Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
File: dEMndQQU00na3gIjNJfPR2Vc0-Q.mft (raw, json)
Hash identifier: 9KxuYgKREpPWI81afB8O5S/Pe8yR/JGZMBUm24mF/54=
Subject key identifier: 89:CF:D5:C6:F1:2E:46:F4:2D:D2:15:16:1C:BB:3F:C4:F5:DC:A2:71
Authority key identifier: 74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
Certificate issuer: /CN=744327750414d349dade02233497cf47655cd3e4
Certificate serial: 0196C2A71A9A7362045A7FDA175DC8DAFC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
Manifest number: 0F08
Signing time: Mon 12 May 2025 04:00:53 +0000
Manifest this update: Mon 12 May 2025 04:00:53 +0000
Manifest next update: Tue 13 May 2025 04:00:53 +0000
Files and hashes: 1: dEMndQQU00na3gIjNJfPR2Vc0-Q.crl (hash: RkOb44rduG7t687i1DNF+k8z1LzOk2WwZgv/2jCmdMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a7:1a:9a:73:62:04:5a:7f:da:17:5d:c8:da:fc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744327750414d349dade02233497cf47655cd3e4
Validity
Not Before: May 12 04:00:53 2025 GMT
Not After : May 13 04:00:53 2025 GMT
Subject: CN=89cfd5c6f12e46f42dd215161cbb3fc4f5dca271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:91:14:80:8b:fd:2f:09:9f:6b:c9:4e:00:87:
f0:18:52:cb:2a:35:96:6e:5e:fb:82:c7:df:7d:53:
5e:79:e0:58:1a:df:2c:d7:5b:fb:be:65:cf:fd:ed:
f9:46:7f:2d:f2:83:9b:9f:27:85:ac:cd:88:be:e4:
8e:bd:69:00:17:ef:bf:50:80:a0:33:68:9b:84:c4:
ab:92:2b:17:8c:a9:f3:e5:ee:3d:c5:cd:8f:f9:b5:
ee:93:3e:c0:68:44:ec:81:bf:78:f5:49:d3:99:fc:
98:61:91:9a:c0:5d:55:50:60:6d:42:b0:11:49:6f:
e7:5e:0f:00:6e:e4:0d:56:bc:57:7d:8c:cc:05:2d:
28:4b:07:e0:d7:a1:1a:55:7e:4e:86:a8:b5:a4:2b:
b4:bb:28:e5:7f:35:d8:8a:75:03:f1:05:c0:e7:c5:
01:be:86:a0:38:34:aa:e3:c9:15:d7:62:73:22:fe:
3d:19:b7:4b:d8:f0:52:08:20:ea:56:65:22:21:27:
1a:e0:c8:28:28:4f:56:de:07:3d:0b:c7:eb:f1:b0:
c3:71:71:c6:d5:a5:5a:7d:42:06:86:ba:fc:f2:93:
72:9e:2b:89:b9:7c:26:0c:49:10:08:93:0c:55:5b:
16:c8:24:8c:78:19:cd:8d:17:6d:08:ab:18:11:18:
19:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CF:D5:C6:F1:2E:46:F4:2D:D2:15:16:1C:BB:3F:C4:F5:DC:A2:71
X509v3 Authority Key Identifier:
keyid:74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ff:ee:28:4c:bd:6f:ba:46:61:78:ed:49:3a:c5:4b:3a:e8:
87:e2:32:87:ae:c1:ae:7c:ac:00:a4:ab:37:52:48:8b:2e:1e:
37:6b:1c:39:3b:17:a8:07:39:03:7f:5e:03:fd:19:91:69:60:
8e:73:14:8d:66:04:c6:fc:fe:19:54:92:28:5a:6b:f9:0e:89:
1b:c8:91:cd:1b:4c:f1:97:d8:2a:a1:16:55:36:5a:5f:4b:07:
c1:c3:f7:9c:db:bc:93:31:9e:17:b0:e8:f0:c2:ae:56:b1:ee:
a8:98:1e:b4:dc:e4:b4:1f:d4:75:6d:49:67:0f:a5:6b:1b:ee:
ca:e2:cd:ba:a0:7c:ac:d0:7a:db:8e:6e:45:cc:01:29:37:cd:
28:fd:0d:6d:8d:25:a2:20:6e:b7:74:20:63:41:4b:e4:c6:5a:
c5:da:9b:e5:45:ad:b3:30:6f:91:bc:2b:f4:74:d1:5c:b4:01:
26:e5:cf:b7:9d:93:5d:a6:60:bd:dd:1f:e2:01:71:25:ac:9d:
e8:38:16:bf:7d:29:80:ee:77:24:e9:c2:33:81:2d:a8:69:9d:
c5:8c:e0:cc:0d:aa:fd:c8:aa:8e:44:8a:72:81:07:58:84:7f:
47:47:71:80:72:8d:fd:21:b4:de:e2:a9:db:77:7a:72:73:0a:
21:59:e0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:31:08 2025 by rpki-client