Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
File: DlNS2UQbZcIBbtjrfi8jWVRDT10.mft (raw, json)
Hash identifier: l4i2pZg7WyFRXcT1MJXTallaeKlWmGE5gteWdfe+h2M=
Subject key identifier: E2:3B:45:D1:F9:8E:8A:45:2B:E3:28:4C:55:F5:75:FA:99:EA:06:32
Authority key identifier: 0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
Certificate issuer: /CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Certificate serial: 019682106598C10979AEBB4CE8A4F2976F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
Manifest number: BC
Signing time: Tue 29 Apr 2025 15:00:34 +0000
Manifest this update: Tue 29 Apr 2025 15:00:34 +0000
Manifest next update: Wed 30 Apr 2025 15:00:34 +0000
Files and hashes: 1: DlNS2UQbZcIBbtjrfi8jWVRDT10.crl (hash: TcEe545DsqT79ioOiDC2xYzZ9PRQCsFbHmJZOZRsTAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:65:98:c1:09:79:ae:bb:4c:e8:a4:f2:97:6f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Validity
Not Before: Apr 29 15:00:34 2025 GMT
Not After : Apr 30 15:00:34 2025 GMT
Subject: CN=e23b45d1f98e8a452be3284c55f575fa99ea0632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:4d:88:c8:1a:c2:45:a5:96:0f:7e:a5:d2:
20:f7:af:35:ad:d2:aa:46:80:11:38:e7:63:ae:f1:
c6:a2:d1:83:45:39:2c:d1:da:d0:1d:d3:27:de:c0:
86:27:80:72:38:55:36:dc:38:1f:50:e8:68:56:52:
9c:e9:50:c3:7b:ef:dd:7f:73:a4:a8:d3:b6:4e:11:
11:08:7c:6a:57:b9:5d:07:a4:fb:47:ee:36:71:e7:
20:6e:af:a2:0e:53:d7:83:32:31:f4:ac:75:ff:78:
02:a9:ff:66:fd:88:70:b3:66:25:98:05:c3:ae:21:
64:be:19:27:85:11:e2:ae:62:17:ea:83:99:b9:a4:
7e:a9:ff:72:27:50:ec:d6:9f:b7:16:aa:97:84:b2:
41:aa:c9:d0:00:31:01:2f:86:3a:f4:e8:81:ca:3c:
32:f0:1a:93:89:a4:09:29:bb:a9:e5:85:39:46:fe:
a2:20:55:6b:13:7e:8f:3f:bd:90:b8:c8:62:42:49:
61:63:6a:83:9e:6e:c8:34:ab:19:f4:05:ea:c2:5d:
93:39:0e:6f:0e:b9:75:26:e7:9c:ff:20:cb:33:d2:
44:26:2d:88:4b:86:d6:93:9c:fa:a4:56:8e:5d:da:
59:17:b2:e8:7f:ad:ee:ff:1c:1c:09:89:2b:8b:72:
db:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3B:45:D1:F9:8E:8A:45:2B:E3:28:4C:55:F5:75:FA:99:EA:06:32
X509v3 Authority Key Identifier:
keyid:0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:64:f0:52:6b:28:ef:14:fb:4b:45:51:dc:dc:ed:68:ed:22:
28:d1:24:f3:3b:88:68:4b:2d:33:0f:f9:47:1c:47:88:70:ef:
ac:a4:39:ef:69:3b:ad:ea:07:9d:ea:28:91:48:b8:fb:24:2f:
c4:4d:4b:5b:9f:e3:6d:7d:55:96:c9:0d:8e:a0:52:d1:70:e9:
76:71:e3:d5:c2:7c:d1:2f:cd:c1:1b:69:61:1d:3d:e1:e2:61:
ba:31:6e:db:fb:b6:37:a2:ad:c7:be:5c:84:ab:cf:80:5c:6e:
b2:d4:88:7d:9e:49:54:97:63:d7:7b:37:7d:57:d5:5b:86:bc:
bb:f7:93:48:9f:a0:33:38:6e:b5:a7:96:e0:01:c2:23:c6:41:
da:8b:54:0e:82:f1:de:8f:b9:3c:16:2d:77:7d:95:9d:2f:f8:
1c:be:b6:1f:5b:a5:a5:9e:f3:8d:10:00:3a:ee:21:71:9c:e8:
3c:1d:38:fc:37:2e:7b:f4:85:82:22:62:f0:b0:e8:02:b9:00:
bb:64:36:2b:51:c3:8c:3c:60:0b:a5:a3:53:eb:65:14:cf:e0:
be:44:fa:d7:a7:57:47:6a:38:25:07:d5:58:8c:db:02:fe:8b:
c5:63:ac:42:10:8c:2a:e8:0b:76:95:87:72:e1:20:c8:25:16:
16:41:e9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:57:27 2025 by rpki-client