Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
File: dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft (raw, json)
Hash identifier: t2raWeygnKwvl6PWRIxIS5MkhKrHH14vNm7gk/QIa64=
Subject key identifier: C0:20:78:42:04:71:6F:BE:3B:30:DE:3D:F2:58:CD:29:E0:6C:C8:ED
Authority key identifier: 74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
Certificate issuer: /CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Certificate serial: 0196783181E60098450512B9050D2BD46CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
Manifest number: 0E04
Signing time: Sun 27 Apr 2025 17:00:32 +0000
Manifest this update: Sun 27 Apr 2025 17:00:32 +0000
Manifest next update: Mon 28 Apr 2025 17:00:32 +0000
Files and hashes: 1: dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl (hash: q0S8bykgVz4a5FXKSK/5AbgiA49MBCSBTxISAyPSP0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:81:e6:00:98:45:05:12:b9:05:0d:2b:d4:6c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Validity
Not Before: Apr 27 17:00:32 2025 GMT
Not After : Apr 28 17:00:32 2025 GMT
Subject: CN=c020784204716fbe3b30de3df258cd29e06cc8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f4:bb:bc:f8:8f:27:91:f7:90:65:d8:c8:cd:
bd:96:0b:f4:56:74:eb:5a:54:50:21:f3:21:a1:b1:
49:b2:cd:00:c6:16:9f:55:ee:13:d4:1c:cd:95:f2:
16:54:ec:de:f1:83:49:d8:09:13:4a:4f:db:f6:ac:
dc:ba:35:52:64:60:84:93:ec:fa:a5:e6:7d:65:b2:
bc:8a:cb:ee:e4:70:fc:f1:04:28:67:9c:95:d3:89:
6b:0b:1c:ee:b1:93:1a:ad:57:2d:7b:ae:82:8b:c2:
21:aa:e7:8c:f2:e5:99:4a:2f:b1:bb:cc:b7:0e:53:
2d:49:90:37:c9:b3:fe:e9:20:44:af:8c:cd:22:ca:
ba:cd:0e:91:e2:8e:dd:89:1c:2a:99:9f:9d:f1:28:
64:92:9c:0f:d1:11:9a:db:a2:b5:46:47:33:63:3a:
48:ad:17:6a:2f:03:73:38:5c:70:ea:09:2d:3a:31:
59:32:e8:59:05:32:62:2f:02:ff:b9:05:eb:d4:44:
f6:5b:2e:1e:09:bb:10:0b:84:9c:04:39:bc:af:2c:
db:ae:5c:c0:dc:12:8b:8f:7f:a3:e5:89:18:1d:cf:
f9:f9:aa:be:d4:27:44:4d:9c:c3:3c:0e:30:6a:89:
a5:15:53:53:10:ff:07:4a:24:c4:bc:d0:31:d8:26:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:20:78:42:04:71:6F:BE:3B:30:DE:3D:F2:58:CD:29:E0:6C:C8:ED
X509v3 Authority Key Identifier:
keyid:74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:91:3f:ad:5f:77:46:cc:2a:46:0b:02:9c:77:c1:91:19:a2:
5f:39:2d:94:e7:a5:d8:95:87:41:13:29:7b:1b:ce:2a:7c:40:
60:92:04:31:f8:aa:ca:66:0e:d5:23:ef:40:81:1a:50:ba:11:
2e:3d:45:8e:66:7d:4a:c9:a5:1d:c0:ca:5e:8f:69:44:61:b0:
1e:58:c0:a2:22:5c:7d:72:7b:38:ae:ad:6b:a9:e6:f6:55:17:
63:8a:e8:87:05:6f:e4:66:74:9b:01:4e:e0:8e:dc:ae:06:75:
0c:41:a9:0c:17:01:f6:d2:21:68:b3:76:f6:72:a7:e7:9b:84:
ef:a2:f7:c2:5c:bb:52:ae:59:e0:04:1e:c8:7c:70:63:45:66:
8f:f1:8f:52:ad:ff:89:13:15:a3:55:04:51:f0:85:c3:a5:cc:
31:90:f2:fb:37:01:9e:3f:1c:13:a3:29:8f:2c:b1:e0:25:70:
83:2b:68:63:cb:0f:35:b3:3c:ea:d7:cf:21:d9:ef:b4:2d:12:
08:39:61:bf:b0:bd:db:46:7e:51:8e:05:0d:ed:8c:c7:25:02:
a9:56:b5:4e:91:b6:cb:74:73:6e:f5:c7:2a:ff:4b:30:09:34:
13:71:89:e3:f6:8f:11:b9:35:a6:71:36:a5:7f:d0:b1:ef:8e:
db:cb:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:13:35 2025 by rpki-client