Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
File: duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json)
Hash identifier: M4rqK0ONeB0t0w+yuVU9vkJbKMmCP7oiMgLU/kZ3Ucg=
Subject key identifier: F2:17:B2:89:CF:93:84:93:D3:26:A1:DD:DF:91:FB:4E:6C:0C:D3:67
Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
Certificate issuer: /CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Certificate serial: 019674F9C9F4576F48BC2713C0C28EEEB66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
Manifest number: 149C
Signing time: Sun 27 Apr 2025 02:00:49 +0000
Manifest this update: Sun 27 Apr 2025 02:00:49 +0000
Manifest next update: Mon 28 Apr 2025 02:00:49 +0000
Files and hashes: 1: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: 2mdRChfyfwcmn2gJ9EBzRr/vvtN6U0bZ94vEDz9a3V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:c9:f4:57:6f:48:bc:27:13:c0:c2:8e:ee:b6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Validity
Not Before: Apr 27 02:00:49 2025 GMT
Not After : Apr 28 02:00:49 2025 GMT
Subject: CN=f217b289cf938493d326a1dddf91fb4e6c0cd367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:48:a1:b9:9b:c9:3b:9b:82:a0:e2:86:92:37:
17:22:aa:48:8c:d4:0f:73:8a:3e:17:1d:88:9b:09:
5c:58:bf:ba:94:c8:56:4c:01:36:a7:9d:cd:31:7f:
48:e1:af:2f:99:f6:ad:94:5a:69:08:c1:ee:0c:2b:
26:06:33:8f:6d:71:24:99:cc:c6:02:1f:59:b1:9d:
e9:4f:1a:6f:67:2f:93:57:08:42:06:23:04:4a:06:
24:4c:65:69:fa:51:a1:4c:85:48:27:4d:91:3a:96:
84:c7:e8:ab:71:70:0f:b6:bb:79:a7:76:ed:ef:ec:
e0:45:d4:b5:54:e2:e8:ef:a5:3b:56:c4:94:6d:ca:
5a:50:41:6a:0d:08:b8:11:50:08:e8:18:68:d7:79:
ca:d6:6d:17:f5:cd:87:b2:8d:39:f9:e0:97:3e:c3:
ce:d6:02:fe:d6:0c:a8:80:7e:86:b0:98:1b:8d:c0:
d4:24:6c:1e:e1:db:49:9f:f5:4f:c3:b1:10:ba:30:
0f:f4:ab:d9:71:18:64:8a:69:23:17:3e:8e:f0:de:
e9:7b:bb:37:cd:df:5b:f8:23:37:59:ed:20:68:b3:
ac:4b:0c:06:7d:c2:3c:1e:06:85:52:ba:8c:c8:d7:
24:48:a5:a0:bd:08:db:64:20:8e:65:85:3c:a6:60:
b9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:17:B2:89:CF:93:84:93:D3:26:A1:DD:DF:91:FB:4E:6C:0C:D3:67
X509v3 Authority Key Identifier:
keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:32:74:31:07:53:d2:0d:5c:31:a3:8e:c8:70:6a:40:54:f1:
e0:d5:13:3e:f2:0b:ff:8c:50:f3:dc:54:ab:ba:cb:99:08:31:
91:e8:28:f4:77:a7:21:af:d5:0b:49:22:52:59:7a:3e:ec:7e:
84:62:1d:ae:0c:62:b7:15:df:ad:b4:96:db:42:d5:7a:b6:bc:
7a:6b:0d:4e:22:05:07:b4:6a:a8:72:be:17:25:0e:8f:d6:c0:
1e:69:e2:91:9f:09:73:c7:9e:c3:ad:b6:06:fe:55:52:44:02:
16:a1:cd:b2:8c:2e:87:22:de:62:2f:a0:b1:77:e6:11:17:50:
9f:3b:f3:26:b1:5f:6b:db:bb:25:f0:75:96:e6:22:91:0f:c2:
ff:fa:f8:0e:a2:b8:52:0a:ab:70:79:dc:a2:37:e6:35:cc:30:
b6:1f:c5:3a:c1:a7:4e:ac:3b:54:19:9f:dc:bd:33:88:74:45:
bc:14:12:47:3a:05:ec:ca:16:8c:38:57:74:e7:d6:dc:76:e7:
a6:91:e3:cb:00:89:e0:2d:c7:df:0b:2f:6c:41:49:a7:4d:d4:
12:23:03:ee:7f:b0:21:24:fd:a1:df:1e:ad:18:f2:3f:ed:21:
76:c8:72:c7:6b:e3:80:0f:3d:0a:c4:56:54:ba:fa:99:f0:87:
f1:2b:91:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:10:13 2025 by rpki-client