Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft
File: dt0D59chnX68HyMPcGMtyRNvNBM.mft (raw, json)
Hash identifier: 2WkchKlZ9+4Hf6OftRcl1DyyTZlpwZVi8OYte8iDl/A=
Subject key identifier: EF:C6:50:C6:17:EE:C0:B8:4E:DD:A1:2A:86:4E:29:BA:90:DC:1E:4B
Authority key identifier: 76:DD:03:E7:D7:21:9D:7E:BC:1F:23:0F:70:63:2D:C9:13:6F:34:13
Certificate issuer: /CN=76dd03e7d7219d7ebc1f230f70632dc9136f3413
Certificate serial: 0196C20250EE52AD73046CF456BBA2F75632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dt0D59chnX68HyMPcGMtyRNvNBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft
Manifest number: 0442
Signing time: Mon 12 May 2025 01:00:53 +0000
Manifest this update: Mon 12 May 2025 01:00:53 +0000
Manifest next update: Tue 13 May 2025 01:00:53 +0000
Files and hashes: 1: dt0D59chnX68HyMPcGMtyRNvNBM.crl (hash: R1EAn3sBC9OElPEk7B6BThiymkG1zYOekyxo9+LciYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dt0D59chnX68HyMPcGMtyRNvNBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:50:ee:52:ad:73:04:6c:f4:56:bb:a2:f7:56:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76dd03e7d7219d7ebc1f230f70632dc9136f3413
Validity
Not Before: May 12 01:00:53 2025 GMT
Not After : May 13 01:00:53 2025 GMT
Subject: CN=efc650c617eec0b84edda12a864e29ba90dc1e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:56:80:35:b1:63:99:b1:33:aa:83:a3:d2:
69:79:cf:e2:6b:c5:a5:5b:8c:42:12:18:cf:0e:d3:
8a:85:73:29:50:8a:c7:78:17:70:a6:c3:ab:be:bc:
6f:2d:a7:7b:07:92:c3:64:c3:b3:b7:a3:94:ef:68:
6a:36:07:b9:8b:52:13:87:5c:8d:b5:c7:9d:11:6f:
ae:3f:60:75:dc:b6:db:1b:aa:e4:9f:b8:78:01:0e:
27:0e:e6:99:8c:71:e6:21:15:42:08:3b:b0:47:62:
79:00:8e:a3:cf:24:6a:a9:d3:82:fd:3b:7f:81:ab:
1b:97:97:ef:40:ec:1d:ae:d6:79:34:cb:0d:a0:a8:
da:dc:0e:ff:e8:51:3e:aa:18:e7:32:78:6a:8b:05:
26:28:07:a2:8c:3a:bb:6f:2d:61:92:72:d0:9b:99:
c7:aa:7c:55:08:d0:26:c4:2e:0d:0e:e7:99:04:6e:
2f:28:b0:da:df:11:c1:a6:61:eb:62:58:58:f5:01:
e4:6e:54:04:49:d5:8c:1e:78:c0:7c:59:21:10:a5:
bd:bf:2f:45:92:f3:22:53:c4:8e:78:7b:60:34:1c:
dc:12:d4:b6:55:41:a7:dd:ca:50:c1:47:d0:e4:3e:
55:bd:52:da:6e:8f:bc:33:ea:01:79:94:7f:ba:95:
af:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C6:50:C6:17:EE:C0:B8:4E:DD:A1:2A:86:4E:29:BA:90:DC:1E:4B
X509v3 Authority Key Identifier:
keyid:76:DD:03:E7:D7:21:9D:7E:BC:1F:23:0F:70:63:2D:C9:13:6F:34:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dt0D59chnX68HyMPcGMtyRNvNBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8f:0c:58:f9:53:72:be:d8:71:89:56:79:04:e0:61:ec:59:
73:d2:ff:b6:70:ac:65:6f:10:7a:f0:0e:e4:33:0e:98:a2:d2:
46:bb:c2:1d:95:0a:67:5e:62:01:23:f3:f3:45:2e:d9:e2:97:
08:1c:49:c2:c9:6b:c3:b4:3f:7f:db:f3:3f:5f:dc:45:1d:17:
46:de:1b:39:e1:ef:f1:63:5b:64:c6:43:74:26:73:ca:18:1a:
94:ac:ab:ca:d8:9b:43:2c:03:45:de:d1:40:37:9a:55:bf:28:
d9:7d:b8:36:fd:57:05:fb:38:de:5c:c2:4c:8a:dd:df:7e:63:
4e:e0:1e:3f:17:ba:ce:92:db:ce:49:5f:b5:22:40:70:87:95:
b6:86:e1:2e:ae:91:82:8e:08:5f:93:11:ea:dd:c9:80:32:c2:
08:e7:33:ca:cf:e5:56:47:d5:10:7c:20:66:cb:26:92:17:46:
51:d2:26:8f:66:73:e6:43:f1:e9:47:84:c9:a9:f7:08:ea:0d:
79:00:a7:61:0f:61:b8:7d:bb:fe:3e:06:7c:1d:01:c8:a4:61:
85:69:82:6a:ae:13:06:10:ef:f5:54:4b:04:48:b1:ce:d4:5d:
f3:42:e0:27:5d:7f:17:5a:0d:59:6f:0e:e8:6b:1c:f8:82:c8:
3a:ed:70:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:12:10 2025 by rpki-client