423e6f64adfc587a08f81ac2ac9260eb2ed615
Certificate serial: 0196B9A4240F461DF99978780D6B805D4678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUI-b2St_Fh6CPgawqySYOsu1hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
Manifest number: 0BA3
Signing time: Sat 10 May 2025 10:01:04 +0000
Manifest this update: Sat 10 May 2025 10:01:04 +0000
Manifest next update: Sun 11 May 2025 10:01:04 +0000
Files and hashes: 1: dUI-b2St_Fh6CPgawqySYOsu1hU.crl (hash: 57b0f0hHZDR6bqFlazq5UKdAv+acnsOpi82w2nKoQN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUI-b2St_Fh6CPgawqySYOsu1hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:24:0f:46:1d:f9:99:78:78:0d:6b:80:5d:46:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75423e6f64adfc587a08f81ac2ac9260eb2ed615
Validity
Not Before: May 10 10:01:04 2025 GMT
Not After : May 11 10:01:04 2025 GMT
Subject: CN=6d9183e579d718ed90c77e397b14975098357eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:97:2f:f0:a1:50:c2:21:28:e0:b7:c7:ce:b8:
dd:b0:82:0f:4e:bb:dc:e2:31:16:b7:3e:48:41:e4:
58:cb:c9:10:25:96:e6:17:11:15:b3:97:85:4c:fd:
ec:61:2a:0e:21:99:f6:2b:39:c1:cd:e7:34:bc:8b:
4e:57:ff:a2:a6:51:dc:6e:58:f9:d3:c3:cc:00:05:
0f:c5:a2:f5:c8:42:9c:bb:ec:8f:5f:3a:9c:f0:06:
af:47:a5:d8:26:34:1e:54:ec:cd:dd:70:76:11:8d:
0a:9a:95:10:12:2e:bc:27:59:36:f1:f0:66:16:e5:
6f:5a:6d:35:21:b8:42:56:04:5e:f4:5b:8e:cb:4e:
d7:e6:bc:a0:93:a8:c4:11:af:f7:d5:7e:ef:f8:e0:
fa:fb:3d:8b:0a:09:6c:cd:3a:39:d2:e2:51:8d:b7:
04:31:51:61:98:07:dd:23:17:a8:38:18:7b:8b:54:
62:f1:95:ac:0c:94:a1:39:16:ff:b7:4c:78:86:91:
6a:b5:2e:e8:1c:31:28:35:7d:43:bd:ad:6f:5d:6d:
44:c9:39:ad:c3:0a:c0:e8:f1:9a:cc:6e:c2:7b:5a:
a4:16:c0:27:12:0d:cf:c3:71:80:28:00:65:05:5c:
1c:01:c9:7b:d8:35:2e:14:7b:7c:bd:cd:4c:39:15:
70:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:91:83:E5:79:D7:18:ED:90:C7:7E:39:7B:14:97:50:98:35:7E:AC
X509v3 Authority Key Identifier:
keyid:75:42:3E:6F:64:AD:FC:58:7A:08:F8:1A:C2:AC:92:60:EB:2E:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUI-b2St_Fh6CPgawqySYOsu1hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7c:37:e8:71:16:7b:32:62:42:ee:51:f4:22:b6:23:03:cf:
94:87:24:c3:6d:7b:5d:75:1d:e9:69:d3:c9:48:bc:b8:69:c4:
46:5d:36:7e:a4:77:75:f2:54:af:99:d9:91:d4:4e:51:13:bc:
36:5e:0c:7e:4e:8a:bc:71:a8:3b:24:39:d0:03:aa:53:43:ca:
9f:c7:55:b9:28:7b:6c:d3:6a:35:e9:91:57:8b:56:e5:e7:52:
bf:8b:ab:7b:17:86:da:2e:81:cf:34:7c:e5:8d:e2:5a:68:5f:
fd:57:fa:8f:dc:c8:46:ef:4d:1f:1c:4f:1d:64:88:02:b3:1b:
94:98:5e:61:a3:c6:5f:3e:64:0e:08:09:9c:d7:cc:7c:f1:6c:
57:88:bb:e7:a2:58:14:06:96:98:b0:27:79:7d:2c:63:3f:1c:
41:b5:50:57:1b:d1:33:89:94:b8:ba:b3:df:cb:4c:5a:db:73:
2e:94:77:a9:20:f4:c8:66:e0:82:c7:01:cd:53:48:cb:e7:58:
f5:f2:83:98:7a:11:c9:fc:70:e0:b7:df:f6:6e:32:f4:e5:13:
f0:d2:f8:4a:da:83:59:ae:8e:cc:4e:a2:c7:db:69:bc:33:8a:
2f:fa:63:26:c7:37:16:15:04:94:68:00:44:5a:79:f9:82:da:
a8:51:d6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:39:05 2025 by rpki-client