Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
File: dYOxUbdLsu2w9c5rbpux4MPQrRs.mft (raw, json)
Hash identifier: qv/WjrGwpt2vI0Ewt4lzJnu+ZNKw8665U8GcDNQRlcc=
Subject key identifier: 5E:5D:D0:2F:92:2E:CE:27:E5:7D:2A:C1:B4:51:BB:8D:8E:C5:48:A4
Authority key identifier: 75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
Certificate issuer: /CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Certificate serial: 01967679F78BA1C3CA5265CC036C43EB6560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 09:00:26 +0000
Manifest this update: Sun 27 Apr 2025 09:00:26 +0000
Manifest next update: Mon 28 Apr 2025 09:00:26 +0000
Files and hashes: 1: dYOxUbdLsu2w9c5rbpux4MPQrRs.crl (hash: nNr9OLiE0l1x0yvNh8AFvv6Kd4szYEUbTwCDf0RuC9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:f7:8b:a1:c3:ca:52:65:cc:03:6c:43:eb:65:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Validity
Not Before: Apr 27 09:00:26 2025 GMT
Not After : Apr 28 09:00:26 2025 GMT
Subject: CN=5e5dd02f922ece27e57d2ac1b451bb8d8ec548a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cb:a1:3a:f7:a7:7b:3b:89:95:33:ee:d3:c4:
da:85:6a:46:4a:8f:98:f0:11:05:39:b3:f5:bb:3c:
38:36:d8:34:ad:ba:17:05:12:4e:ed:69:6c:b0:b8:
a3:64:17:3e:c8:4a:b2:b3:a2:7d:a1:0a:af:5f:9f:
42:41:18:f9:3f:e8:12:56:8e:b4:e7:36:48:3b:56:
26:7e:05:99:88:74:8c:7d:ca:8a:c0:75:8c:f4:10:
64:a9:0e:9a:62:7e:57:10:d4:1a:21:11:73:2e:f8:
a4:cd:fb:9c:cf:f2:a3:fc:5a:45:62:4d:7f:d5:4f:
75:40:ee:08:97:d5:51:67:5c:10:66:74:00:18:1a:
4e:02:b3:8e:44:82:bf:d7:d7:bd:f9:09:df:81:07:
67:ed:bb:c7:87:f9:04:c1:9f:b6:40:f2:32:bb:7f:
f2:9c:36:18:ba:0e:cc:8b:b0:05:fc:5d:db:b3:17:
e1:bc:5f:c5:27:82:e9:41:85:ee:50:d4:41:f2:7b:
20:24:8e:18:b4:1f:90:09:67:20:06:c3:dd:b7:fa:
4a:0d:a4:69:33:26:d6:a4:18:f8:a2:2c:c0:66:96:
a2:08:aa:db:25:d3:4a:d2:38:1b:3f:93:59:b5:00:
32:b4:09:19:d6:b8:61:cd:bb:a0:cb:90:db:17:b5:
da:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5D:D0:2F:92:2E:CE:27:E5:7D:2A:C1:B4:51:BB:8D:8E:C5:48:A4
X509v3 Authority Key Identifier:
keyid:75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:38:59:6a:7b:69:60:20:64:e3:6c:d0:02:9a:11:97:24:ef:
ef:87:ea:c1:51:e3:dd:d5:39:08:24:df:69:4f:cb:e1:b1:3a:
aa:1b:53:27:7d:29:67:d3:55:2c:59:c7:44:df:d6:66:f3:e7:
b5:86:5e:1d:8c:74:91:86:47:98:84:5a:55:b1:fc:79:58:90:
e4:fe:5e:7c:64:3f:d2:a5:d3:ab:62:37:60:b7:24:35:c0:90:
68:b1:58:b4:07:43:f4:f1:07:b7:55:a1:cd:49:8d:19:38:6a:
84:a6:33:35:99:a2:8a:ba:5b:9f:b2:36:32:99:ac:68:3d:4b:
a4:fd:9b:e4:20:33:1c:2b:56:75:4a:96:0f:06:00:e6:cf:c8:
6f:23:3b:6b:d1:ed:91:df:31:6d:59:f6:b9:f5:0d:2f:28:1f:
23:4c:c3:b8:4b:2f:8b:47:5a:68:b4:b7:3f:cf:f5:35:b4:eb:
ee:6b:83:64:14:d3:01:3c:e7:17:64:38:43:f7:36:b0:65:ca:
ab:78:05:4f:2c:66:6c:03:b4:30:14:3a:17:a0:1d:2c:c5:d5:
63:2c:52:50:b3:d1:42:61:4d:25:7a:6e:2a:cf:f4:27:16:7b:
26:7a:c5:5c:e1:af:2e:f2:37:fd:53:fa:42:4e:fc:4e:e1:df:
06:fc:d3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:48 2025 by rpki-client