Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
File: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft (raw, json)
Hash identifier: Iti1bOMDjf6PwH4lkZVexVEpjgYNURgRthJ8Z1KkYBc=
Subject key identifier: 4C:C9:9D:A9:B7:65:78:46:5A:0B:EB:E9:52:48:0F:47:97:C3:5C:80
Authority key identifier: 0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
Certificate issuer: /CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Certificate serial: 01968B4A766DFE8FD74294CE0CCD01A1AF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
Manifest number: 14AB
Signing time: Thu 01 May 2025 10:00:35 +0000
Manifest this update: Thu 01 May 2025 10:00:35 +0000
Manifest next update: Fri 02 May 2025 10:00:35 +0000
Files and hashes: 1: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl (hash: FeupNFAcuXOVWrEWE7PI/V1t9mPsH8lzyeBgWIs1xiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:76:6d:fe:8f:d7:42:94:ce:0c:cd:01:a1:af:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Validity
Not Before: May 1 10:00:35 2025 GMT
Not After : May 2 10:00:35 2025 GMT
Subject: CN=4cc99da9b76578465a0bebe952480f4797c35c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:95:1a:4c:1b:80:1f:5c:b5:19:3e:c0:38:be:
30:4c:54:87:d1:55:10:ad:56:4e:f1:3b:42:55:2f:
6c:bb:5c:fb:f2:05:bb:98:9f:0c:0f:c3:f8:e7:ee:
55:4b:4b:dd:3c:8c:b6:16:cd:18:bb:51:83:5b:81:
70:23:41:f1:64:3a:bb:ee:0e:59:f8:fb:45:c7:4c:
d6:ff:2c:bb:dd:d0:6e:6e:58:2f:bd:ec:89:1d:ff:
d2:7b:c4:a1:24:a4:80:92:b5:59:73:f7:b3:43:0d:
85:4d:a8:87:fc:6a:ca:c0:33:85:67:97:a9:bf:82:
e6:ec:67:92:e8:38:8e:59:73:e5:23:d0:5d:c0:48:
e6:30:28:48:58:9d:16:0c:61:9c:e8:df:55:2c:64:
dc:8b:16:a2:1e:d3:7c:37:9a:d2:05:38:4e:cc:4a:
77:41:40:8b:b0:5c:b6:4b:f9:b6:3d:50:99:1e:8a:
e9:8b:40:fb:bd:78:ec:5a:ad:22:91:e3:2c:da:18:
2f:de:c0:40:36:83:c5:d6:c8:de:ff:21:e9:fc:e9:
39:56:f5:22:e4:58:84:08:41:16:7c:83:da:08:0d:
03:d2:a2:4d:b5:cc:9a:fc:ba:e1:2e:fe:21:11:46:
59:82:da:b6:48:fd:0e:3f:46:5b:08:5f:1f:cb:16:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C9:9D:A9:B7:65:78:46:5A:0B:EB:E9:52:48:0F:47:97:C3:5C:80
X509v3 Authority Key Identifier:
keyid:0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bc:d9:c2:21:f4:40:fa:c9:18:e0:fe:04:58:3c:f7:60:e9:
67:4f:bc:4a:8b:41:e6:18:d8:78:49:81:43:14:76:e9:f1:c7:
72:58:cc:2f:a1:9d:f5:5b:4c:f2:03:7b:84:95:bf:0f:23:14:
b3:c9:2d:b8:f5:43:5f:3a:18:1e:05:1d:6f:18:f7:6b:c9:b1:
4d:b9:48:3b:f1:d1:93:f7:07:31:02:18:f0:c9:74:c4:c5:ab:
78:5a:7b:0a:00:b4:09:c7:9c:55:fc:99:19:d0:de:7a:1c:4c:
d5:f5:4d:92:36:ce:44:da:03:97:8b:b4:56:0e:4d:6c:d6:a1:
02:b0:22:a6:c3:bc:97:e2:88:27:87:48:2b:c1:ef:e9:6a:a4:
34:26:8d:5a:25:4d:bc:8e:c0:f6:5b:60:d2:58:4c:a6:39:01:
fc:78:e0:27:08:ff:96:54:83:fa:09:bd:e8:65:f3:46:3a:cc:
62:83:af:bc:3c:b7:8c:ac:16:fc:8b:f6:83:bb:f3:af:af:2b:
52:65:36:ae:c3:73:90:d4:e2:e7:fe:2d:51:25:c9:d5:cb:02:
b5:39:89:3a:56:17:12:7d:bc:b8:5b:45:99:8e:d3:85:26:a9:
e5:cc:33:0d:9d:09:83:51:f3:7d:8e:40:d4:b8:3a:7b:a0:cb:
99:a1:9a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:51:02 2025 by rpki-client