Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.mft
File: dtQhWmJUV7wFMhkciAP3xkt_kGU.mft (raw, json)
Hash identifier: crEZurDNtK/OzdgWOalvh+UfUv53NzCLyj6Srv5e0a0=
Subject key identifier: 82:24:1A:3D:33:8E:A5:A0:9D:D3:C7:2E:B4:1E:3C:AF:FA:EB:B7:45
Authority key identifier: 76:D4:21:5A:62:54:57:BC:05:32:19:1C:88:03:F7:C6:4B:7F:90:65
Certificate issuer: /CN=76d4215a625457bc0532191c8803f7c64b7f9065
Certificate serial: 019688805FB549A4D09A3FEC70E4B4A15875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtQhWmJUV7wFMhkciAP3xkt_kGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.mft
Manifest number: 02EF
Signing time: Wed 30 Apr 2025 21:00:36 +0000
Manifest this update: Wed 30 Apr 2025 21:00:36 +0000
Manifest next update: Thu 01 May 2025 21:00:36 +0000
Files and hashes: 1: dtQhWmJUV7wFMhkciAP3xkt_kGU.crl (hash: J67BRuggWrWjTOA7rJvanuj3DjnKdS/3xKlQLhrKDXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtQhWmJUV7wFMhkciAP3xkt_kGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:80:5f:b5:49:a4:d0:9a:3f:ec:70:e4:b4:a1:58:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d4215a625457bc0532191c8803f7c64b7f9065
Validity
Not Before: Apr 30 21:00:36 2025 GMT
Not After : May 1 21:00:36 2025 GMT
Subject: CN=82241a3d338ea5a09dd3c72eb41e3caffaebb745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:55:cb:0f:6d:85:c4:0f:cf:f5:f0:c0:74:0a:
1b:1e:95:57:98:db:43:cb:06:eb:86:7d:20:e0:9c:
c1:50:d9:9b:76:c0:15:09:e7:75:80:42:bb:ff:f9:
b7:78:44:e8:fd:ac:7c:27:6c:b5:b0:42:7b:08:c1:
53:84:81:3b:d8:7c:6d:55:75:ab:2a:2c:ec:25:93:
5f:aa:6a:cd:2d:88:d8:36:0a:a3:82:3b:00:72:06:
ab:2d:08:ea:04:56:5a:1a:4c:d4:49:64:8c:b9:c2:
0c:6a:7d:2d:38:63:df:55:4e:8c:07:53:73:b0:da:
f0:28:55:04:a7:fe:e2:1f:42:c6:43:1b:49:85:1b:
e0:f1:33:90:21:6e:43:ef:90:26:31:40:57:e2:12:
31:77:b8:fc:2b:0d:7d:a8:bc:00:5e:1d:e5:c5:7e:
b3:a0:fe:85:85:a4:67:26:f5:fd:df:84:a8:6a:27:
d9:80:9f:14:d4:a1:d2:30:ae:36:25:0c:01:73:52:
e8:92:71:2f:2e:66:a8:84:f1:d5:0b:6a:57:f3:ec:
57:14:c9:b7:85:59:1e:49:b8:9d:a9:35:43:44:e8:
f0:e9:bb:ff:e0:ba:e4:ca:e8:ea:ee:a9:66:dc:2b:
39:0c:fb:03:c8:91:36:8b:d8:62:c8:ab:82:2a:98:
bb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:24:1A:3D:33:8E:A5:A0:9D:D3:C7:2E:B4:1E:3C:AF:FA:EB:B7:45
X509v3 Authority Key Identifier:
keyid:76:D4:21:5A:62:54:57:BC:05:32:19:1C:88:03:F7:C6:4B:7F:90:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtQhWmJUV7wFMhkciAP3xkt_kGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:24:ed:38:12:58:ab:0a:9c:fa:80:8d:b5:ff:15:8d:a8:88:
7d:52:cb:58:0d:70:14:00:c9:37:c5:fa:22:57:10:5d:8b:c5:
6e:3f:b9:cf:8e:e6:5e:6f:4f:81:a7:18:39:67:da:9d:2a:ec:
23:ae:e5:bb:52:42:69:a5:23:88:ab:03:f1:d7:5e:5a:32:98:
61:5a:40:81:48:ff:ba:88:02:b4:ae:7c:70:0f:97:c4:96:f2:
53:14:8e:be:71:90:d3:4e:26:71:62:01:09:4a:a5:de:75:46:
bb:40:c7:aa:f9:8b:5a:d2:93:14:bb:8e:18:1c:7b:1a:a9:db:
75:8d:33:23:28:5f:0c:c5:10:56:59:83:ff:cd:c9:e8:c2:72:
bf:71:d3:8d:e4:4a:c5:cf:a1:cc:12:5d:2c:72:18:42:db:40:
62:3d:fb:94:e1:92:fc:56:92:b5:57:cd:cb:0e:e0:e5:ac:57:
73:01:8a:5e:07:36:78:56:5d:69:6b:03:54:ea:fa:57:65:b0:
db:64:3f:2d:69:bc:97:60:0b:48:29:c4:76:a2:42:65:39:94:
10:7c:8b:e5:f7:98:89:e1:30:cb:5d:57:03:99:f9:33:60:a2:
f2:c1:0d:e0:35:6e:a0:0b:ad:92:ef:9a:61:e1:e7:0f:8c:50:
7a:e3:5b:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaIgF+1SaTQmj/scOS0oVh1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZDQyMTVhNjI1NDU3YmMwNTMyMTkxYzg4MDNmN2M2NGI3
ZjkwNjUwHhcNMjUwNDMwMjEwMDM2WhcNMjUwNTAxMjEwMDM2WjAzMTEwLwYDVQQD
Eyg4MjI0MWEzZDMzOGVhNWEwOWRkM2M3MmViNDFlM2NhZmZhZWJiNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VXLD22FxA/P9fDAdAobHpVXmNtD
ywbrhn0g4JzBUNmbdsAVCed1gEK7//m3eETo/ax8J2y1sEJ7CMFThIE72HxtVXWr
KizsJZNfqmrNLYjYNgqjgjsAcgarLQjqBFZaGkzUSWSMucIMan0tOGPfVU6MB1Nz
sNrwKFUEp/7iH0LGQxtJhRvg8TOQIW5D75AmMUBX4hIxd7j8Kw19qLwAXh3lxX6z
oP6FhaRnJvX934SoaifZgJ8U1KHSMK42JQwBc1LoknEvLmaohPHVC2pX8+xXFMm3
hVkeSbidqTVDROjw6bv/4Lrkyujq7qlm3Cs5DPsDyJE2i9hiyKuCKpi7zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIkGj0zjqWgndPHLrQePK/667dFMB8GA1UdIwQY
MBaAFHbUIVpiVFe8BTIZHIgD98ZLf5BlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHRRaFdtSlVWN3dGTWhrY2lBUDN4a3Rfa0dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNTAxZGUtM2IxZC00ZDgwLWI2ZTkt
Zjg4ZDdlYzNhNTI2LzEvZHRRaFdtSlVWN3dGTWhrY2lBUDN4a3Rfa0dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNTAxZGUtM2IxZC00ZDgwLWI2ZTktZjg4ZDdlYzNhNTI2
LzEvZHRRaFdtSlVWN3dGTWhrY2lBUDN4a3Rfa0dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiTtOBJY
qwqc+oCNtf8VjaiIfVLLWA1wFADJN8X6IlcQXYvFbj+5z47mXm9PgacYOWfanSrs
I67lu1JCaaUjiKsD8ddeWjKYYVpAgUj/uogCtK58cA+XxJbyUxSOvnGQ004mcWIB
CUql3nVGu0DHqvmLWtKTFLuOGBx7GqnbdY0zIyhfDMUQVlmD/83J6MJyv3HTjeRK
xc+hzBJdLHIYQttAYj37lOGS/FaStVfNyw7g5axXcwGKXgc2eFZdaWsDVOr6V2Ww
22Q/LWm8l2ALSCnEdqJCZTmUEHyL5feYieEwy11XA5n5M2Ci8sEN4DVuoAutku+a
YeHnD4xQeuNbnw==
-----END CERTIFICATE-----
Generated at Thu May 1 00:42:40 2025 by rpki-client