Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
File: Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json)
Hash identifier: DeAxOSvSjF2tLaFTXyq7mzSBlVPUeoCeednCuqzppDM=
Subject key identifier: 63:39:EB:B4:5A:C8:81:0E:8C:4C:E1:C4:F7:D0:29:D9:0E:8F:86:34
Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
Certificate issuer: /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Certificate serial: 019677FABE76394E8569E692B693C81D9470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 16:00:43 +0000
Manifest this update: Sun 27 Apr 2025 16:00:43 +0000
Manifest next update: Mon 28 Apr 2025 16:00:43 +0000
Files and hashes: 1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: VwsI4Ax5/eLOIu7YNxac+0OhtQyAeaZfsyylscphlVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:be:76:39:4e:85:69:e6:92:b6:93:c8:1d:94:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Validity
Not Before: Apr 27 16:00:43 2025 GMT
Not After : Apr 28 16:00:43 2025 GMT
Subject: CN=6339ebb45ac8810e8c4ce1c4f7d029d90e8f8634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:9a:4b:9a:f6:8f:fa:9e:dc:e3:26:4c:48:
7c:dd:89:19:f1:62:63:f4:93:55:e5:77:4b:c0:43:
c0:3a:54:0f:66:d6:ae:54:37:ce:19:3b:75:2b:a5:
19:cb:43:41:f4:fb:93:03:bf:8c:2b:3e:97:ff:cb:
2d:b0:0c:f2:3f:b7:a5:6a:c1:22:a1:24:36:c8:8f:
37:8c:c9:b3:37:2e:4a:01:ae:ca:3e:22:18:a0:db:
70:28:2f:45:c2:78:26:0e:15:a3:fd:d1:73:e0:33:
01:d1:a2:ba:26:df:79:36:bd:7b:3b:60:46:32:3b:
15:a9:1f:0e:7a:4f:34:2a:66:4f:79:58:da:a0:b0:
ef:c4:20:cb:57:6d:00:ce:cd:62:1f:82:c4:a6:65:
6d:5b:25:8f:4f:3b:7f:c1:b4:f2:0b:1e:88:6e:e6:
63:03:6c:c5:b9:40:d2:97:b8:ec:95:dc:e1:21:55:
a7:2e:52:4a:06:d0:75:9a:08:3c:fd:f5:0c:63:3a:
a5:d4:fd:71:69:7e:72:1b:08:3a:e6:3e:78:93:d5:
2d:4e:a9:5f:f9:d6:65:aa:f5:20:9e:62:3d:cb:51:
87:b9:26:86:1c:c9:44:1f:a7:48:d5:52:5a:3f:04:
b0:67:f9:52:c7:21:d8:c0:51:58:1d:13:31:6e:1d:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:39:EB:B4:5A:C8:81:0E:8C:4C:E1:C4:F7:D0:29:D9:0E:8F:86:34
X509v3 Authority Key Identifier:
keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4c:97:43:a4:64:9d:26:7b:36:67:8e:eb:f9:5b:94:0a:89:
53:8d:2e:0b:eb:ff:71:55:3b:27:a4:7a:97:a9:88:62:1e:a6:
1e:18:e4:27:14:2d:dd:38:d8:48:3a:de:82:be:7a:b2:82:38:
42:4c:21:46:ce:0b:09:fd:41:4f:12:8b:62:54:da:14:aa:17:
97:01:57:d3:11:23:90:14:b4:1b:74:c4:2e:a0:f7:1b:1a:2f:
02:29:21:76:96:c5:6f:f6:bc:68:9f:1a:23:1e:06:ef:38:8f:
77:de:ca:5f:7f:66:81:d9:38:ff:ea:c0:d5:2c:c0:78:df:c9:
25:30:2b:a5:5c:10:d6:58:95:1c:67:dc:37:33:c9:d5:00:73:
e9:04:4a:93:ee:5f:e9:18:ff:ac:03:13:4a:58:03:84:ec:2d:
ec:4e:32:eb:19:a4:87:7d:41:a3:86:89:3e:df:09:42:93:3b:
4e:60:55:b5:d6:93:ff:9c:cb:db:11:aa:7c:32:d7:02:a3:d3:
7d:1b:66:80:a8:06:a4:53:eb:a1:c7:dc:01:9e:d7:d5:1a:f4:
6d:89:a4:a6:e4:ca:fd:6c:8a:55:95:22:d9:f2:6f:f2:e7:c9:
ae:4c:04:a7:54:66:fa:6b:ed:64:7d:2d:07:b9:6e:38:49:4c:
e1:a2:0a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:08:59 2025 by rpki-client