Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
File: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft (raw, json)
Hash identifier: ScNewiKhaa9xXZFHBa3yx2zmxIn8hqfEK/hKfbzhwwQ=
Subject key identifier: 58:53:F5:D9:DE:12:3C:D6:82:7F:BD:ED:A9:35:6F:92:D3:93:4A:48
Authority key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
Certificate issuer: /CN=74b083650295189f009aa74c12cbc61ee23fa753
Certificate serial: 0196760BE3E7E54381153765E60854328C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 07:00:12 +0000
Manifest this update: Sun 27 Apr 2025 07:00:12 +0000
Manifest next update: Mon 28 Apr 2025 07:00:12 +0000
Files and hashes: 1: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl (hash: y01AUbmMzbqS3xxfWyK7ea3UeE8ykOY9YRmZJvg95B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:e3:e7:e5:43:81:15:37:65:e6:08:54:32:8c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b083650295189f009aa74c12cbc61ee23fa753
Validity
Not Before: Apr 27 07:00:12 2025 GMT
Not After : Apr 28 07:00:12 2025 GMT
Subject: CN=5853f5d9de123cd6827fbdeda9356f92d3934a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:18:1c:85:9b:cb:9d:74:fc:cc:bf:f8:f9:
3f:94:f4:f1:fb:36:e5:07:b6:b2:ae:ca:62:59:6f:
a3:cc:58:b2:54:83:77:f0:1a:f5:72:73:61:72:de:
c6:3b:c1:a3:3d:e3:02:c4:49:ab:14:d0:20:5e:12:
7d:bc:36:39:5d:ab:21:17:06:03:c7:02:15:d6:2a:
0b:53:4b:9b:6e:9d:c3:00:ad:41:9f:52:66:4b:f7:
05:55:69:16:5d:d5:e4:72:84:96:cc:6a:ce:91:b8:
c1:91:12:2e:a4:da:76:c6:5d:20:7b:b7:8d:c8:0b:
fe:4c:45:41:6a:ac:ca:9f:a5:32:70:a3:77:fc:47:
6a:c6:05:ca:40:2e:fa:1d:21:7b:b7:3a:ed:3b:1a:
67:8f:43:e0:7b:4c:ee:39:ec:b9:ee:8c:a1:bc:d7:
e2:b5:ea:7a:99:5c:7a:e5:13:25:e3:6c:f5:fa:23:
b1:37:8f:5d:83:0e:63:2c:c7:fd:48:ea:ae:09:95:
97:1a:83:98:62:db:dc:b6:d4:cb:1d:33:59:91:a4:
64:2e:a3:84:50:fe:71:5f:40:12:98:7f:73:7d:5e:
92:87:83:09:1e:fd:24:fd:6c:e5:85:0a:37:a6:81:
01:84:36:a5:d7:d1:ee:c6:61:66:ef:13:9e:34:b5:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:53:F5:D9:DE:12:3C:D6:82:7F:BD:ED:A9:35:6F:92:D3:93:4A:48
X509v3 Authority Key Identifier:
keyid:74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:08:1c:38:25:db:61:a8:42:27:fa:9a:cd:4f:1d:6b:2a:dd:
e3:db:b3:c9:72:aa:7b:44:bb:13:d0:1b:da:16:56:b4:76:ad:
96:58:66:d3:8f:f8:23:4e:db:fc:23:8f:3c:15:c5:7a:2b:01:
fa:98:47:9f:e8:39:1e:cd:8a:ad:f8:68:79:c2:e7:49:70:99:
82:95:71:13:4f:55:c0:ee:f7:a7:28:91:f9:49:20:0e:4a:38:
74:8c:55:19:9c:95:75:e4:de:38:c0:dc:a7:25:dd:12:18:91:
d0:c3:bb:01:a9:8a:92:ce:95:3e:8f:bb:31:ad:72:7a:bc:94:
30:7d:86:83:37:57:3c:e3:ff:8b:3b:1d:90:a8:30:bf:92:68:
92:4c:a8:ae:43:c1:2d:47:0f:3c:bd:d1:c5:54:7b:25:e6:89:
39:29:22:21:11:bc:ef:db:63:47:e5:c9:36:74:f6:2e:23:07:
f8:94:35:02:ed:98:5a:39:27:7e:ee:04:d3:98:d9:78:6b:f2:
ea:dc:d8:33:12:45:35:32:f5:2b:23:1d:ee:19:7c:3c:74:77:
5c:2d:e6:df:22:dd:43:b7:01:d9:1b:7c:ec:7d:a4:0b:38:cf:
b9:68:2d:9a:94:f8:7a:39:cf:72:98:c3:67:cf:46:d9:6b:4f:
fe:7e:20:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:01 2025 by rpki-client