Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c2719d-8d77-4686-a2fb-7b4f09785f79/1/dnECLoKiznV3Drwajw1F9E8scxY.mft
File: dnECLoKiznV3Drwajw1F9E8scxY.mft (raw, json)
Hash identifier: jHrHjeKQ4sZVWBsc/QqCSfrNJHPPJLpA93P+J2nVVd8=
Subject key identifier: 03:3D:42:9B:91:F7:E4:C1:B5:01:7A:7F:60:CE:FD:F9:24:59:34:EC
Authority key identifier: 76:71:02:2E:82:A2:CE:75:77:0E:BC:1A:8F:0D:45:F4:4F:2C:73:16
Certificate issuer: /CN=7671022e82a2ce75770ebc1a8f0d45f44f2c7316
Certificate serial: 0196760CD3264611187C17A4384197C521B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnECLoKiznV3Drwajw1F9E8scxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c2719d-8d77-4686-a2fb-7b4f09785f79/1/dnECLoKiznV3Drwajw1F9E8scxY.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 07:01:13 +0000
Manifest this update: Sun 27 Apr 2025 07:01:13 +0000
Manifest next update: Mon 28 Apr 2025 07:01:13 +0000
Files and hashes: 1: dnECLoKiznV3Drwajw1F9E8scxY.crl (hash: oSHY6SCpUO8NgKPQZ8x1ziAgxOT0TFme1uLDJWJ7RBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c2719d-8d77-4686-a2fb-7b4f09785f79/1/dnECLoKiznV3Drwajw1F9E8scxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c2719d-8d77-4686-a2fb-7b4f09785f79/1/dnECLoKiznV3Drwajw1F9E8scxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnECLoKiznV3Drwajw1F9E8scxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:d3:26:46:11:18:7c:17:a4:38:41:97:c5:21:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7671022e82a2ce75770ebc1a8f0d45f44f2c7316
Validity
Not Before: Apr 27 07:01:13 2025 GMT
Not After : Apr 28 07:01:13 2025 GMT
Subject: CN=033d429b91f7e4c1b5017a7f60cefdf9245934ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:ea:37:9b:73:cc:5f:17:cd:5a:4d:17:6a:
53:18:78:af:5c:c5:d5:23:b2:3d:9e:ba:0f:a4:fc:
e1:ca:a3:5f:68:d1:51:43:c8:8f:a2:b3:a0:46:56:
8e:45:d7:8a:0d:e9:bf:0f:52:d0:26:89:46:af:71:
ce:fe:32:19:29:63:26:4c:39:93:28:32:75:e8:c9:
64:7e:4b:f6:6c:96:ae:c2:98:a2:db:a4:94:04:78:
69:a9:79:37:05:ef:a6:aa:a3:82:d4:5c:b7:66:c7:
03:e3:c1:13:e9:8d:c5:fc:64:d7:e4:32:ca:7c:8b:
85:64:74:b5:97:80:60:53:67:b1:ff:8f:e5:dc:4b:
b2:2c:99:e4:18:7e:c2:f7:bc:25:dc:50:ba:ce:cc:
a6:d4:f3:ac:20:a2:d3:ae:73:e7:86:a4:5b:f9:d7:
6c:c4:27:b3:d9:90:a2:35:4e:96:94:76:df:4d:c0:
db:bd:85:0a:c4:e4:59:17:66:5f:78:fb:e0:c2:29:
b4:27:77:b2:db:90:9b:cc:1b:bf:f5:36:1f:28:bb:
83:60:0f:fc:43:5f:40:8f:95:b1:5a:73:da:5a:21:
51:79:95:3e:d8:f4:5b:ed:0f:99:b3:73:a1:a1:4c:
3f:f3:d3:19:77:6b:a4:c9:39:bc:ef:80:14:20:c1:
90:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3D:42:9B:91:F7:E4:C1:B5:01:7A:7F:60:CE:FD:F9:24:59:34:EC
X509v3 Authority Key Identifier:
keyid:76:71:02:2E:82:A2:CE:75:77:0E:BC:1A:8F:0D:45:F4:4F:2C:73:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnECLoKiznV3Drwajw1F9E8scxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c2719d-8d77-4686-a2fb-7b4f09785f79/1/dnECLoKiznV3Drwajw1F9E8scxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c2719d-8d77-4686-a2fb-7b4f09785f79/1/dnECLoKiznV3Drwajw1F9E8scxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:75:50:bb:01:df:99:cb:f1:2f:71:17:ba:f0:51:81:91:3f:
b7:d5:69:fe:32:a4:8a:5c:88:f8:bc:ae:cb:c9:0a:cf:9b:15:
30:d7:0e:6c:b1:6a:19:3f:35:38:b0:9f:4e:6e:a4:37:80:04:
ec:3c:ca:53:b2:d0:b4:07:4a:c7:8a:bc:5c:35:1f:de:03:66:
4d:14:eb:cd:e5:9e:10:8a:50:95:ad:d1:2e:00:96:5e:c0:89:
ad:2c:f7:e8:1f:d7:d9:1a:4d:c0:cb:6b:3c:74:4d:bf:f9:10:
14:1a:bf:22:35:a6:11:e0:78:60:5f:ff:72:ea:04:36:58:36:
12:6c:00:d6:9d:48:48:cc:d8:23:db:c5:68:33:21:5b:04:f3:
21:6c:b3:22:40:5e:2b:80:fa:a3:4a:1d:19:a6:4d:6b:58:94:
2a:2c:ef:4b:7a:eb:c0:01:e5:e8:e8:70:3b:01:a9:01:1e:3a:
dd:76:f5:cd:a5:09:28:63:e0:ba:d6:92:b0:e1:09:5f:f0:4b:
4d:af:27:2c:a6:29:fe:67:66:77:d3:10:d1:f8:58:02:3e:31:
82:63:e7:8d:74:a9:6d:c2:99:b5:bc:29:97:c8:7f:57:60:c2:
f4:f8:f7:9d:53:17:4e:87:46:3c:27:7b:75:7f:cd:ed:55:a9:
10:a4:2a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:46 2025 by rpki-client