Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
File: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft (raw, json)
Hash identifier: PGxAfo9bRF5pK6F8aim9MIkNeMXYs5bhxygOjjk/AC0=
Subject key identifier: 30:33:2C:44:4C:F0:84:D8:1A:8C:11:1B:6E:D1:B5:AD:00:D3:9C:B0
Authority key identifier: 75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7
Certificate issuer: /CN=754c57866e97aadaad75decc69d0df072d506ee7
Certificate serial: 0196BD129644FFB90D70BBDE3120B6F7D3B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
Manifest number: 10
Signing time: Sun 11 May 2025 02:00:34 +0000
Manifest this update: Sun 11 May 2025 02:00:34 +0000
Manifest next update: Mon 12 May 2025 02:00:34 +0000
Files and hashes: 1: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl (hash: WCr4y42lD4j+eQ6OvkGoyndzAMJqegsj+VLQhORUDE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:96:44:ff:b9:0d:70:bb:de:31:20:b6:f7:d3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754c57866e97aadaad75decc69d0df072d506ee7
Validity
Not Before: May 11 02:00:34 2025 GMT
Not After : May 12 02:00:34 2025 GMT
Subject: CN=30332c444cf084d81a8c111b6ed1b5ad00d39cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:08:49:c4:ee:b4:27:a3:51:17:1e:f9:77:b8:
1b:3a:18:37:8f:d4:12:09:d0:48:ed:a5:aa:d2:be:
75:3f:c9:42:3a:e5:9e:00:e4:17:20:d1:6d:da:cc:
af:d2:84:a4:3c:b6:2d:a9:b0:8b:fe:8a:b5:b0:cb:
a6:c5:99:84:0d:ba:81:9e:8d:63:87:3b:e6:ee:0e:
3a:a5:1c:99:45:94:6b:35:ba:03:80:8d:bc:c0:51:
3b:c1:15:bd:50:68:4b:1e:a0:b7:76:30:25:3d:17:
cb:96:83:30:74:b3:a2:19:f4:7d:c0:b5:b3:78:ec:
50:ff:e4:f8:36:37:e4:18:20:b3:cc:b2:93:3e:ae:
f8:98:e6:a1:ba:7e:c4:fa:76:8f:73:22:59:33:77:
42:34:9c:ff:ac:c3:6b:6d:74:83:88:ba:cf:b4:ae:
a7:49:51:81:aa:d2:e7:e6:8a:02:a3:07:10:a3:03:
e9:4e:15:0d:d2:76:fe:64:d7:56:41:92:bc:ef:0a:
a4:6a:6b:a8:7e:04:bd:b9:38:cf:26:68:a9:e0:e7:
45:f1:68:aa:5e:21:3d:7c:80:fa:0a:70:68:c0:de:
81:58:df:3c:81:78:5b:c0:3c:c6:45:7b:eb:94:c1:
e9:6e:a7:b3:c3:b7:83:b8:46:bc:d0:5a:c4:3e:c7:
32:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:33:2C:44:4C:F0:84:D8:1A:8C:11:1B:6E:D1:B5:AD:00:D3:9C:B0
X509v3 Authority Key Identifier:
keyid:75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:13:c9:c6:3d:2f:75:69:f5:5d:ff:f9:23:d0:dc:1f:40:ed:
fa:62:0b:6f:33:00:ed:54:29:54:48:54:f5:56:7f:69:50:bd:
6d:79:8b:63:f6:9f:0f:3e:63:cd:e3:69:b6:f0:1e:bd:c1:72:
28:ee:71:fd:1a:2c:b5:61:0c:18:38:bc:5c:4f:33:25:7a:d1:
5c:98:47:ee:da:a7:ac:af:73:a5:86:73:0a:b8:d1:68:ec:22:
6a:41:58:79:98:ea:67:e9:1a:9d:f0:b4:b3:df:af:da:73:86:
65:d9:bc:a4:bd:67:9e:1d:c1:85:64:19:34:0c:8c:e0:e0:9c:
6f:1b:8a:f2:2d:44:3d:14:fd:22:54:30:57:b2:73:11:2c:d4:
43:48:86:0c:6f:99:d0:94:df:24:93:96:a9:15:12:f0:4b:eb:
b0:05:a1:77:69:79:f1:98:b7:ab:51:6f:2d:57:7b:a7:6e:cc:
27:22:e1:32:cc:6f:d4:ef:3e:c0:fa:69:d1:4c:85:e1:11:74:
5a:9f:be:8e:20:94:23:12:4d:50:73:0a:c1:01:e7:f6:7b:9c:
fd:17:f9:db:7e:ce:62:e9:bf:21:37:27:3d:4e:db:cc:ed:67:
a0:78:c9:8d:9c:5d:4a:8e:f9:da:06:d1:4f:84:bb:56:d0:4e:
07:10:09:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:21:31 2025 by rpki-client