Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
File: dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft (raw, json)
Hash identifier: 4wLQXZ+zbScc2LULhZT7GYy0V2hOIhNaI/goOnKG8/g=
Subject key identifier: 48:00:4C:F2:88:2C:22:CA:3B:66:C1:DA:4A:8C:F9:6D:BC:4A:96:CA
Authority key identifier: 74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
Certificate issuer: /CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Certificate serial: 0196A68A9D50DE4AC45CAAC7CEBD6C680585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
Manifest number: 0E1C
Signing time: Tue 06 May 2025 17:00:24 +0000
Manifest this update: Tue 06 May 2025 17:00:24 +0000
Manifest next update: Wed 07 May 2025 17:00:24 +0000
Files and hashes: 1: dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl (hash: 2ho5Y8oR8lW0niXJ7jR6q3jceY+iuVmH7qdtCst5V1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:8a:9d:50:de:4a:c4:5c:aa:c7:ce:bd:6c:68:05:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Validity
Not Before: May 6 17:00:24 2025 GMT
Not After : May 7 17:00:24 2025 GMT
Subject: CN=48004cf2882c22ca3b66c1da4a8cf96dbc4a96ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:97:4f:0f:8d:49:5b:6f:c5:26:1d:65:e0:
95:19:37:01:d3:c8:cc:06:f3:fb:68:07:9a:fb:ff:
d1:9c:d8:5b:e6:1d:6e:d8:63:12:1a:27:f5:c6:a5:
67:47:b7:ef:29:99:0b:00:f5:55:97:03:aa:a5:f9:
8c:ea:35:29:bb:d1:47:70:3d:63:c1:49:53:a4:d7:
6f:9a:af:a0:a7:94:06:6d:43:1c:b0:cc:9e:e2:4b:
c8:13:4e:d1:02:ae:a9:85:36:2a:cf:ba:19:0d:35:
6e:10:f5:ed:cd:b3:b0:86:fb:46:b8:8a:b3:c2:28:
04:2a:0d:e3:e6:d3:b5:14:89:c6:3f:0e:92:76:70:
9a:a3:9e:d9:2b:8b:63:d5:3d:ce:2e:7a:76:33:21:
c6:14:e4:52:31:b0:4b:51:68:32:16:bc:46:cf:45:
ca:0a:1a:7d:3e:01:cd:08:3a:00:6c:7e:70:8c:64:
a1:46:fb:c6:d9:cf:d6:b0:9b:a5:b0:e7:ff:55:dd:
15:fa:66:28:1f:aa:7b:10:ab:aa:18:8e:ac:f8:b5:
1e:f8:f4:4a:4c:ee:1a:63:5c:9e:cf:7d:24:c6:9a:
f5:4a:01:5d:3e:b7:02:00:90:27:75:71:9a:58:e1:
bb:39:91:a8:f2:88:6b:3b:3d:37:91:d9:6c:fc:8e:
47:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:00:4C:F2:88:2C:22:CA:3B:66:C1:DA:4A:8C:F9:6D:BC:4A:96:CA
X509v3 Authority Key Identifier:
keyid:74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:21:43:0a:dc:fe:18:3e:4f:3b:fc:fe:19:41:72:92:a7:7e:
2f:d4:72:36:49:2f:eb:fc:12:35:f2:1e:37:1d:b3:fd:c4:ff:
be:fb:69:cc:9e:43:a7:ff:55:0f:92:6e:3e:09:2b:35:6b:cd:
26:e6:2e:58:e8:bd:1f:b6:24:b4:f5:82:3c:9b:38:5d:c3:2f:
1a:1c:4e:7c:46:20:45:de:79:be:4a:26:d3:9d:97:d6:47:85:
c5:a5:88:42:3e:78:6d:dc:4b:81:98:f8:1b:10:af:77:22:12:
83:cd:c9:bf:c2:de:38:e4:a1:c1:77:c9:b5:84:d9:34:68:02:
ac:ee:03:51:be:c0:88:bf:05:af:7d:7a:bd:b1:d0:88:f2:76:
f1:f7:48:ff:60:ee:dd:09:ad:1c:4d:38:6b:00:07:e4:ea:67:
1a:ca:49:59:47:a3:cb:6c:80:b0:dc:8a:23:86:c0:09:69:44:
e7:7d:b0:73:d0:42:f2:c5:c0:32:ac:7c:50:b9:2d:87:15:3f:
46:9b:35:c6:4c:4d:37:54:4f:a3:0f:05:17:1e:56:cc:9b:39:
6c:55:3c:ce:54:95:c6:1a:ab:61:4c:e5:15:7a:96:72:1d:29:
a3:0e:7b:5d:0e:f4:fe:a4:e9:c6:1d:54:bc:4b:44:1d:c7:7c:
14:51:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:22:12 2025 by rpki-client