
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
File: A7DUU6H8523DQvF17tz3ogrV2Ro.mft (raw, json)
Hash identifier: PxlmDsj/MwpYcenO5T4PuLhv3BSC9PCHvSnyEHAqqwo=
Subject key identifier: DC:EC:17:EA:B0:45:FF:F7:50:FE:03:31:C6:C4:01:9A:4C:D3:9F:7C
Authority key identifier: 03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
Certificate issuer: /CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Certificate serial: 01969E9A32AF3BE1DADE16506B85B068C373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
Manifest number: 1521
Signing time: Mon 05 May 2025 04:00:27 +0000
Manifest this update: Mon 05 May 2025 04:00:27 +0000
Manifest next update: Tue 06 May 2025 04:00:27 +0000
Files and hashes: 1: A7DUU6H8523DQvF17tz3ogrV2Ro.crl (hash: w16OFMi1qQ5tvmUFTO1LAt7BZ+31y8tFBgwYScM1nXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:32:af:3b:e1:da:de:16:50:6b:85:b0:68:c3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Validity
Not Before: May 5 04:00:27 2025 GMT
Not After : May 6 04:00:27 2025 GMT
Subject: CN=dcec17eab045fff750fe0331c6c4019a4cd39f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:bd:21:95:25:ec:da:ba:e9:ac:a3:8c:e7:
6f:07:60:ef:6d:8b:ef:7e:74:0b:71:0a:d3:fc:11:
e1:3b:97:54:11:27:57:b1:0c:52:5f:65:53:d8:75:
83:15:e5:6d:a6:b2:29:a2:33:c8:3f:94:a2:49:f9:
7c:43:42:2b:04:76:18:de:dd:c2:07:63:81:52:d5:
71:1c:fe:f4:b5:8f:d8:a0:e9:77:97:04:79:0a:d4:
6a:1b:60:6a:b6:e7:31:41:75:64:10:57:44:72:8f:
7b:3d:95:7c:fc:6b:8e:e1:33:b7:3e:cb:7c:56:e4:
31:77:9b:3a:3b:07:80:8a:c0:c3:bf:43:0a:97:07:
2d:4f:ae:f1:96:3f:3e:18:f2:4a:39:6a:4a:38:9d:
ea:a8:1d:ac:d1:e6:11:89:a0:bf:e2:b1:e0:33:84:
81:43:f4:ae:a8:a9:41:70:74:73:db:e0:26:f7:24:
cd:0c:10:44:b5:21:56:8c:64:93:7e:3c:c0:0a:fc:
5c:ca:7a:a6:6d:2f:9b:fe:f0:3c:22:20:73:b6:b3:
4d:c7:00:0b:f9:89:57:bd:6f:f6:3c:72:5d:c9:c3:
b0:d8:ac:69:60:47:cd:b6:f6:3f:b2:f1:f9:85:cf:
f8:a5:9e:d4:8d:6d:cb:13:ad:b1:73:be:ad:0f:89:
dc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EC:17:EA:B0:45:FF:F7:50:FE:03:31:C6:C4:01:9A:4C:D3:9F:7C
X509v3 Authority Key Identifier:
keyid:03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:3f:e5:1d:ff:a4:63:d2:43:e7:71:83:e4:e3:36:e7:0b:52:
3a:87:3e:9c:f2:58:f8:c1:39:7d:e0:a1:75:9d:ea:49:e7:45:
9d:3c:9b:bb:1f:72:01:19:f6:70:4b:b2:cb:54:4d:13:09:68:
19:71:73:e3:81:06:19:60:05:c2:8d:4f:8a:c4:d4:2a:f7:50:
14:8c:4b:5a:c9:63:56:e7:bb:3b:c4:1f:3e:cc:24:0e:0e:6a:
67:54:51:17:b6:9c:02:31:85:d3:d5:05:6e:45:ae:a1:a0:ea:
c5:33:e2:d0:3f:d1:24:de:72:af:d5:68:ee:4a:57:66:a2:2b:
c8:66:2d:34:cf:ea:76:21:80:16:03:0f:92:f5:a9:24:ff:48:
a5:c3:d7:e8:71:26:5a:40:6e:c4:b4:2d:3f:f3:c1:8c:3c:d3:
88:06:8e:3b:bc:d0:23:46:b1:32:1b:c3:d4:8e:7e:79:cf:58:
49:12:dd:38:60:fc:91:44:0f:13:47:f3:a4:00:71:d3:57:51:
3f:6f:06:92:a4:b7:2d:d6:fa:bd:64:b2:77:2d:07:12:c3:ce:
42:d4:82:f9:ad:7a:51:da:03:f2:6b:96:91:7d:01:42:00:08:
8c:f3:c4:a0:52:8e:b3:09:0a:7f:a0:ae:31:e3:17:06:d3:fd:
68:b4:e0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:42 2025 by rpki-client