Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
File: dxToFxWNwwfu1NTG7fUaieVwPs8.mft (raw, json)
Hash identifier: e9yZKEPSQOsNvAnooDUpP27UU9+3iXweo/0o7P8YMGw=
Subject key identifier: 18:A3:9D:85:52:03:70:1F:05:92:A5:0A:F7:27:7E:A5:5A:83:D0:EC
Authority key identifier: 77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
Certificate issuer: /CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Certificate serial: 01967679CE1A6DCD433B7917382EC4BAC8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
Manifest number: 0CE6
Signing time: Sun 27 Apr 2025 09:00:16 +0000
Manifest this update: Sun 27 Apr 2025 09:00:16 +0000
Manifest next update: Mon 28 Apr 2025 09:00:16 +0000
Files and hashes: 1: dxToFxWNwwfu1NTG7fUaieVwPs8.crl (hash: 1vQOZR+0gSU35bxm7xXa8yBR7aseBoAHuZJpmB4Nx4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:ce:1a:6d:cd:43:3b:79:17:38:2e:c4:ba:c8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Validity
Not Before: Apr 27 09:00:16 2025 GMT
Not After : Apr 28 09:00:16 2025 GMT
Subject: CN=18a39d855203701f0592a50af7277ea55a83d0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:76:54:82:c4:b5:23:11:8a:bb:e3:1c:8d:
82:3e:f6:11:0b:9a:2f:d7:cb:5e:fb:39:63:c4:4c:
8d:a4:6d:35:a0:9f:5c:b0:0b:bf:cc:0e:61:11:0c:
ae:03:6e:44:cc:f5:d2:54:2c:45:48:50:e4:b5:4b:
9c:41:bb:6d:14:c1:89:9f:ee:68:be:8e:c5:00:c9:
8c:46:4d:bc:1c:90:19:37:0c:4a:e6:05:46:23:65:
6f:d7:da:6e:27:f5:0f:7e:c1:81:5e:da:8a:e4:8b:
f1:05:75:79:85:7c:72:ff:c4:2a:c6:1f:d8:d2:7a:
97:85:24:71:dc:bd:6d:a1:29:a1:80:a2:c5:2d:5a:
ab:6f:92:b5:5a:da:ca:a3:39:27:ea:58:7a:76:3e:
4f:8a:f6:d5:bb:c3:e6:10:77:9f:02:9b:3c:42:ad:
c5:b1:be:fa:ba:c9:b0:83:b8:d9:15:dc:05:3b:67:
28:35:78:97:8c:f3:62:ab:21:84:fc:a5:a8:ec:2e:
ff:47:26:9e:a1:ba:3c:c4:42:99:90:00:90:bc:71:
b3:d2:40:f9:cc:ad:f6:91:26:5c:12:27:d0:2f:04:
13:89:c3:ab:3f:3c:dd:0f:6b:11:22:b2:01:3d:58:
92:7c:43:d7:d4:14:7b:e2:d7:a5:6a:65:ef:87:15:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A3:9D:85:52:03:70:1F:05:92:A5:0A:F7:27:7E:A5:5A:83:D0:EC
X509v3 Authority Key Identifier:
keyid:77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:bc:6d:06:ce:41:2b:96:27:81:bf:d8:4a:a0:fd:11:b8:18:
05:8f:b1:b8:5f:c2:04:39:c0:68:8e:d7:23:f4:71:98:e0:b3:
1f:19:50:f2:d6:5b:a0:49:65:2e:54:9d:d8:6b:d3:e6:bd:bf:
7b:0c:73:96:06:08:b8:9c:af:ad:72:bc:ee:5a:64:f6:39:10:
93:8b:2c:bc:2d:86:61:67:9f:72:3f:b5:1c:29:bd:83:98:b8:
41:06:26:b1:75:7f:16:a1:08:be:62:ab:9d:1d:95:ec:4c:f7:
c0:1c:f0:bd:12:e9:35:37:8c:2d:5f:d6:34:b5:d1:15:fc:0a:
13:00:b0:a1:60:42:77:73:10:51:2d:50:c8:73:81:24:7b:54:
19:37:34:1d:ec:8f:58:8f:e9:56:ea:33:cf:e4:ee:aa:ee:3e:
9f:48:2b:d3:4f:9b:16:8d:1d:08:04:36:a0:fa:e9:d1:9c:02:
58:01:4d:2b:29:22:a5:d9:7e:c3:33:f3:cf:70:30:b3:4f:a4:
74:08:b3:6f:5a:6b:4f:8e:c6:24:d9:e3:6f:89:07:5b:5c:54:
2d:83:27:de:f8:60:59:16:8c:8a:ec:bc:95:18:96:e3:45:99:
fb:89:61:09:c8:98:73:ae:3b:c3:ee:67:1d:19:37:27:d8:27:
93:f0:6c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:24:57 2025 by rpki-client