Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
File: dBkW6TW7TmhYsdIjYVrONp7SaB4.mft (raw, json)
Hash identifier: 6C5iUYkrGP3MY1y/ahH/O2xCOmIR6QzywZCBhI0tJB4=
Subject key identifier: 1D:D6:65:76:9F:7D:CF:BF:93:77:E3:82:FE:55:6C:06:71:24:36:41
Authority key identifier: 74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
Certificate issuer: /CN=741916e935bb4e6858b1d223615ace369ed2681e
Certificate serial: 0196CBE0DACD7E927C09BF629E8936C6B1A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
Manifest number: 1539
Signing time: Tue 13 May 2025 23:00:32 +0000
Manifest this update: Tue 13 May 2025 23:00:32 +0000
Manifest next update: Wed 14 May 2025 23:00:32 +0000
Files and hashes: 1: dBkW6TW7TmhYsdIjYVrONp7SaB4.crl (hash: mL8gn2eeRi55tDze9GAEgMbpBje98J4m6jujQNIF36A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e0:da:cd:7e:92:7c:09:bf:62:9e:89:36:c6:b1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741916e935bb4e6858b1d223615ace369ed2681e
Validity
Not Before: May 13 23:00:32 2025 GMT
Not After : May 14 23:00:32 2025 GMT
Subject: CN=1dd665769f7dcfbf9377e382fe556c0671243641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:e7:be:57:ab:04:84:80:0c:2f:c0:f3:8e:
d7:01:a7:00:96:c2:4a:c2:05:e0:b0:80:59:5e:1a:
f8:b1:01:5a:5c:1e:1b:a0:5a:19:c9:06:d9:3b:48:
bc:9d:7f:83:77:99:7d:b7:ab:ac:6c:ce:5d:84:7f:
b2:83:a4:e6:b5:8a:58:d9:86:db:12:8c:7b:16:b9:
99:01:92:c4:57:78:75:7b:73:40:11:3e:6f:fe:21:
53:de:c2:33:bd:2e:f4:19:6c:b9:fd:f0:42:10:72:
87:60:ee:d9:16:ff:de:fe:db:fe:c6:6e:d9:81:92:
0b:35:d5:12:e5:6a:5d:5a:20:21:a9:18:5a:ba:6b:
51:52:2c:84:0b:6c:96:fd:4c:66:36:82:65:18:b9:
12:0a:a1:0f:64:f3:94:b3:30:5d:46:33:7b:a9:22:
e9:91:26:fa:06:35:21:11:07:54:fe:16:c8:3d:5c:
c4:65:9f:27:aa:16:86:46:45:c0:5a:92:32:51:a0:
bf:89:6c:16:f4:e5:b1:90:6f:79:cc:0e:b5:75:c6:
26:d4:08:9b:e3:16:25:dc:f0:36:0b:59:86:c6:04:
1d:dd:f6:66:bd:16:6e:05:d5:e4:95:ac:0d:96:6c:
6a:8d:1b:6f:8b:98:c9:3f:44:ea:0b:d9:7f:db:70:
c0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D6:65:76:9F:7D:CF:BF:93:77:E3:82:FE:55:6C:06:71:24:36:41
X509v3 Authority Key Identifier:
keyid:74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6e:6b:5b:24:7e:e9:99:5e:35:10:5c:4b:82:4e:57:87:d0:
30:02:d7:53:1a:d0:63:cf:ee:1f:d6:1a:ae:03:78:b6:4c:cb:
35:1b:0c:85:7c:3d:46:22:44:38:24:9d:43:ca:d4:40:00:96:
4b:b6:11:77:84:43:d5:b8:e5:0c:2b:3b:ea:a2:ff:3f:f2:4a:
07:ed:48:ea:2f:4e:5a:10:17:1e:aa:6d:c4:6f:a9:0a:50:91:
24:52:bd:be:b8:71:23:4a:f1:f3:ca:c0:b2:f0:94:87:39:20:
09:ce:b9:48:4c:b6:ef:4f:1e:8f:b8:19:7a:02:f1:b8:3e:3b:
ca:ec:fe:85:2e:3a:c5:c7:71:f7:81:f1:06:f4:b0:f9:36:0a:
fe:b9:40:41:d6:55:84:c9:52:fe:19:13:89:43:19:fe:d0:dc:
36:49:0a:37:41:04:f3:09:25:d4:5f:c9:91:3e:8b:63:53:eb:
03:c5:91:35:e4:7d:da:2d:0b:c6:11:42:d5:b3:d8:79:2f:c5:
4f:99:df:e6:72:b5:09:25:20:84:68:f1:84:65:5f:45:18:a3:
69:a6:41:0c:4d:65:77:d1:8f:2e:70:81:2e:01:0b:a2:90:57:
36:33:1f:69:6c:54:4b:12:e6:6a:ff:02:2b:02:61:26:b2:a8:
45:43:15:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:12:47 2025 by rpki-client