Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
File: dC44IKB42kewo3Ti06ZtYmPB4j8.mft (raw, json)
Hash identifier: OBwpbjEVqzJCBg0Rn9Ncw4xVwfbvUn93y7zeO2BjDGU=
Subject key identifier: F2:AA:4D:74:AD:05:CE:10:AB:31:20:ED:32:48:22:4A:F7:7B:89:9E
Authority key identifier: 74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
Certificate issuer: /CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Certificate serial: 0196BF6ECE9D1439DA50537EE094ADA93A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
Manifest number: 0E05
Signing time: Sun 11 May 2025 13:00:32 +0000
Manifest this update: Sun 11 May 2025 13:00:32 +0000
Manifest next update: Mon 12 May 2025 13:00:32 +0000
Files and hashes: 1: dC44IKB42kewo3Ti06ZtYmPB4j8.crl (hash: +QGBwTqePGYhMT0aUPs7MEcqiKcAkKeU1bgefpZtsRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:ce:9d:14:39:da:50:53:7e:e0:94:ad:a9:3a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Validity
Not Before: May 11 13:00:32 2025 GMT
Not After : May 12 13:00:32 2025 GMT
Subject: CN=f2aa4d74ad05ce10ab3120ed3248224af77b899e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:51:74:d8:ed:76:70:e5:af:1c:0d:e4:e8:
0e:af:7f:2f:ed:82:bc:21:f0:4a:5b:97:be:c8:d6:
5d:a7:66:cc:5e:91:25:79:f1:70:7e:7d:ad:8e:dd:
ca:cb:e6:52:e3:12:7a:4a:31:b6:fa:57:78:9e:3f:
3c:22:32:c2:62:aa:ef:5c:59:e7:d6:7c:04:2a:f2:
b8:2c:be:94:00:04:20:92:89:a9:57:75:26:ca:8d:
18:41:f3:52:d8:c3:4f:71:20:46:34:7c:24:28:58:
bd:5e:3b:3a:df:d3:dd:a8:2c:27:b5:47:cd:3c:f9:
b5:03:84:2e:a8:fd:2c:11:41:ec:43:66:02:72:38:
0f:02:7b:62:c9:c2:1a:40:8c:dd:34:76:04:db:4d:
20:f0:9e:26:64:2b:db:69:a4:dc:b4:f6:6b:e1:24:
08:30:cd:43:ac:9a:d3:4e:8d:6a:ae:1c:b9:e6:cf:
04:d0:a8:dc:4c:ca:d1:c3:28:96:45:2e:3c:a4:d9:
38:d1:09:e2:6a:01:26:ba:23:9d:4d:8d:e3:83:97:
89:80:89:39:40:40:53:c4:b1:87:57:97:40:e3:e4:
b2:43:5a:f6:c4:a1:4a:41:b7:70:27:f3:4f:06:ab:
60:01:3f:0c:5a:57:ac:9b:ad:24:85:cb:45:95:4e:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AA:4D:74:AD:05:CE:10:AB:31:20:ED:32:48:22:4A:F7:7B:89:9E
X509v3 Authority Key Identifier:
keyid:74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:24:eb:f2:0c:44:82:bf:1a:fc:48:e5:09:29:80:17:1d:3f:
b0:04:12:5e:06:ea:b3:26:3d:5d:f5:88:bc:c1:a4:c9:65:f4:
49:9e:d8:c7:b5:13:37:51:e2:f4:b3:e2:b6:d9:14:58:a6:fb:
c7:78:25:9e:d2:1e:2a:aa:a6:f3:88:b7:3d:67:62:28:0c:a9:
a4:07:57:fd:29:37:56:a5:84:e9:a1:a1:94:e9:ec:93:4e:e7:
92:aa:57:f1:cb:10:8d:79:ea:a9:ce:1a:19:30:dc:17:e1:7a:
33:d0:87:ad:a3:91:f6:40:d1:f6:38:aa:b9:4b:98:c8:8a:ae:
db:9d:5d:b5:fe:c4:6b:88:e5:51:c8:d1:c4:61:12:a3:44:dc:
46:5a:f7:61:ab:28:23:4e:87:cf:c7:e8:02:6f:88:ca:33:3a:
56:3c:74:3f:b4:6e:01:c5:55:1b:c2:fc:23:b0:a3:4c:2a:b2:
e2:55:21:cb:24:5c:81:6c:67:3d:32:4b:70:56:e4:3b:39:73:
63:32:35:60:64:cf:8c:93:c9:71:06:64:ad:2b:5e:25:e2:98:
e2:a4:c8:82:66:aa:55:e7:4a:9f:eb:b4:0d:d4:0d:c2:e6:49:
6b:7a:28:1d:4b:93:b8:31:85:31:6a:c0:2c:28:1c:25:9c:6a:
db:2a:f1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:11:00 2025 by rpki-client