Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft
File: dbh4BinZITNXwHDBwBBgU0dIg8E.mft (raw, json)
Hash identifier: NDylUvCktiKHQAffNOKZeqR+NfTqtKTX3i+xyjmZhNA=
Subject key identifier: 76:32:36:5F:77:18:D7:53:4E:2E:53:1A:8D:CE:CC:29:95:07:2B:E1
Authority key identifier: 75:B8:78:06:29:D9:21:33:57:C0:70:C1:C0:10:60:53:47:48:83:C1
Certificate issuer: /CN=75b8780629d9213357c070c1c0106053474883c1
Certificate serial: 0196858017E84992346CD6BEB32DE63389AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbh4BinZITNXwHDBwBBgU0dIg8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft
Manifest number: 0B3B
Signing time: Wed 30 Apr 2025 07:01:26 +0000
Manifest this update: Wed 30 Apr 2025 07:01:26 +0000
Manifest next update: Thu 01 May 2025 07:01:26 +0000
Files and hashes: 1: dbh4BinZITNXwHDBwBBgU0dIg8E.crl (hash: 4S2g7EwsVx2Mjl8CukG0RLylsoF/dBr/2H8CvlQ14No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbh4BinZITNXwHDBwBBgU0dIg8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:80:17:e8:49:92:34:6c:d6:be:b3:2d:e6:33:89:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b8780629d9213357c070c1c0106053474883c1
Validity
Not Before: Apr 30 07:01:26 2025 GMT
Not After : May 1 07:01:26 2025 GMT
Subject: CN=7632365f7718d7534e2e531a8dcecc2995072be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:d0:b7:f1:94:59:f6:0e:80:09:b4:91:17:
90:0a:03:3b:06:40:83:c7:8b:27:06:07:7d:3e:bd:
b9:d9:eb:5f:3a:bc:98:4a:de:00:ea:f2:99:af:00:
79:2a:af:a4:8f:85:5f:ab:c1:d0:ca:eb:3b:d5:96:
99:6e:36:04:71:dd:83:f0:68:16:42:5f:75:0b:eb:
53:1e:94:fb:5e:22:b9:08:8c:36:ae:93:95:9f:94:
0c:72:9c:fa:14:26:23:16:c7:62:87:d6:9a:04:ec:
54:da:62:fe:04:5c:c6:85:ab:15:e5:be:ad:0e:18:
a8:95:df:0d:11:93:ae:fd:69:48:80:cf:56:8d:f6:
8f:bd:96:c2:ed:6e:6e:af:70:a3:ab:15:d8:16:bd:
92:21:a5:df:a0:3f:c2:ea:11:27:f8:5c:e8:49:4e:
9a:54:66:cd:65:7e:d2:ad:35:b6:fc:f1:3c:ed:b4:
72:97:81:e8:9a:07:db:9b:bd:35:9e:db:3d:e9:91:
52:da:ec:b0:bf:d2:78:61:8d:14:58:3d:1c:a4:31:
83:55:aa:b9:a2:72:67:89:5b:d4:95:7d:a8:8a:bf:
ea:1c:06:c0:a3:fc:ca:6a:17:40:1a:d6:f9:f4:64:
ee:c5:2a:0f:e2:d0:54:27:09:f6:ac:75:97:bf:fc:
b9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:32:36:5F:77:18:D7:53:4E:2E:53:1A:8D:CE:CC:29:95:07:2B:E1
X509v3 Authority Key Identifier:
keyid:75:B8:78:06:29:D9:21:33:57:C0:70:C1:C0:10:60:53:47:48:83:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbh4BinZITNXwHDBwBBgU0dIg8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d3:25:2e:fd:1c:c4:d9:15:d4:ed:c8:0f:4f:c2:f0:6d:f7:
07:34:b8:95:71:52:94:71:4d:65:c9:0c:5c:90:8f:a5:e9:24:
a2:22:ab:4b:c1:6b:55:a5:12:0c:2a:e8:59:7c:3a:78:ce:01:
87:15:50:b2:36:38:c3:ca:06:2b:6d:04:e7:79:a2:91:97:a2:
a8:b3:65:e4:fb:50:27:89:02:f8:15:6e:15:54:a7:89:00:0f:
ac:78:4d:5b:bb:a6:e2:37:16:70:b9:48:db:d3:95:61:3f:0f:
e3:b9:df:82:b1:ae:16:df:bc:ee:39:ef:76:24:4f:84:0c:9b:
b7:07:65:6b:38:29:4e:a1:31:e4:de:73:ea:9f:1c:3b:ce:00:
68:46:b2:5d:cc:c5:15:78:dc:36:0a:74:25:22:06:fa:ad:02:
5b:8f:71:28:53:14:7f:16:9d:12:ec:11:76:2b:a1:7f:c0:66:
d6:9b:fc:25:f4:4f:41:ba:fa:6b:38:d2:29:b7:63:46:61:29:
8d:6c:2e:e4:71:16:44:12:ec:5c:ed:40:46:de:fd:1f:9d:4b:
03:05:5c:a5:50:40:08:86:30:01:0c:c2:ee:8c:b3:11:05:bd:
69:59:a8:90:d1:1b:ed:0a:07:85:55:77:24:50:87:36:4b:db:
29:80:a4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:31:04 2025 by rpki-client