Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier: 2m9DvBUafM+g3LvUWqGqX3oFJcAi2wsvjkNhP18KP5E=
Subject key identifier: EB:53:72:67:38:7B:F8:77:01:8B:9E:71:EF:38:1F:11:86:BD:57:72
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial: 0196A6C236CFE615CB00E43F76E4E345C364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number: 1524
Signing time: Tue 06 May 2025 18:01:07 +0000
Manifest this update: Tue 06 May 2025 18:01:07 +0000
Manifest next update: Wed 07 May 2025 18:01:07 +0000
Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: z6UjrN03pgYD4Sn1q0r4cg0wN/jIpzcn1+OkGPCRpa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:c2:36:cf:e6:15:cb:00:e4:3f:76:e4:e3:45:c3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Validity
Not Before: May 6 18:01:07 2025 GMT
Not After : May 7 18:01:07 2025 GMT
Subject: CN=eb537267387bf877018b9e71ef381f1186bd5772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:2f:4e:36:9e:6d:4d:60:a8:43:68:ea:0d:
8f:07:26:5b:1d:44:1e:14:e5:0e:0d:8c:74:57:67:
14:74:5a:8a:18:b2:a3:98:e6:df:a4:80:4c:c5:39:
18:b2:fa:41:f9:fe:ab:a3:97:4d:1c:43:2b:c1:3a:
0b:c4:37:22:51:35:30:6d:07:4c:36:dd:24:a5:af:
4c:6c:3b:6a:57:4c:cc:f4:65:23:10:1d:fe:80:a6:
9d:00:72:58:dd:df:71:1a:7e:66:ea:d1:2d:e2:45:
ac:c2:ae:fd:ab:61:7f:cb:29:58:00:58:2b:5e:59:
39:e2:d2:3c:5a:db:9c:a3:29:11:a4:57:25:92:9d:
2e:15:c2:0e:23:d3:0d:c7:ec:70:bf:c1:bf:26:cc:
2b:f6:06:90:26:94:fc:bd:ae:f0:22:b0:69:eb:79:
9d:50:66:c4:8f:28:b9:2a:84:82:ec:68:71:5b:78:
20:9a:20:a4:8f:a7:be:56:7e:2b:6f:f7:58:42:5f:
20:ad:49:83:24:22:ac:1a:95:bf:e5:e4:e1:a0:b3:
29:99:6b:80:4d:23:5e:cb:24:a0:c5:84:05:b6:68:
06:64:59:f7:8a:1f:8c:c8:7a:6a:7a:7d:92:24:53:
81:ee:a9:2e:5c:fc:05:02:a7:fc:f3:6f:92:07:88:
bd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:53:72:67:38:7B:F8:77:01:8B:9E:71:EF:38:1F:11:86:BD:57:72
X509v3 Authority Key Identifier:
keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a3:7d:51:60:22:1f:30:be:7d:73:eb:c9:f4:e0:c1:7b:57:
3b:75:43:b6:84:a0:48:62:79:cd:06:af:05:ae:8b:17:a6:06:
d0:7a:75:1b:76:60:a5:0b:64:95:df:36:43:6c:2f:38:7a:75:
26:23:9a:cb:74:55:ab:a9:02:42:76:0e:43:61:d4:15:95:a9:
1a:89:40:62:6e:0b:b8:ff:e5:dc:eb:c8:c3:f6:59:89:d5:6e:
08:68:9d:c4:fe:2b:42:14:80:c5:1d:a0:83:80:2d:aa:b8:54:
46:d9:93:fb:79:ae:5f:fb:a5:26:f9:fa:b6:8a:73:a8:a1:a6:
76:4c:df:95:fe:78:bf:1c:52:46:83:37:21:2d:68:ea:0c:d4:
fb:a7:f0:d0:0d:84:ed:fc:f1:f5:01:2b:90:64:ce:35:34:be:
33:45:81:3c:b8:03:45:84:58:39:12:0c:2f:3d:cc:aa:68:c7:
17:75:f5:16:c6:f6:a0:7c:ea:f5:6a:c8:73:8e:14:04:b2:41:
a1:ee:0b:05:d5:18:c9:f7:66:56:64:0d:ae:8e:5c:c9:ce:62:
6e:6a:d9:fc:a5:3e:d9:2f:48:e6:ec:52:b8:d3:71:b4:c3:43:
cd:82:ea:8a:b6:8d:8d:e2:f7:5f:97:ea:e4:08:12:5e:25:33:
af:45:99:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:54:16 2025 by rpki-client