Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
File: DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft (raw, json)
Hash identifier: IPfSDOrNXsWRn5xO0DTClrT1gKD2Q3dYaO9WgjAuXI4=
Subject key identifier: C1:E9:68:F6:CC:AE:D7:F8:AD:9A:D3:2C:9D:2A:71:D2:E1:27:A1:11
Authority key identifier: 0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
Certificate issuer: /CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Certificate serial: 0196B8C7F132BB56D531A8E748C232433A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
Manifest number: 054B
Signing time: Sat 10 May 2025 06:00:33 +0000
Manifest this update: Sat 10 May 2025 06:00:33 +0000
Manifest next update: Sun 11 May 2025 06:00:33 +0000
Files and hashes: 1: DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl (hash: lz/0NP8HTUjyo/Kppe6cHRrRfOOknjo1wl4w215Y/bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:f1:32:bb:56:d5:31:a8:e7:48:c2:32:43:3a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Validity
Not Before: May 10 06:00:33 2025 GMT
Not After : May 11 06:00:33 2025 GMT
Subject: CN=c1e968f6ccaed7f8ad9ad32c9d2a71d2e127a111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0e:29:a5:5d:9d:6f:ea:ac:a7:88:e3:7c:3e:
07:2e:06:92:18:6e:81:b2:f0:77:94:e5:d9:64:cb:
d8:d0:5f:78:71:b4:1c:d1:e2:8a:54:3f:09:52:81:
66:e4:f2:c9:07:11:91:23:c2:ff:56:49:f8:60:e9:
da:92:6d:97:56:c4:61:31:59:f5:fa:3c:d9:67:48:
e6:b0:56:8c:31:64:66:7f:b3:11:70:0a:b1:0d:c5:
3d:66:6d:72:21:f9:69:41:93:e3:31:54:19:11:9c:
59:37:74:76:70:3f:41:11:84:82:92:f3:43:4e:25:
02:8a:23:85:62:0a:c4:2c:8a:90:01:a6:08:99:71:
fd:36:cf:06:77:9a:5b:94:0c:95:8e:f9:63:a4:83:
4b:90:b2:6c:47:98:e9:0b:af:5f:1b:6d:db:27:58:
7e:c1:ee:1d:9a:04:a0:f3:b9:b2:87:8a:4e:7a:61:
19:b6:12:df:7f:ab:38:5c:c5:07:20:d3:c0:c2:d6:
8d:2c:70:eb:17:de:6c:6a:9c:8b:3e:c0:8a:02:69:
93:3e:1e:5d:df:1a:6c:08:c0:7f:09:a8:fa:b4:48:
59:c5:44:21:50:f3:dc:5e:ef:7b:c2:08:53:f2:3d:
10:da:59:a5:03:a5:e5:11:ef:50:22:d2:a4:7e:f0:
63:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E9:68:F6:CC:AE:D7:F8:AD:9A:D3:2C:9D:2A:71:D2:E1:27:A1:11
X509v3 Authority Key Identifier:
keyid:0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2e:16:ab:ad:fd:2f:4c:e8:28:59:87:95:21:ed:bf:3a:16:
ab:eb:6d:53:1f:2f:34:ed:0c:07:d6:ac:33:4f:93:89:ff:a7:
a0:0b:44:fe:05:46:f8:6e:de:81:ec:d9:b0:2f:0e:71:48:28:
db:97:36:69:37:3c:0a:72:33:0f:2b:43:f3:a4:74:c4:c0:b5:
71:33:0b:6f:03:3e:89:ae:27:64:55:ce:07:bb:59:b1:77:97:
8f:03:67:7a:4d:51:dd:ce:3a:b4:60:28:12:c6:7b:3d:7c:ba:
bf:7f:63:f2:26:88:b6:bf:8d:31:a2:da:d2:eb:03:9e:62:61:
05:79:a6:6f:95:c0:4e:86:67:28:14:0a:34:81:56:f4:f6:25:
60:8f:46:2b:78:85:ce:97:7d:4f:19:bb:33:b9:07:53:e4:94:
79:c1:2d:7a:c1:57:e1:3e:1d:11:30:34:61:32:81:c6:16:42:
37:31:eb:19:3a:96:dc:6f:e7:1f:95:f2:5c:b7:e4:22:0f:ab:
0a:39:c5:74:be:4e:a9:e4:31:fb:f0:6a:4a:1d:41:67:5c:67:
9e:1c:c3:d4:1a:f0:e2:6f:01:fb:a8:bc:5d:d8:35:da:f4:cc:
a4:ec:2f:a9:7c:ab:90:c4:93:1d:c6:63:55:ab:98:2d:14:83:
0d:ca:91:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:18:35 2025 by rpki-client