Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
File: DhI9xSvlTkcrv-N18u1B5JqHg-c.mft (raw, json)
Hash identifier: UGoxLniZveLCziX/yMwMEPzvhWBJa8mxwPPxRN9wccI=
Subject key identifier: 64:42:A2:60:3B:F3:25:4C:73:4D:55:EC:B6:6C:CF:71:CE:4F:57:2A
Authority key identifier: 0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7
Certificate issuer: /CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
Certificate serial: 0196AD31E91B10B76797D1278A2D550668D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
Manifest number: 055A
Signing time: Thu 08 May 2025 00:00:51 +0000
Manifest this update: Thu 08 May 2025 00:00:51 +0000
Manifest next update: Fri 09 May 2025 00:00:51 +0000
Files and hashes: 1: DhI9xSvlTkcrv-N18u1B5JqHg-c.crl (hash: 2PXCURSzNeJ2dMk9KmFzQ8VBCcmbH94ceeftRGR7ldk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:31:e9:1b:10:b7:67:97:d1:27:8a:2d:55:06:68:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
Validity
Not Before: May 8 00:00:51 2025 GMT
Not After : May 9 00:00:51 2025 GMT
Subject: CN=6442a2603bf3254c734d55ecb66ccf71ce4f572a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:94:2b:2b:84:e9:09:e4:ef:1d:c0:ac:d3:80:
38:67:1c:99:72:e1:78:85:57:23:a0:05:89:c3:40:
68:f6:b0:76:ff:31:b3:5c:70:4b:99:37:ef:7c:95:
18:b4:24:0a:f9:0c:38:7a:a4:64:3d:06:8d:28:e5:
e7:21:21:53:72:62:11:06:f6:11:55:c3:87:f3:2b:
3b:4b:4b:6e:bb:54:59:da:d5:7e:f9:ff:f8:48:ee:
da:51:71:92:bf:bf:f5:c1:c9:74:dc:e3:90:c2:ba:
7c:32:85:66:b3:a2:3b:55:50:01:09:b7:d7:29:13:
1f:0b:4d:a2:dd:e8:8c:7b:0f:cb:df:b2:b4:cd:9a:
fc:65:df:43:40:ba:eb:17:b8:9e:62:3e:ed:11:f6:
03:a5:9d:c1:fe:82:59:c7:76:95:70:ef:e9:cb:f6:
8e:a3:d6:e2:48:14:c9:08:7f:d9:ef:03:9c:29:cb:
fc:40:ae:68:18:bf:92:e8:3b:c6:0f:1b:2a:9f:36:
c4:1c:d7:8c:0e:13:2b:ae:50:d0:1a:29:76:1b:fe:
43:93:e2:51:af:d7:04:70:46:97:6b:a6:b8:77:05:
f1:56:3d:4c:fd:24:e0:c1:a6:35:61:1b:dc:cd:da:
f3:ae:47:da:ae:07:b1:9d:a3:9b:23:5b:66:b4:a9:
ad:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:42:A2:60:3B:F3:25:4C:73:4D:55:EC:B6:6C:CF:71:CE:4F:57:2A
X509v3 Authority Key Identifier:
keyid:0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7c:91:2b:8a:62:23:39:6f:a5:aa:37:1b:34:95:36:f1:c2:
21:ee:46:19:a7:3a:dd:4d:e7:c9:e1:94:b2:a9:eb:33:0f:9d:
0a:58:8b:32:6a:89:85:43:70:74:10:0f:3c:45:6d:03:e4:66:
5f:74:e1:9b:8a:ac:f5:ca:f4:41:b4:77:4c:d5:72:f2:45:a9:
59:1b:2e:86:02:45:97:dd:c7:b7:34:6b:2f:cd:9b:c4:11:08:
d9:ee:16:7f:cd:e0:72:ca:bc:d2:6e:33:1c:12:b0:0d:a9:13:
f2:48:cf:37:6d:12:02:70:26:8d:fc:e4:37:52:4a:66:bb:c9:
42:2f:cb:47:a3:cb:68:85:9b:7c:09:08:01:fe:6b:81:4a:b3:
f9:e3:4b:d9:cc:ba:d5:31:98:24:94:87:8d:2a:f3:da:96:8e:
cc:ce:c8:11:a9:81:4b:01:53:dc:df:b7:2f:98:ca:b4:31:b6:
f8:a3:3b:48:33:ad:41:38:56:bc:d4:85:67:5e:a4:b3:5d:53:
79:09:ee:1a:d6:9b:b5:ff:32:6d:cf:65:14:9c:b5:8e:e3:48:
ae:fc:db:05:05:56:e4:49:5f:4c:8f:a7:90:9d:e7:84:00:1a:
23:d3:7c:ba:f2:52:64:03:b8:7c:ae:3b:c4:b2:6b:49:02:c4:
97:0e:79:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:39:04 2025 by rpki-client