Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
File: DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json)
Hash identifier: 4+s/fwiY8TRGxAmofhHvpK2TtIuhIkKdtuHOfgqPV1A=
Subject key identifier: 48:13:60:33:F4:02:8F:27:6B:C5:7D:54:5C:BD:E9:2A:3F:08:49:A2
Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Certificate issuer: /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Certificate serial: 0196AFFCADB1E7CFC4AA045FACA94596E78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
Manifest number: 152A
Signing time: Thu 08 May 2025 13:01:34 +0000
Manifest this update: Thu 08 May 2025 13:01:34 +0000
Manifest next update: Fri 09 May 2025 13:01:34 +0000
Files and hashes: 1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: C3AVEewMCPbr/Z3oxPNmtftbY0/X03kTkljwisCmqas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:ad:b1:e7:cf:c4:aa:04:5f:ac:a9:45:96:e7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Validity
Not Before: May 8 13:01:34 2025 GMT
Not After : May 9 13:01:34 2025 GMT
Subject: CN=48136033f4028f276bc57d545cbde92a3f0849a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:b4:66:d0:c9:bd:f3:99:4d:b2:47:46:13:
b8:d0:8f:29:1d:52:49:f7:ad:38:fd:46:03:65:67:
91:ad:a2:95:a7:e7:6f:0f:48:80:4f:3f:2e:a9:d0:
c7:1c:8e:b9:b4:04:8e:75:81:34:82:4e:9b:f7:da:
d2:b7:2d:11:4b:0d:d7:d5:b4:6a:be:aa:51:9e:bd:
5f:ec:51:61:fd:b6:32:0f:32:68:d6:b3:c1:bc:94:
25:66:e7:be:44:ea:9e:8b:3a:84:6a:81:59:d2:6f:
d0:bd:29:27:38:31:bf:04:ff:7f:01:97:00:d8:92:
82:81:cc:02:fd:d6:02:2b:b4:ee:88:40:4d:72:66:
5c:2f:8c:55:af:60:92:1d:60:99:96:2c:0b:25:13:
d6:41:12:ce:ca:6f:eb:20:0e:b9:15:94:58:5c:16:
fd:f3:25:8a:6d:2c:2d:8a:2d:e6:f9:50:59:2a:f3:
24:14:b9:0a:3c:56:87:8e:9e:33:4b:e4:03:c9:7a:
ca:75:60:10:a1:1f:80:dc:3b:12:a0:f5:16:71:22:
01:df:e2:57:1e:21:f7:a5:a2:b7:22:65:56:73:86:
6f:e0:75:a0:cd:f9:4a:77:92:45:4b:ef:aa:7e:d3:
66:8d:c8:85:1a:ab:71:c2:b5:ab:95:d5:bd:33:82:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:13:60:33:F4:02:8F:27:6B:C5:7D:54:5C:BD:E9:2A:3F:08:49:A2
X509v3 Authority Key Identifier:
keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ce:8e:16:a3:02:35:fe:f8:94:d5:32:ed:4b:df:a4:1a:62:
a9:96:a7:6a:44:b4:b1:19:2f:76:d1:ee:74:8d:6d:ae:b7:e3:
85:92:57:70:c2:6d:d1:79:dd:02:3b:b5:80:e9:90:16:9a:8f:
17:3c:82:89:32:01:95:e6:f0:30:7c:1a:e9:aa:7b:50:3e:08:
b6:48:40:4a:a4:53:d7:29:71:46:87:27:b4:82:39:aa:a9:e2:
27:85:14:27:29:8e:8a:cb:b0:7a:04:83:ca:f1:4e:69:6c:45:
68:b9:7e:03:6f:9e:dc:79:73:c4:ae:b5:bb:16:94:c9:16:3f:
d6:d8:5f:33:a8:85:a9:c1:9a:a2:27:44:c6:9c:a5:20:e1:25:
bf:5d:f3:8e:9c:54:98:c5:94:ba:b0:e8:c2:a7:72:10:ac:54:
af:7c:d3:b0:05:6e:e2:a6:04:f8:dc:42:67:44:6b:1d:e1:be:
a3:66:39:8c:b8:a0:86:8a:27:f1:d0:2c:74:7f:9a:06:1c:7e:
65:54:6d:db:db:ab:dc:35:fc:2b:bf:97:3d:f7:6b:da:3b:5f:
c5:84:0f:ad:41:45:a0:6a:f0:04:2a:c0:90:63:ef:4e:59:36:
9f:71:25:51:30:78:4b:97:37:23:f4:99:65:a9:ca:4a:9d:1c:
01:ce:93:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:16:20 2025 by rpki-client