Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
File: DpFsLKNrUAlu4v5EuUUpwto8PsI.mft (raw, json)
Hash identifier: pe4sw3uaw2KgKZud4Q032ky1A5BABH4LAYHbjppTAhw=
Subject key identifier: AB:BA:E0:2E:C2:23:7A:D5:4F:C5:62:81:AF:C4:1F:50:E4:60:7F:5D
Authority key identifier: 0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2
Certificate issuer: /CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2
Certificate serial: 01967D209A455894EFF60A00B63D64AE0E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
Manifest number: 0299
Signing time: Mon 28 Apr 2025 16:00:10 +0000
Manifest this update: Mon 28 Apr 2025 16:00:10 +0000
Manifest next update: Tue 29 Apr 2025 16:00:10 +0000
Files and hashes: 1: DpFsLKNrUAlu4v5EuUUpwto8PsI.crl (hash: m0lctZTqUDYn+szqS+dwHOmoopC2e4SCwZJIoNTvyM0=)
2: QGeFBaZMcPUbZlccMoyAnOzy3gE.roa (hash: 7YeLQ57g/FUFF/JvQDJhVLUE18/59LuhhMGoWNanM4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:9a:45:58:94:ef:f6:0a:00:b6:3d:64:ae:0e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2
Validity
Not Before: Apr 28 16:00:10 2025 GMT
Not After : Apr 29 16:00:10 2025 GMT
Subject: CN=abbae02ec2237ad54fc56281afc41f50e4607f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:b2:8a:b4:b3:87:44:ed:09:0e:7c:9b:53:
03:ab:f6:78:c6:ea:32:92:ba:5c:cd:fe:46:00:79:
f1:30:2f:1a:01:fe:73:fc:ac:7e:a4:f6:b0:fb:8c:
2d:51:5d:79:2f:13:83:3d:cf:1e:93:82:ab:c5:96:
1d:92:95:45:e4:ea:fa:d5:3c:f8:b1:4f:0b:0b:cd:
2b:1a:e8:5c:54:dc:33:6d:72:b6:04:1e:9b:6b:6e:
15:87:3f:03:72:0b:2d:f2:28:db:db:7b:23:c8:15:
be:b3:d9:90:5a:d1:cd:de:dc:75:bf:2a:eb:a8:ec:
4c:0c:69:d5:55:62:a1:67:cb:fe:0b:c7:37:62:83:
81:aa:0f:5b:ee:58:44:4d:98:ce:fa:d0:33:52:91:
c9:b7:d3:42:79:b9:6b:a2:e7:b8:b1:f1:03:9e:14:
84:9f:c9:f6:9c:97:b2:04:22:28:7e:b4:9c:ed:07:
18:69:2d:94:93:b0:06:0a:58:f8:dd:85:df:67:7d:
fe:37:7e:7e:3d:72:fd:68:a3:45:8e:4a:0f:a0:3d:
c6:9d:0e:94:cf:a0:59:ad:82:9a:bc:69:ef:e0:07:
f8:f4:3a:03:d3:7a:61:ae:b9:86:3f:0c:f5:27:ee:
9c:f9:ba:c6:55:f1:ad:7c:25:7a:95:48:90:e7:d2:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BA:E0:2E:C2:23:7A:D5:4F:C5:62:81:AF:C4:1F:50:E4:60:7F:5D
X509v3 Authority Key Identifier:
keyid:0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:66:6c:4a:26:d9:97:08:99:31:00:2f:b8:43:e9:1d:53:df:
9c:0b:aa:d1:0f:be:94:c5:fc:ac:04:b9:93:6b:ce:8f:2a:1a:
7d:49:15:d4:dc:b7:67:2e:bd:84:0a:3c:fa:75:ab:7f:94:c4:
19:c9:f0:21:bd:89:c4:1f:93:24:48:f2:cd:d9:9e:6e:ce:96:
11:b7:07:d7:5b:a6:87:14:53:4b:c6:c4:59:f3:fe:23:5a:79:
97:a1:d3:03:54:49:5e:22:a4:08:5a:7e:06:36:05:2e:a0:88:
46:f2:bc:52:71:87:80:ce:b2:3e:d2:16:f8:7a:a1:7d:88:84:
1e:7b:40:02:34:71:cf:35:81:ea:30:f6:ad:3f:5d:dd:51:87:
c7:d6:c3:c8:2f:04:99:b7:88:42:d0:70:1b:de:38:3c:b2:06:
c4:51:e1:d4:e8:8c:13:90:24:e3:6e:bb:04:0c:33:47:69:c5:
63:0a:fc:8a:f6:a4:cf:19:2a:f5:6b:26:9e:64:ac:11:df:5b:
51:90:84:e0:dc:00:e1:17:f5:0f:79:2c:ac:fc:2a:29:dd:6d:
c7:a0:59:d3:bd:eb:20:3f:54:ba:40:05:a0:a7:04:3e:b3:51:
33:ff:15:3f:05:9f:7e:7d:cd:fa:71:73:98:67:11:41:09:7d:
3c:a5:5a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:45 2025 by rpki-client