Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
File: Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft (raw, json)
Hash identifier: yPdocJRY9U5Ab/GwfXScysu8lTyDh1XY72QF9CDa634=
Subject key identifier: E9:F2:03:BF:E4:C3:FD:02:E5:E1:A9:E9:F0:91:36:21:4D:AA:B1:50
Authority key identifier: 0E:CD:27:27:E7:4A:9C:6A:AE:88:F9:A0:11:0D:0C:94:9B:1E:97:35
Certificate issuer: /CN=0ecd2727e74a9c6aae88f9a0110d0c949b1e9735
Certificate serial: 019677FB79DD44CC87D7B7F62E0F8C328DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
Manifest number: 0C7B
Signing time: Sun 27 Apr 2025 16:01:31 +0000
Manifest this update: Sun 27 Apr 2025 16:01:31 +0000
Manifest next update: Mon 28 Apr 2025 16:01:31 +0000
Files and hashes: 1: Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl (hash: xJnasRuwxgKw396CHwJqqzaffJvIHbjzNLiKcxgzjjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:79:dd:44:cc:87:d7:b7:f6:2e:0f:8c:32:8d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecd2727e74a9c6aae88f9a0110d0c949b1e9735
Validity
Not Before: Apr 27 16:01:31 2025 GMT
Not After : Apr 28 16:01:31 2025 GMT
Subject: CN=e9f203bfe4c3fd02e5e1a9e9f09136214daab150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:a2:bb:2d:19:1c:15:bd:37:f2:c4:b0:54:
c3:6d:f5:88:ae:cd:7c:d3:c1:37:38:61:ba:cb:21:
36:78:ff:d1:a1:df:03:b6:0b:6d:e3:27:29:90:95:
ac:d4:a1:55:41:46:55:97:9c:ff:0e:cd:9b:3e:f8:
41:12:ad:b4:9e:44:6f:a5:41:3b:45:e4:d6:7a:d0:
a9:dc:a9:74:32:16:9c:b2:b1:06:78:54:74:50:c6:
f9:04:b3:9d:64:66:57:b0:ec:bf:a0:ab:ae:72:19:
44:31:3a:4c:4a:80:a4:89:96:91:2e:b7:72:ba:66:
58:be:59:54:57:71:b5:3b:ee:9a:23:0c:cc:07:1d:
8c:e3:6f:6c:76:08:8a:60:c1:3a:70:d1:2a:34:da:
31:c0:08:d5:fc:e4:dd:40:9f:c4:4f:bf:67:83:ad:
8f:29:ca:c4:f1:68:5e:f5:e5:b4:d4:c8:fe:5f:3c:
65:e3:6e:1d:9a:58:74:5e:c9:f9:0a:49:be:25:5b:
1c:0f:1c:f3:0e:f6:ca:d8:0b:f3:76:81:3a:8e:25:
8b:58:1d:aa:56:b3:9a:03:d1:9b:bf:19:66:42:0a:
27:6d:c2:ba:ab:fa:0d:3d:84:9f:ea:28:21:e2:bb:
17:01:49:b7:c7:31:cf:33:8c:bc:f1:da:53:ab:cf:
37:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F2:03:BF:E4:C3:FD:02:E5:E1:A9:E9:F0:91:36:21:4D:AA:B1:50
X509v3 Authority Key Identifier:
keyid:0E:CD:27:27:E7:4A:9C:6A:AE:88:F9:A0:11:0D:0C:94:9B:1E:97:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:11:b8:38:af:a0:d4:74:62:9d:b6:cc:ab:98:67:c4:29:5a:
a0:d1:8c:a5:90:ba:51:57:aa:bc:11:45:ac:40:4e:5c:70:fc:
61:6d:b1:12:52:47:90:58:6d:55:6b:cb:ea:e8:fb:14:d0:b1:
08:79:82:62:a3:96:24:24:f4:2f:49:fe:4b:29:8f:7a:9b:ff:
c2:e7:08:6e:94:76:ff:02:5b:c1:e7:f8:ee:97:06:4f:b2:8a:
6c:a7:d0:12:1f:59:4f:f7:4f:48:a1:43:fd:b3:05:ff:6f:02:
8e:29:c6:9c:81:00:bf:b8:c6:6c:b3:ce:f8:5d:4b:b0:b1:5a:
67:54:4d:85:8d:54:bd:4c:31:f0:36:18:d6:cf:35:46:98:f6:
17:a0:4a:1f:8c:1f:83:31:c4:9d:ac:8f:78:17:d3:cf:de:aa:
86:4c:47:64:e6:05:6f:21:78:17:71:39:81:6a:58:ca:6c:e7:
af:bb:8c:5a:be:07:ac:b8:29:7d:e1:7c:65:fe:06:06:b6:b0:
45:67:db:0f:65:0c:27:54:21:0d:de:2d:40:ae:c1:fd:9c:f4:
ba:e1:c6:25:18:05:92:40:2e:7b:2e:6c:b7:e7:e1:ed:73:17:
87:49:91:cc:84:9b:15:28:23:7e:94:3a:96:8b:ee:06:5a:2a:
79:aa:ca:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:07:05 2025 by rpki-client