Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
File: DZxWoYyYei0aLnBEt-MbMhv3rBY.mft (raw, json)
Hash identifier: oS9Ue16BvDcznQwZtiuvVl8GgJiBBp9PckcKwOvr7Ok=
Subject key identifier: D3:5B:4E:6C:4E:52:6D:05:4A:AC:85:33:87:E8:23:5E:C2:0E:36:07
Authority key identifier: 0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
Certificate issuer: /CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Certificate serial: 0196D0D02482AA544B48E389360B715AF990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
Manifest number: 06CF
Signing time: Wed 14 May 2025 22:00:23 +0000
Manifest this update: Wed 14 May 2025 22:00:23 +0000
Manifest next update: Thu 15 May 2025 22:00:23 +0000
Files and hashes: 1: DZxWoYyYei0aLnBEt-MbMhv3rBY.crl (hash: cm7HiGFY9hCILA5F1zSAPrPKN26MqmFHnykgYc9K6mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:d0:24:82:aa:54:4b:48:e3:89:36:0b:71:5a:f9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Validity
Not Before: May 14 22:00:23 2025 GMT
Not After : May 15 22:00:23 2025 GMT
Subject: CN=d35b4e6c4e526d054aac853387e8235ec20e3607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:e4:e4:4c:39:dc:66:b0:64:94:ec:13:74:
56:eb:75:0b:bb:72:0e:a6:2d:ae:d9:d7:a8:80:e3:
58:ed:f6:fc:94:8c:99:63:d8:de:aa:3d:62:27:36:
de:13:c1:08:c7:cf:1c:7e:77:50:1e:f1:bc:a3:d2:
6b:13:45:33:1f:59:09:af:9e:3e:1e:a2:0d:de:89:
d2:b0:36:0a:25:c5:dc:74:87:5b:09:cd:df:37:72:
38:f4:83:7a:76:58:56:0f:1b:2f:92:e2:24:9d:48:
41:24:26:b5:27:38:5e:4f:45:9f:4d:90:06:d8:e3:
8b:b1:41:90:0b:52:e0:c5:e2:a1:5e:b3:c0:51:e5:
61:4c:0c:9e:49:d2:84:4b:c7:81:eb:f3:1e:5f:f4:
e5:b7:b9:cd:bd:ab:17:c6:48:67:a5:04:2c:e5:5f:
ba:0f:0e:45:e7:80:ad:c4:25:5b:2f:a8:fc:a4:9c:
be:4f:3b:16:8e:20:ae:fb:bc:16:49:2d:b9:2c:8a:
ab:ec:61:c3:c6:b6:22:1e:c2:c1:9d:87:1b:43:34:
61:4f:34:74:f7:45:32:bb:76:99:5b:05:3e:c5:29:
05:6b:75:0d:ca:06:06:bc:b7:0b:fd:fb:69:40:44:
b7:5d:7e:9d:0e:a3:d4:74:ef:5c:ed:75:0b:7a:e9:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5B:4E:6C:4E:52:6D:05:4A:AC:85:33:87:E8:23:5E:C2:0E:36:07
X509v3 Authority Key Identifier:
keyid:0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:40:97:73:c1:28:ec:cd:01:ce:d4:4a:bd:18:06:05:5b:88:
1c:3a:65:9a:fa:a8:f3:79:b9:0f:e7:c7:f9:93:26:12:09:8a:
e1:4a:15:91:b1:5b:2e:36:32:15:23:00:63:b2:30:82:05:ef:
53:63:8f:66:0d:c1:7e:85:c9:68:ec:d5:3d:23:92:aa:61:f6:
5e:95:9f:9c:67:f7:07:e4:e1:e7:10:2d:6e:c3:09:03:f9:ad:
88:17:80:23:fe:2b:9c:d7:f3:70:00:7a:eb:9b:6f:d2:07:fd:
49:00:e5:5f:91:d3:08:d7:01:ce:57:7b:93:14:16:94:20:db:
47:d5:6a:94:8a:fb:87:fe:e4:fd:b9:98:b4:8a:3f:20:52:01:
a7:44:d2:7d:b1:23:32:9d:5b:1d:2c:dc:88:84:4e:77:60:ad:
3d:3e:66:3b:e1:b2:f6:f9:f5:61:3d:46:e8:18:1f:f8:5d:5a:
75:2c:b4:c4:f7:b7:93:2e:8c:84:c3:f1:29:e7:f7:ea:22:46:
86:23:c9:b1:37:bf:bf:f6:05:6b:d1:a5:3c:fc:5e:33:42:5a:
b9:4b:f9:fd:48:f1:84:77:74:8f:0d:df:00:2c:dc:e3:52:d8:
62:61:3f:7b:d9:8e:88:ed:52:09:88:95:7b:54:7c:9a:10:ad:
14:59:9b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 04:37:21 2025 by rpki-client