Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier: +MszGYM06i/tyMyrW2DebUsOGFupFt3J0kFGXF6C6r8=
Subject key identifier: 2A:8D:C8:A0:48:DD:33:E6:76:3C:8D:F2:4D:4F:DB:29:23:83:C0:99
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer: /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial: 0196809049AFC7393C1EE40FF952F76F817A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number: 1507
Signing time: Tue 29 Apr 2025 08:01:01 +0000
Manifest this update: Tue 29 Apr 2025 08:01:01 +0000
Manifest next update: Wed 30 Apr 2025 08:01:01 +0000
Files and hashes: 1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: UQg4Vxf6lHbvyWIvfl2+F8vb5k9HQJ2JT7WD680i3Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:90:49:af:c7:39:3c:1e:e4:0f:f9:52:f7:6f:81:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Validity
Not Before: Apr 29 08:01:01 2025 GMT
Not After : Apr 30 08:01:01 2025 GMT
Subject: CN=2a8dc8a048dd33e6763c8df24d4fdb292383c099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:94:15:65:17:2f:f5:8b:df:0d:1c:0d:8a:3f:
d5:74:75:03:74:69:c1:51:45:70:16:59:79:c8:c2:
82:ad:66:5b:0b:c6:3d:cb:a4:7f:1f:1e:c8:d9:97:
ca:95:21:e7:15:13:12:8a:f7:13:f5:4c:44:cd:1e:
e9:57:7c:2d:b3:d8:8d:9b:6a:bd:8f:33:f6:02:59:
f1:78:4a:f4:ad:ad:55:f2:e0:e4:70:94:ae:cb:80:
d5:3c:25:5e:8e:13:a6:d7:43:a4:4c:30:b0:dc:ec:
c8:30:53:da:f2:eb:f3:45:f2:67:c5:4b:f3:46:17:
d4:a5:60:19:0d:ab:9e:4a:46:2a:0b:6a:8d:8f:2b:
c2:37:e5:b6:30:0a:1f:94:5f:64:91:33:e6:df:11:
c8:9c:55:d0:64:33:e9:75:5d:07:a0:92:39:50:33:
0e:60:fb:28:51:34:fe:de:5e:78:52:bb:92:1e:cd:
cd:1f:aa:c9:80:1a:42:d6:96:f2:2a:83:6f:04:31:
f4:16:7a:72:53:4e:79:e1:02:4e:b5:d9:79:df:2e:
18:03:54:0a:2b:1d:cc:78:a7:4c:2c:af:9f:0b:91:
28:a3:11:40:41:82:71:eb:7f:41:bf:72:fb:f4:3f:
86:36:f6:8d:e0:da:34:38:f0:e8:99:48:0e:d3:b5:
5d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8D:C8:A0:48:DD:33:E6:76:3C:8D:F2:4D:4F:DB:29:23:83:C0:99
X509v3 Authority Key Identifier:
keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:29:cb:a8:71:fd:c7:60:4a:50:0e:d7:08:a4:1c:9e:2a:20:
22:01:d6:45:74:cd:1e:3c:9e:12:79:88:0d:41:0e:d1:4c:99:
a9:27:e3:1e:7a:1c:99:21:8d:b5:62:dd:2a:9e:2c:36:0d:2b:
13:f1:f6:b8:32:9a:00:9c:8f:f9:4b:f9:23:f7:a8:cd:1f:63:
10:84:dc:e2:e5:11:43:01:23:3b:f4:93:62:b9:65:12:2f:fd:
4d:7a:01:bb:d6:f7:f7:4f:3f:95:53:bd:43:f5:b8:39:97:94:
f4:9c:ad:f4:5c:36:be:7b:68:ac:51:8c:ba:51:04:08:77:fa:
85:13:3b:74:e8:c2:ee:0a:45:ac:3f:b8:a3:58:61:87:94:a8:
54:6b:5b:bc:8a:c2:ae:9c:8f:c5:22:9d:dc:51:31:53:e7:59:
0f:28:66:b3:79:09:3c:ed:80:cb:15:07:11:a0:45:ef:2b:39:
3a:7b:39:c3:54:16:39:07:8b:69:4f:a0:ac:aa:7e:f3:08:b1:
b5:72:3f:ab:2c:2b:9f:ef:9e:bd:80:cc:b8:63:02:ea:6b:bd:
48:bc:47:28:97:e6:aa:4e:11:fe:bb:b5:a6:44:2d:52:a7:0d:
e8:06:94:1d:bc:b6:05:e1:69:58:31:3b:d4:36:be:cf:ac:14:
fe:05:a0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:36:20 2025 by rpki-client