Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
File: DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json)
Hash identifier: Tyyflz+B1fvmFEazNd7SEV5SqcpAjzaod1hX9JukaHs=
Subject key identifier: 5F:36:E3:29:D5:FE:7A:5D:21:C9:7D:00:85:BD:CC:AA:4E:3E:A2:8F
Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
Certificate issuer: /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Certificate serial: 01968A37BC019331F974EDC1B6DF6576C5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
Manifest number: 0D81
Signing time: Thu 01 May 2025 05:00:30 +0000
Manifest this update: Thu 01 May 2025 05:00:30 +0000
Manifest next update: Fri 02 May 2025 05:00:30 +0000
Files and hashes: 1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: lOWdIFhJvBvTFPA1YP5dDbXjf672tpWhI1C6ZxWAH14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:bc:01:93:31:f9:74:ed:c1:b6:df:65:76:c5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Validity
Not Before: May 1 05:00:30 2025 GMT
Not After : May 2 05:00:30 2025 GMT
Subject: CN=5f36e329d5fe7a5d21c97d0085bdccaa4e3ea28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:63:35:7a:95:e0:07:9c:4f:c8:9f:5c:1d:
72:66:00:d7:4c:1d:5b:29:4a:03:c9:72:53:ad:ea:
1a:92:b3:aa:09:75:30:65:d3:5e:e6:ec:ee:8c:44:
da:e6:f5:0a:0c:6e:25:4d:f4:d7:e8:bf:9f:38:77:
93:82:74:1e:ed:7e:5a:3a:0d:61:f2:a6:30:ac:db:
77:60:ea:b0:f3:c0:bb:1a:31:ef:5f:6a:ff:80:ba:
ca:c9:11:56:6a:6f:97:72:90:4c:6c:a6:0e:c4:7f:
4e:73:78:5e:c3:43:8b:c5:a2:6f:f9:f3:1a:87:4d:
22:97:4c:91:fe:c9:ee:9f:c4:f0:7b:9c:44:b0:c2:
d8:70:a3:75:99:af:32:b7:6a:30:e0:fc:5e:85:16:
de:9e:65:e2:b3:84:50:1b:78:8f:93:49:57:e5:74:
ce:dc:8d:d8:2f:97:3f:0c:78:bb:51:1e:ed:89:44:
f8:01:4c:83:f9:77:fc:49:95:26:7c:39:62:d1:aa:
be:50:a5:ab:2c:aa:e1:89:31:4a:7a:b6:c9:e8:db:
5b:60:1c:a8:74:3f:b3:25:66:9a:56:aa:1a:27:0e:
a6:6d:34:d1:e0:40:bc:d1:fe:f3:c5:5e:0e:e4:32:
f0:5d:08:96:69:cf:2e:a9:ec:43:fd:28:00:85:e8:
8b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:36:E3:29:D5:FE:7A:5D:21:C9:7D:00:85:BD:CC:AA:4E:3E:A2:8F
X509v3 Authority Key Identifier:
keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5c:d6:fc:8d:a3:d8:ee:ed:59:48:7b:83:46:02:5a:af:77:
b4:8d:07:f9:92:6d:b9:d8:60:db:e4:42:29:e8:77:dd:c9:1f:
2c:e6:44:83:fc:2e:36:47:32:dc:09:16:46:e9:dc:be:d7:c4:
1d:fc:d4:2f:6c:87:1c:79:f7:aa:eb:ee:7b:3c:0b:22:d2:5f:
08:8a:78:16:70:0c:0b:f9:5b:fa:43:aa:e5:40:e4:a9:86:27:
bc:e3:9c:37:4e:ee:eb:ed:99:cb:c6:b8:a8:88:c8:55:8c:71:
96:cd:84:8f:af:28:24:9c:85:5a:c8:c5:ab:a8:f4:b0:e0:86:
89:19:a9:91:42:a1:62:88:ef:d9:9c:21:e7:cc:56:b6:df:ac:
2c:d7:1e:b7:a3:80:a1:69:e5:97:a3:6c:d2:83:ec:87:73:a9:
d0:52:8f:2d:2b:b2:24:79:6a:fd:db:57:1d:fd:ea:af:6f:d2:
06:25:68:99:54:08:45:d1:e5:69:ff:95:3b:34:51:1c:fc:ec:
67:94:a4:1e:57:a6:47:57:98:ba:1c:23:a7:c4:96:83:d0:73:
7c:f7:d7:2f:7b:53:50:d7:89:9a:c3:2a:77:c0:37:70:3c:7a:
08:9e:0f:a9:f3:7e:46:ef:dd:89:60:e1:fc:da:73:2a:58:45:
18:da:c9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:06:15 2025 by rpki-client