Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File: dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier: meBmWw7oH5Jt2daVjMhKrvym93BsedU6HYwJjuHrMD4=
Subject key identifier: D9:30:9F:98:F8:18:95:02:E9:FB:1E:63:A2:39:3A:0D:FB:EC:E2:98
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer: /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial: 019679B23CA333F1DEEDBEE4712F32285C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number: 0937
Signing time: Mon 28 Apr 2025 00:00:46 +0000
Manifest this update: Mon 28 Apr 2025 00:00:46 +0000
Manifest next update: Tue 29 Apr 2025 00:00:46 +0000
Files and hashes: 1: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: RE+h8wN5xMQMu5tiF+A54eynJ80aO60g36W2MDCprjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:3c:a3:33:f1:de:ed:be:e4:71:2f:32:28:5c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Validity
Not Before: Apr 28 00:00:46 2025 GMT
Not After : Apr 29 00:00:46 2025 GMT
Subject: CN=d9309f98f8189502e9fb1e63a2393a0dfbece298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:5e:9b:b9:d8:82:43:54:a6:a2:66:5e:08:
a5:f4:7f:02:2f:01:b1:81:9d:46:ee:8f:fb:0c:19:
56:fb:a4:7c:22:6d:ad:f3:1e:f9:aa:d2:70:92:f8:
4d:3a:81:17:4e:a1:de:14:5d:23:52:ab:17:ee:c7:
91:d8:6b:68:96:88:3f:32:00:8d:90:47:02:23:db:
f5:54:d7:6b:c3:61:e5:38:0e:0b:fc:92:e9:f0:01:
11:da:ef:2b:82:64:bf:d1:35:f7:d0:36:50:e2:24:
d1:17:18:a9:c7:5e:60:ca:01:40:21:2d:69:c8:95:
60:91:f0:82:5b:98:9f:1c:6e:a2:de:68:3d:d8:74:
82:04:30:be:53:bd:c8:54:cf:09:b1:cf:09:54:b5:
fd:e9:c9:bf:f7:c6:51:25:aa:28:36:ec:d3:63:ec:
73:27:1f:f3:8b:2a:30:dc:ea:91:64:ae:b2:1a:cd:
a3:b7:da:22:35:e0:15:78:5f:68:4d:d8:d4:16:d3:
1d:e5:e0:6a:0a:82:ee:75:ad:69:96:3c:1e:51:38:
6b:25:10:a2:b9:b9:0a:2e:c4:8c:ad:2f:63:a8:32:
ae:bc:69:f5:74:ac:0c:f8:2d:6a:1a:d4:c3:2c:b6:
16:ec:0a:f0:71:e9:cd:56:fa:b5:52:cf:75:93:67:
5b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:30:9F:98:F8:18:95:02:E9:FB:1E:63:A2:39:3A:0D:FB:EC:E2:98
X509v3 Authority Key Identifier:
keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4e:ff:00:91:56:20:95:da:67:84:d3:76:f7:aa:9e:8b:93:
9b:f9:bd:b7:08:11:61:a4:cd:79:80:e1:2b:6f:35:32:2f:ee:
bd:0c:be:c3:9e:d1:68:96:f3:b8:8c:c7:48:dc:69:c3:97:5e:
b2:cd:86:18:47:f8:79:cf:66:4a:49:d4:51:48:6f:55:f1:56:
80:d6:4a:e3:3f:3f:4a:11:1c:5f:6e:33:d2:68:46:0c:e1:04:
14:98:56:37:2c:ed:5f:f3:bd:f2:6b:a1:18:6a:23:3c:b7:e7:
29:44:19:09:25:f9:63:b6:f7:09:e4:32:2d:44:21:5a:85:03:
45:15:52:1d:89:81:55:8b:40:1a:b0:26:08:07:7c:04:24:c3:
d0:d3:37:eb:b3:be:1a:6c:44:9d:bd:45:c3:70:b3:15:21:14:
21:33:a4:5d:e2:12:f1:66:4f:b2:e4:e4:98:4e:a3:1f:2b:83:
ef:2c:2e:0c:b8:4b:be:2e:a8:e2:3e:e1:f7:9f:27:fd:27:e6:
1a:57:b1:08:87:d3:e1:c1:a3:01:cb:3a:f0:7c:20:e6:b0:15:
a1:59:ca:f1:8f:dc:b2:2b:db:a3:32:56:15:a2:02:0e:23:b1:
80:34:48:0d:71:39:8c:59:b6:de:d1:bb:0d:fb:2d:cd:64:6f:
ea:4c:f1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:51:26 2025 by rpki-client