Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File: DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier: F3yOQeWgoXdNWGeASOGN1P5Qlh2zwJ9ONwm4ALcvb50=
Subject key identifier: 72:A0:C3:C2:2C:F7:2F:96:CB:7F:AF:39:38:1A:01:E5:F8:11:F3:22
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial: 01967943EE7583C21FCDDFC18298C88CEC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number: 075E
Signing time: Sun 27 Apr 2025 22:00:17 +0000
Manifest this update: Sun 27 Apr 2025 22:00:17 +0000
Manifest next update: Mon 28 Apr 2025 22:00:17 +0000
Files and hashes: 1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: U6EKdt6Nfj8frR8BPe4Jj5XhBC4GBSNvFTSu2rzA8Gs=)
2: xY4E3yQDPueuZRFyGHMpuwD_2xI.roa (hash: JFOzMGNC8f6WUb/Ik4daKoB04MNWXOUy7eceKB/AaN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:43:ee:75:83:c2:1f:cd:df:c1:82:98:c8:8c:ec:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
Validity
Not Before: Apr 27 22:00:17 2025 GMT
Not After : Apr 28 22:00:17 2025 GMT
Subject: CN=72a0c3c22cf72f96cb7faf39381a01e5f811f322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:53:7d:ad:fa:84:f0:8d:18:cc:75:bc:80:
58:80:15:b7:a2:56:dc:f3:79:6c:dd:a2:45:be:32:
65:b8:64:b3:02:e0:9a:21:66:c6:47:f3:87:cc:24:
83:30:bf:a2:f5:dd:26:04:38:f8:55:c9:7b:32:fc:
7a:2e:a6:a3:bb:07:1d:4d:cc:59:5a:36:15:a2:ad:
83:33:67:6c:25:07:6c:ba:aa:05:6e:2c:f7:41:d3:
0f:16:54:53:58:a3:43:b9:7c:de:c7:7c:89:2d:20:
e9:6a:b3:9a:32:c3:e0:27:82:f6:55:7b:15:e2:7b:
99:4b:03:59:ba:88:a5:83:f4:0f:64:47:b5:dd:0a:
57:96:2a:e0:ca:cd:85:68:e0:08:ae:9d:d6:80:38:
c3:94:98:d3:d3:2b:a7:e5:c3:0e:c6:cf:6d:a9:ef:
cc:02:a4:0b:9b:69:de:27:ba:36:72:85:73:f9:b1:
30:e1:0e:cd:39:54:9d:a5:cf:b0:c8:3f:ea:79:fb:
d3:ca:ee:18:ba:97:91:dd:92:90:07:91:9b:ef:b8:
ff:0d:5f:94:12:6b:5d:96:fb:bb:15:27:b3:d1:5c:
d6:1b:c6:b9:e0:27:ca:40:0f:83:cb:1e:a8:8f:7e:
f0:4f:9b:54:85:e8:07:1e:51:09:16:ae:3c:80:ec:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A0:C3:C2:2C:F7:2F:96:CB:7F:AF:39:38:1A:01:E5:F8:11:F3:22
X509v3 Authority Key Identifier:
keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:47:7f:1e:f1:19:be:5c:d2:39:55:3d:05:9a:08:df:4d:c0:
e2:32:11:e8:4b:2c:a5:fa:a0:0f:f2:4a:e6:55:f8:78:58:1f:
7b:16:43:ed:e3:b5:14:ed:24:2e:13:6c:e9:8b:f3:f5:a9:20:
1a:8b:75:ab:ac:7d:5c:3d:e6:ce:3a:c1:5c:a5:eb:94:59:ad:
8d:dd:88:79:bd:57:49:eb:0d:98:26:f0:a1:20:2e:d3:35:18:
12:f8:b7:4e:4e:cf:39:5d:14:96:28:3f:5d:1e:99:1d:e2:a0:
f0:4e:9f:4f:d5:e2:69:ec:01:b2:44:8e:bc:46:25:70:5a:01:
00:04:09:80:f6:96:6a:46:a4:09:35:e4:ff:cf:64:02:5f:93:
c7:71:ee:20:c5:aa:aa:9c:ea:9c:e2:12:d9:1b:d9:63:43:18:
d0:99:e2:c1:b2:4f:54:98:5c:25:15:31:35:ea:e6:f6:75:dc:
be:01:bc:18:6d:6e:55:eb:ed:77:78:bc:12:80:1f:96:b5:fa:
a7:3b:c8:90:ea:b4:e6:66:0a:c9:a9:a8:13:2e:be:98:bc:ea:
7f:a9:6e:ac:08:a2:33:93:dc:b6:3d:c0:56:3f:f8:97:27:f6:
53:bf:31:64:ed:93:51:ca:9d:08:bb:de:8e:2a:12:8d:1c:5e:
5a:10:5c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:15:04 2025 by rpki-client