Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
File: dlIO_x7h4o493PuJ58tvfYmnfJw.mft (raw, json)
Hash identifier: C6Pd77DQ5cRt1vRrmXcnLjpOm2uBlvaJlG/HZyKmK80=
Subject key identifier: B2:48:73:1A:08:1B:04:6C:6E:D3:50:E7:86:3B:7F:51:5A:A5:03:DE
Authority key identifier: 76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
Certificate issuer: /CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Certificate serial: 019683C7EA6D81876E97931B4D314581DC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
Manifest number: A2
Signing time: Tue 29 Apr 2025 23:00:38 +0000
Manifest this update: Tue 29 Apr 2025 23:00:38 +0000
Manifest next update: Wed 30 Apr 2025 23:00:38 +0000
Files and hashes: 1: dlIO_x7h4o493PuJ58tvfYmnfJw.crl (hash: u6nwRPwhY0xxa46WEbAhvKsO75yj8ZA0aPJDhavPMo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:ea:6d:81:87:6e:97:93:1b:4d:31:45:81:dc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Validity
Not Before: Apr 29 23:00:38 2025 GMT
Not After : Apr 30 23:00:38 2025 GMT
Subject: CN=b248731a081b046c6ed350e7863b7f515aa503de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8f:09:3f:f3:1c:49:14:18:7a:a5:5a:33:98:
c2:05:da:34:65:8d:ef:5f:97:2e:f3:95:2e:7f:18:
7a:5b:8d:e0:6c:16:16:74:84:c3:3c:03:47:24:0f:
a9:fe:bd:72:41:ac:48:7a:48:cb:61:a9:4c:af:45:
ac:6d:24:25:b3:18:00:a2:69:77:a0:15:c8:dd:49:
a2:87:8e:45:3a:de:30:c0:b7:df:73:90:7a:22:dc:
ab:f9:6a:e9:8c:0d:2d:ab:5b:0b:b7:79:a6:5d:7d:
14:ae:7e:20:5a:00:d9:3d:0c:ac:3e:61:ca:b4:eb:
f6:81:e7:9a:0e:38:46:9a:46:d9:17:c9:a6:1a:e7:
76:8a:bc:5c:a4:d4:ec:c8:7c:c1:20:ff:b7:aa:8f:
39:54:ab:0e:89:a8:5a:52:e5:f1:dd:81:33:50:4c:
43:0b:1e:d2:13:3a:03:7d:1b:4c:49:4f:cd:8e:5c:
33:0c:02:ef:56:df:d5:e3:47:5b:f0:d1:e7:95:22:
26:8a:a1:b9:de:af:00:e5:74:4c:73:67:2a:ea:f2:
41:d4:eb:07:88:df:eb:56:95:0b:53:94:cd:0e:7c:
81:cf:28:fd:59:6f:5a:4a:bc:5a:ed:e8:ea:b6:4f:
30:25:bd:f7:62:82:f8:a4:32:21:ec:c1:99:84:01:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:48:73:1A:08:1B:04:6C:6E:D3:50:E7:86:3B:7F:51:5A:A5:03:DE
X509v3 Authority Key Identifier:
keyid:76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ad:b5:e9:f7:a6:e7:f0:6e:e4:e4:17:34:2f:d1:a9:4a:47:
e3:f6:0d:6c:3b:b4:da:f3:f4:a4:69:bb:8c:c1:fc:d1:d4:9a:
df:73:fa:9a:b6:84:2f:7c:46:da:0d:f7:65:7f:79:1e:fb:05:
ef:6d:d5:80:86:26:0a:c5:6f:3a:b7:10:29:64:58:f2:2e:ec:
c3:c1:8c:e4:25:e9:9f:0b:0c:75:a6:04:c6:db:e8:f9:8c:fb:
f0:ca:5f:98:84:ce:b1:60:ab:d1:b2:16:6f:2b:48:3b:d9:be:
8d:40:32:1e:c9:e3:05:d3:c6:c1:52:24:30:b8:f7:fa:2e:f3:
a5:e0:5f:22:27:49:17:da:a3:69:ca:09:f7:bc:30:75:fc:87:
0d:60:95:09:e5:dd:6b:4c:cd:5d:07:92:c9:f4:37:32:aa:08:
dd:14:55:c7:75:93:29:02:f5:b9:a5:77:7c:05:2e:48:1a:08:
6f:5d:23:6d:a4:63:7c:03:ce:65:f6:93:88:11:a2:15:06:16:
b2:75:7c:9d:de:af:a4:85:06:46:e6:a4:fa:40:08:2a:77:76:
d4:52:b8:8e:56:bb:e7:5f:87:8d:b4:ba:3e:a5:fe:5f:30:08:
79:90:ef:b1:62:48:77:b8:e3:f1:f9:7a:e5:27:59:99:7d:a9:
5a:31:12:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:03:08 2025 by rpki-client