Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
File: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft (raw, json)
Hash identifier: KqiEqNi+9gKmUSYKuL/MGTLeuU0s0mr1lCeeqhlboI4=
Subject key identifier: 65:B8:5E:94:FB:4A:73:B3:32:EB:03:12:62:1A:1F:C3:49:2B:5B:B4
Authority key identifier: 0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81
Certificate issuer: /CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
Certificate serial: 0196D9D33D0D6BC37B27EEA30501B559076E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
Manifest number: 153F
Signing time: Fri 16 May 2025 16:00:21 +0000
Manifest this update: Fri 16 May 2025 16:00:21 +0000
Manifest next update: Sat 17 May 2025 16:00:21 +0000
Files and hashes: 1: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl (hash: bT6jdmhZy5qCk5bWAw7DyjCOAts/Y/11/kWKII+5NiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:d3:3d:0d:6b:c3:7b:27:ee:a3:05:01:b5:59:07:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
Validity
Not Before: May 16 16:00:21 2025 GMT
Not After : May 17 16:00:21 2025 GMT
Subject: CN=65b85e94fb4a73b332eb0312621a1fc3492b5bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:44:20:d0:86:a5:61:84:dd:8c:33:db:b3:
6e:09:db:98:30:48:6c:db:0d:73:41:c6:b0:67:b2:
39:cc:f9:1f:6b:2f:33:cd:81:e7:84:35:31:f7:58:
68:4e:7a:92:23:35:29:48:05:2e:05:df:0a:7f:8a:
07:c3:da:c2:b3:8e:e6:17:b5:77:cd:ce:e0:cc:bb:
a6:23:51:0b:01:91:a3:2f:e2:a5:e8:bb:60:2b:72:
29:4a:ed:ea:79:1e:11:af:5d:e9:51:9d:e1:7c:2c:
4e:d8:7f:b8:21:d9:f1:cc:de:89:07:29:a0:46:1f:
3e:cf:8e:17:c3:40:02:19:70:0a:4b:05:f4:2e:4d:
d0:c0:24:99:7d:7c:75:13:be:57:03:ff:90:d1:3e:
3b:dc:df:35:af:81:f9:19:44:77:9d:c5:54:65:4a:
ef:ff:b0:53:60:6d:6f:2f:70:09:9b:c4:86:45:5d:
ad:e9:a2:b6:ae:f8:3b:d4:41:15:38:fc:8a:3e:68:
73:2b:38:e2:15:63:bb:e0:b3:85:cf:a5:b2:e9:6b:
f3:2d:46:d9:31:f0:91:94:6d:1f:7c:ba:5d:a0:db:
37:e1:f4:a5:4c:82:bb:52:bb:e0:c7:69:e9:0a:02:
9c:9d:bf:00:3d:65:a2:98:ba:05:7b:24:c7:a2:a9:
d7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B8:5E:94:FB:4A:73:B3:32:EB:03:12:62:1A:1F:C3:49:2B:5B:B4
X509v3 Authority Key Identifier:
keyid:0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:34:f3:aa:40:de:2f:ac:11:87:17:7a:08:7e:48:fc:67:30:
db:98:4d:09:e2:e6:78:a0:df:3c:62:87:e1:7f:a0:b0:3b:87:
84:fe:fb:a6:9b:8a:ef:ea:7a:76:e3:a2:a1:6a:e5:be:1c:60:
57:36:2e:56:42:48:e8:a0:32:13:46:07:5a:23:12:0d:9a:e6:
f0:f8:41:ad:1a:3b:27:15:9b:de:47:46:be:7d:9e:b0:47:b5:
9a:1e:a5:88:f9:bd:20:7b:97:bf:fb:4b:02:0c:f4:88:41:97:
a5:c4:44:38:4a:4d:9f:99:bf:b8:3d:55:45:76:73:e6:70:7c:
ce:6b:7c:c2:74:7e:1d:a5:ad:9f:35:e0:8e:10:7d:03:f4:e5:
bc:76:8d:1b:f7:08:b6:97:73:12:a8:1b:32:e7:e3:63:21:af:
5d:8d:f8:9c:a8:02:4b:dd:e6:5e:a9:2c:f4:96:89:23:9b:84:
13:94:14:d6:43:40:8d:a1:33:99:bb:44:c5:29:4b:e2:76:17:
21:a5:7d:48:b6:67:b3:44:2b:de:df:a8:05:45:5d:03:61:b6:
8f:e8:1e:7a:d2:2c:86:03:ac:2e:ee:3f:92:5d:e8:9f:a2:1f:
59:9b:6b:e8:d8:0d:e0:8f:79:27:23:5e:0c:bf:2d:a9:4b:8d:
64:70:4d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:25:51 2025 by rpki-client