Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
File: dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft (raw, json)
Hash identifier: XRjD2letejMB75lp/bYFBJnmgBoHtyvDH8YQ7PAwvdw=
Subject key identifier: 90:31:1D:D5:B8:68:7A:29:73:8F:0A:F5:DF:47:2A:E8:47:55:87:6B
Authority key identifier: 74:B3:12:68:F2:FF:7E:8C:EA:DF:1D:E9:5F:97:F0:B1:D2:B1:5F:96
Certificate issuer: /CN=74b31268f2ff7e8ceadf1de95f97f0b1d2b15f96
Certificate serial: 0196789FA5281044775EC46B26177CC20DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
Manifest number: 0FE2
Signing time: Sun 27 Apr 2025 19:00:50 +0000
Manifest this update: Sun 27 Apr 2025 19:00:50 +0000
Manifest next update: Mon 28 Apr 2025 19:00:50 +0000
Files and hashes: 1: dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl (hash: Ycv6K+dcgXfwCR0ADiZ/y+MTxC51618AsD1G+B1WdI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:a5:28:10:44:77:5e:c4:6b:26:17:7c:c2:0d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b31268f2ff7e8ceadf1de95f97f0b1d2b15f96
Validity
Not Before: Apr 27 19:00:50 2025 GMT
Not After : Apr 28 19:00:50 2025 GMT
Subject: CN=90311dd5b8687a29738f0af5df472ae84755876b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:0d:10:86:5f:cc:63:f4:1a:44:88:b2:0a:
b4:99:d4:4c:03:f1:bf:bc:48:c9:e1:3e:99:d4:b8:
c0:01:a3:8a:44:77:80:ef:59:c5:9f:5c:2f:08:70:
54:c2:3e:49:54:1e:ef:a8:d2:b1:f1:01:55:bb:1a:
ca:00:b0:75:a9:b0:88:40:6b:67:1b:f0:66:e0:bb:
3c:9f:44:76:69:91:d1:4a:86:51:5b:5e:6a:06:87:
e6:bd:c2:1e:b5:d7:88:e8:4a:df:39:ba:bf:27:fd:
e8:bb:e9:9a:59:5d:e8:aa:e6:73:8e:5f:70:8a:bb:
ae:6d:47:d3:8f:ed:5a:14:59:34:01:90:c3:23:15:
58:d5:89:98:55:bc:30:18:3b:91:07:dd:9a:89:f8:
32:39:c3:f7:85:46:94:d1:59:0d:6b:bc:f9:64:3e:
c5:f5:a5:4d:f0:e1:3f:f9:e0:88:17:75:21:51:22:
45:f9:45:9b:bf:e3:c0:9b:a3:98:95:72:bb:f5:61:
26:b8:35:b6:64:7c:5a:46:f9:54:86:1f:d1:a2:a9:
25:f2:8a:24:ed:04:a3:cd:13:d4:f8:43:bb:25:a5:
db:f5:bf:89:8c:e9:c5:cb:0e:33:7f:ca:e9:cc:83:
cc:00:a7:10:5e:cd:5f:bd:0b:56:0b:d8:8f:9d:24:
b2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:31:1D:D5:B8:68:7A:29:73:8F:0A:F5:DF:47:2A:E8:47:55:87:6B
X509v3 Authority Key Identifier:
keyid:74:B3:12:68:F2:FF:7E:8C:EA:DF:1D:E9:5F:97:F0:B1:D2:B1:5F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:46:8b:99:8d:1f:62:c2:67:03:45:90:66:83:f1:a4:68:de:
b1:c7:ca:bd:46:f4:68:b3:0f:0f:f5:79:fd:43:d8:c7:90:f8:
e8:15:fd:af:8e:e3:c9:26:eb:97:31:0f:26:63:9e:13:71:e1:
dc:a0:c7:86:3c:fd:d8:fb:f7:40:02:80:87:2e:c6:a5:e3:46:
5a:b6:2e:35:30:bc:d1:4f:71:4b:34:db:32:f0:03:36:26:b8:
b5:24:e0:83:43:dc:14:db:6b:13:14:59:bd:c2:67:ea:a9:93:
c2:d7:52:5b:d3:bc:eb:f0:a6:c4:c5:83:1b:9c:9d:72:bc:e9:
9b:b2:4c:66:35:38:68:d8:c0:dd:7a:1f:44:28:49:3b:c3:b4:
84:31:d5:d5:6b:76:21:20:44:dc:3f:14:ef:e6:c6:ff:a4:f1:
1e:5d:a6:ba:60:b3:01:39:46:53:ab:ba:f4:5c:2b:2d:4a:3f:
63:cf:c4:47:f1:60:67:e3:c6:7d:53:88:11:1d:cf:7c:43:0f:
67:fe:68:02:fe:da:d3:a2:ce:3f:bb:57:f2:7a:17:a2:27:5e:
70:38:ee:c0:a2:98:70:0d:74:fb:57:8c:ee:dc:3e:63:fb:0c:
d2:97:95:5d:a0:1a:0b:cd:10:8e:82:c0:9a:6b:63:52:a6:75:
f5:2e:cb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:21:21 2025 by rpki-client