Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
File: Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft (raw, json)
Hash identifier: GNWEZJKEJzKHKxgnI5eQ0UgplgAJjTOeeWc+FfxVyLA=
Subject key identifier: EE:76:BE:BE:AC:86:62:A6:53:1E:75:C1:FB:B6:6A:BD:C1:9F:07:67
Authority key identifier: 0E:CD:27:27:E7:4A:9C:6A:AE:88:F9:A0:11:0D:0C:94:9B:1E:97:35
Certificate issuer: /CN=0ecd2727e74a9c6aae88f9a0110d0c949b1e9735
Certificate serial: 0196B7B56A3014F68FE6E233862471F934BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
Manifest number: 0C9C
Signing time: Sat 10 May 2025 01:00:41 +0000
Manifest this update: Sat 10 May 2025 01:00:41 +0000
Manifest next update: Sun 11 May 2025 01:00:41 +0000
Files and hashes: 1: Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl (hash: tlfiQ5wQmBptKIFCuwEgv1HQVdKJsoWLrXWLHOuWZ5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:6a:30:14:f6:8f:e6:e2:33:86:24:71:f9:34:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecd2727e74a9c6aae88f9a0110d0c949b1e9735
Validity
Not Before: May 10 01:00:41 2025 GMT
Not After : May 11 01:00:41 2025 GMT
Subject: CN=ee76bebeac8662a6531e75c1fbb66abdc19f0767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:29:ce:b1:1f:78:71:98:be:32:c5:38:60:
85:04:de:ed:e9:d7:96:a3:6e:1c:8c:d3:f8:51:98:
15:f1:b0:6f:58:06:33:90:b9:6b:1f:17:a6:1e:83:
d4:c0:96:d3:8b:8e:3f:b8:87:98:9d:cd:c4:1e:3e:
95:23:dc:a9:7f:05:dc:b6:6c:d5:e7:4d:6e:f2:36:
d4:48:41:46:54:26:f4:bf:77:b9:05:25:6e:b6:4d:
97:38:be:83:a1:0f:e7:04:b5:4c:ba:14:ae:e4:7b:
7d:0a:f4:32:d4:95:71:37:33:00:99:ef:f6:24:6a:
0f:bc:2b:c4:90:e0:a1:21:17:d3:b0:08:d4:7d:bb:
08:4b:f0:7c:94:6e:6c:d1:26:54:09:45:a0:47:a4:
6b:6d:32:0b:ac:58:da:7d:c2:45:e8:e1:1c:d0:b3:
23:ff:3c:d4:97:59:a4:99:d4:a6:43:e3:bb:28:54:
13:81:88:b3:93:75:ae:f5:80:0a:87:d8:a6:a7:c5:
62:ba:a9:64:6e:22:13:8b:e1:dc:c0:54:4a:6d:cf:
f5:ae:6f:3f:41:a1:81:e5:d3:ea:f9:e6:76:04:8a:
69:76:b3:3b:f7:71:b4:d4:5e:61:6f:eb:83:d9:12:
17:4e:9e:0b:52:ba:45:ef:eb:84:bf:62:a5:60:d5:
b0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:76:BE:BE:AC:86:62:A6:53:1E:75:C1:FB:B6:6A:BD:C1:9F:07:67
X509v3 Authority Key Identifier:
keyid:0E:CD:27:27:E7:4A:9C:6A:AE:88:F9:A0:11:0D:0C:94:9B:1E:97:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:20:e3:02:d8:1b:91:c8:b5:8e:5f:c1:54:70:96:79:a5:e9:
12:70:90:ea:6a:61:88:fc:ae:77:c7:9e:e0:38:8f:e1:80:c9:
e0:f1:10:aa:f5:71:ae:cb:6e:77:f6:c3:07:93:c9:af:cb:8b:
77:1b:e0:18:c9:0e:1c:32:fe:7c:eb:21:d6:ff:b1:15:be:bf:
7c:24:87:39:ae:fe:c9:3f:6f:a7:b0:96:8a:6c:b0:f4:bc:5e:
3d:ae:dc:25:29:01:9f:86:72:77:7f:3a:0a:8c:dc:dc:e9:65:
44:7b:1b:32:42:b9:2a:06:bb:47:19:ec:06:3d:63:12:65:30:
7a:19:fe:78:45:07:79:ef:2c:bb:38:ba:89:27:a7:00:d1:53:
1f:b9:77:0d:f7:9a:19:6f:9b:67:76:5f:f5:12:21:18:fb:17:
a0:db:34:63:b2:46:77:ab:11:ff:0e:1f:8d:a0:7a:56:ef:fd:
3b:f8:61:0d:2e:11:4d:d2:d1:14:d5:9b:90:47:3e:6f:2a:80:
d1:b6:9c:86:4b:bb:fb:00:ef:34:f5:70:7e:67:ac:4b:3e:06:
60:7c:d4:ff:a3:4b:a5:60:62:7d:be:03:c4:de:fb:08:fe:b7:
df:f7:b5:ce:5c:ef:78:bb:70:89:b1:7d:a5:3f:5a:c0:aa:28:
ae:e7:53:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:37:44 2025 by rpki-client