Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
File: Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft (raw, json)
Hash identifier: 5uHR0ZPBuVpjOn6f5jQlUGprpIFEhokug1xkLL6hHGQ=
Subject key identifier: FD:A2:BF:04:F8:65:BC:35:92:85:D1:00:C1:06:0C:40:B3:E2:AC:B7
Authority key identifier: 0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
Certificate issuer: /CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Certificate serial: 0196BF6EB95C4517FD94C47A726E86FFEE38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
Manifest number: 1372
Signing time: Sun 11 May 2025 13:00:26 +0000
Manifest this update: Sun 11 May 2025 13:00:26 +0000
Manifest next update: Mon 12 May 2025 13:00:26 +0000
Files and hashes: 1: Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl (hash: wX+3PMbJrApnvuaIlKeG80LbOWdjDLZkoLnE3mJFb70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:b9:5c:45:17:fd:94:c4:7a:72:6e:86:ff:ee:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Validity
Not Before: May 11 13:00:26 2025 GMT
Not After : May 12 13:00:26 2025 GMT
Subject: CN=fda2bf04f865bc359285d100c1060c40b3e2acb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c6:51:16:32:b2:d1:d5:3e:08:aa:bd:e1:c3:
fb:80:25:65:34:05:1f:a4:33:d2:62:f5:04:7a:1a:
78:56:c7:57:43:37:bd:7b:26:6f:bc:17:84:84:d5:
5d:5c:23:21:77:91:5f:ab:ff:fa:cb:6d:95:43:cf:
a3:2c:23:d8:a4:02:37:33:e0:af:51:18:03:8d:cb:
fd:f8:02:03:4e:64:68:93:2a:de:ce:46:24:02:61:
b7:ef:2b:11:c5:7a:06:a9:7c:a8:51:43:8c:37:c3:
a4:17:21:91:b8:d2:8a:68:5a:54:bd:27:8f:9c:03:
65:91:a3:3b:b5:f7:b4:d7:f2:64:4a:d8:3e:87:85:
a5:73:4a:74:3c:bc:87:d9:59:1b:f9:45:81:f0:16:
bc:c4:cc:91:ba:97:a6:f5:21:0b:b2:bd:55:02:b3:
ec:fc:f2:e2:52:fc:f3:c5:d0:d1:a2:00:82:d4:c8:
7a:1a:7f:0e:11:55:0d:3e:e9:1a:4f:7c:ba:4c:4e:
80:7a:8f:08:c3:1d:d1:f3:67:65:7f:94:64:6c:f4:
95:06:6e:3c:e1:5f:40:b8:3a:2f:d1:e0:bb:65:6a:
a8:45:11:ff:c6:f1:21:d9:f0:62:3c:c6:3a:59:b5:
30:93:39:5d:d3:01:78:94:6d:45:70:36:30:98:ab:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A2:BF:04:F8:65:BC:35:92:85:D1:00:C1:06:0C:40:B3:E2:AC:B7
X509v3 Authority Key Identifier:
keyid:0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e1:9b:4e:80:3b:d8:f8:53:4f:63:4f:25:f4:5f:21:71:e3:
aa:47:e1:a8:70:54:fc:34:0e:d0:af:7c:8b:17:48:ef:3e:b7:
21:f8:13:5e:58:6d:77:98:6e:58:61:1d:0e:c6:3a:1a:03:ff:
9b:9a:32:84:95:31:f6:05:3c:df:2e:75:b1:dd:65:a1:f1:8d:
85:35:97:65:f8:13:b5:55:4c:a5:34:33:99:32:19:1b:17:69:
7b:7e:54:74:01:0c:8c:9e:c0:00:92:4c:98:c1:c2:e9:07:f9:
6e:12:b6:2c:33:91:8e:2d:70:30:49:93:89:fb:37:c6:02:2b:
f8:2d:fc:ad:7a:9f:62:db:ff:7d:5e:89:c7:04:29:f8:c6:e2:
d3:07:dd:e1:98:50:85:31:d8:13:b4:4d:eb:c9:c3:d5:74:7e:
b3:79:62:42:88:3f:74:e4:cc:4c:1f:33:0e:9c:c5:ea:96:ae:
f1:9a:0d:db:b8:f9:47:11:8c:55:3d:3d:2a:be:a5:a1:56:37:
1c:72:ba:4b:4e:7d:ba:cb:f6:56:f7:cf:66:ed:75:45:b4:03:
db:ce:19:3c:a3:ee:bf:75:af:ac:50:40:cc:b9:c7:79:ac:f8:
a2:40:66:e9:1d:a6:33:90:ad:3a:b1:96:d4:07:38:70:7a:a7:
fe:14:64:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:12:14 2025 by rpki-client