Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: OXBuUX5tK6THo1md1MxT60XVrGzNu3dvQ5V8Q/fzSlw=
Subject key identifier: 38:DC:7B:5F:1F:DD:08:E1:36:72:3D:E6:B1:1A:71:B7:89:57:F6:12
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 0196C34BD3F92C658F6DED557ACAF745F3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 1532
Signing time: Mon 12 May 2025 07:00:48 +0000
Manifest this update: Mon 12 May 2025 07:00:48 +0000
Manifest next update: Tue 13 May 2025 07:00:48 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: tV4QagfO0JV17EpbECiwUTESQMIB7k7MM+TzSJmxj6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:d3:f9:2c:65:8f:6d:ed:55:7a:ca:f7:45:f3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: May 12 07:00:48 2025 GMT
Not After : May 13 07:00:48 2025 GMT
Subject: CN=38dc7b5f1fdd08e136723de6b11a71b78957f612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:8d:3a:6b:5a:c5:4a:23:f9:a9:fe:98:34:
36:01:93:8c:b4:1a:2a:f6:a3:f2:49:86:cb:d2:b1:
de:b6:0f:2a:4e:60:33:a5:fb:95:67:99:0d:b0:94:
8c:e1:c7:da:b8:39:1d:39:41:a3:09:eb:46:2d:36:
f5:28:f7:a3:5f:eb:ff:22:5f:84:76:0c:61:5e:2a:
6f:d5:cd:83:23:43:6b:0a:96:2d:c8:77:fd:e6:57:
4f:1e:c6:8c:48:12:2d:de:4b:2e:37:ed:c7:89:5c:
82:9d:39:c6:e3:9c:db:c3:38:4a:06:fd:0b:47:2b:
b2:12:52:02:d9:ce:cc:33:f0:d8:1c:21:b1:d1:93:
e7:8a:70:92:7a:7a:04:4e:b7:ad:bd:f0:47:6a:e8:
6b:3b:fa:e1:e4:58:77:c5:50:e2:25:91:ae:c1:fb:
ab:ba:d2:ae:91:69:fc:24:71:97:5e:d2:84:34:06:
4e:1f:f3:aa:d4:82:4f:f6:f2:6c:91:21:b0:77:f0:
7c:c1:36:36:2e:59:8a:c1:3b:f3:86:5f:86:3d:c0:
19:cf:5c:21:8c:b6:7b:bb:0c:53:a9:23:b6:60:bb:
02:d5:af:e0:ee:c3:e6:f4:23:14:ee:25:f9:ee:3a:
8a:f8:81:19:b9:76:5d:b0:d6:85:2e:0b:19:b6:6f:
c0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DC:7B:5F:1F:DD:08:E1:36:72:3D:E6:B1:1A:71:B7:89:57:F6:12
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:60:0c:b2:c8:b4:89:f8:f9:5a:45:6a:a2:95:5c:34:cf:70:
ab:88:ce:a3:1d:5f:a3:cd:1e:87:4f:b7:1d:eb:a5:1e:22:91:
02:21:4c:c8:b7:ce:0c:fc:18:d4:58:b5:34:f9:b1:a1:d5:f6:
03:bb:8e:c3:b9:55:5c:36:d6:b9:83:aa:87:6c:f8:7d:33:a1:
40:1f:d6:10:b6:82:56:79:d8:a7:2b:1f:ea:0c:5c:5a:c0:56:
12:d5:df:5b:7c:96:c7:4a:0c:35:57:1e:a3:73:ec:e1:e4:55:
7b:c3:d6:b3:99:ee:b2:df:15:8f:1f:07:49:31:9a:5b:c4:bf:
3c:e0:37:13:de:c6:cf:4f:a7:16:d6:c7:08:77:bf:3a:53:d8:
3e:80:6d:96:e5:c2:b9:d4:59:47:39:a9:dd:49:5f:36:70:e3:
ff:72:6a:f7:60:8d:b7:b9:b5:46:ef:d4:b3:7f:8c:03:b6:41:
4b:a9:3d:e8:71:cb:cd:50:d5:f6:53:f3:8e:de:bb:79:94:87:
81:1a:8e:bc:3a:54:f7:72:aa:e1:4a:1c:32:57:e8:19:47:76:
8d:51:a1:0d:8c:a8:26:0d:2c:23:34:2f:16:59:21:d4:21:ba:
a3:87:dc:95:98:af:a6:e6:0f:e6:3b:7f:55:f6:2e:83:af:b4:
2d:c9:05:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:27:20 2025 by rpki-client