Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
File: dlIO_x7h4o493PuJ58tvfYmnfJw.mft (raw, json)
Hash identifier: SzyvmqkkuxAa/jO35cx/ijbFZ8OnBBRbgTqhSkgRAqQ=
Subject key identifier: C0:F6:09:EC:3A:36:D9:E4:06:96:93:70:28:07:E7:9A:2C:4D:63:42
Authority key identifier: 76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
Certificate issuer: /CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Certificate serial: 0196C193DD0A920096D9652A04B178EB095B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
Manifest number: C2
Signing time: Sun 11 May 2025 23:00:15 +0000
Manifest this update: Sun 11 May 2025 23:00:15 +0000
Manifest next update: Mon 12 May 2025 23:00:15 +0000
Files and hashes: 1: dlIO_x7h4o493PuJ58tvfYmnfJw.crl (hash: 4mCGp6znR4znJQ9Diobwns4Dhu29AizEPSDE5sfQhOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:93:dd:0a:92:00:96:d9:65:2a:04:b1:78:eb:09:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Validity
Not Before: May 11 23:00:15 2025 GMT
Not After : May 12 23:00:15 2025 GMT
Subject: CN=c0f609ec3a36d9e4069693702807e79a2c4d6342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:69:5f:57:60:c2:30:d2:6b:5b:29:d0:0f:
61:a6:7a:e0:bd:0f:d2:13:87:b8:86:21:31:74:5e:
dc:dd:5f:17:66:81:b1:7f:dd:03:53:16:37:44:1d:
09:5b:32:b1:7e:74:c4:27:3a:2c:8f:28:6f:52:91:
84:a5:34:39:e3:dc:38:72:66:a0:4b:6e:86:e5:f8:
24:7b:68:fb:92:cd:db:45:1a:9b:56:f4:c3:c4:68:
51:a7:87:46:5e:23:13:2c:bb:f3:08:6a:fc:82:38:
90:62:ba:16:ea:a4:03:ef:b0:e5:5d:55:89:3f:d8:
95:50:76:df:91:98:64:70:e4:34:f8:ee:36:1f:11:
41:b1:0a:ad:a9:56:dc:56:bf:4a:8c:86:13:14:bd:
cd:e5:b6:3c:21:0d:36:a6:b2:60:94:8d:d5:d5:4b:
9e:d0:93:f5:70:b5:ef:b1:92:8a:15:8d:9a:36:53:
ed:69:70:53:a4:b4:be:26:07:11:fb:d1:7e:d2:ab:
c6:c1:d8:dd:fb:36:17:31:cb:55:30:8b:a4:ed:de:
63:82:16:e4:3e:fb:a5:e6:91:d2:7e:5c:c5:63:68:
6c:38:0b:b9:f2:f7:a5:cd:d8:89:69:14:4c:38:3f:
74:4a:31:18:fc:17:f4:04:e9:35:11:15:ca:54:ed:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F6:09:EC:3A:36:D9:E4:06:96:93:70:28:07:E7:9A:2C:4D:63:42
X509v3 Authority Key Identifier:
keyid:76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:78:78:20:86:2e:4f:5a:de:ad:31:0e:ba:81:8b:71:e5:f5:
65:a6:18:9a:ed:20:37:f1:5d:d7:1b:04:46:73:52:0c:0d:f5:
5e:9a:84:cb:6d:9c:25:3a:10:6d:13:65:ac:55:29:4f:0e:15:
d0:88:7b:6e:92:ae:12:29:48:05:e0:87:f0:02:de:ea:bf:d5:
46:eb:ea:35:04:9e:04:40:f6:37:43:41:61:87:f6:80:a9:4f:
ef:0f:d6:eb:82:95:5f:62:b2:20:07:21:f9:6a:50:40:97:83:
d5:77:1c:ca:c8:a7:10:d9:38:e0:a7:26:c1:b2:66:1d:31:50:
e1:c8:16:53:c3:11:c5:27:e1:eb:f8:63:6f:ab:e8:0e:4a:2f:
6c:a0:8a:bf:59:c3:00:13:25:e5:43:61:98:ac:0a:56:f7:c2:
26:8e:51:0d:4f:6f:09:57:c8:94:38:08:7b:36:34:0c:ac:fa:
23:8f:6e:cf:dd:74:26:9a:84:b1:6b:c5:b8:c0:b9:96:06:89:
7d:a3:3b:e0:2e:69:72:70:06:6b:59:10:ac:5e:c5:b6:ac:05:
08:4e:4d:14:6b:d1:eb:fb:9b:5d:6c:3b:d2:b3:d7:83:1e:0c:
42:fa:d2:8c:19:91:0f:d1:de:69:d7:99:29:05:21:bc:0b:27:
0c:bc:ad:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:19:42 2025 by rpki-client