Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
File: p3l5GlNwwc1X5JPZSfke-82mYX4.mft (raw, json)
Hash identifier: 81TpE6QTfwfVtNPuS4cJOIrfnv4U0M5df+j4QO3vM3w=
Subject key identifier: B5:59:75:1D:C9:E3:73:62:9F:A9:CB:0E:85:99:E6:7F:97:5D:74:2D
Authority key identifier: A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
Certificate issuer: /CN=a779791a5370c1cd57e493d949f91efbcda6617e
Certificate serial: 019655A60B490BC43A0AAD7B565D2EABF5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
Manifest number: 09A1
Signing time: Mon 21 Apr 2025 00:01:07 +0000
Manifest this update: Mon 21 Apr 2025 00:01:07 +0000
Manifest next update: Tue 22 Apr 2025 00:01:07 +0000
Files and hashes: 1: p3l5GlNwwc1X5JPZSfke-82mYX4.crl (hash: nb/L9glCv96KUfX6UY9QXXBvERwXsFg6eSqaWrRizdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:0b:49:0b:c4:3a:0a:ad:7b:56:5d:2e:ab:f5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a779791a5370c1cd57e493d949f91efbcda6617e
Validity
Not Before: Apr 21 00:01:07 2025 GMT
Not After : Apr 22 00:01:07 2025 GMT
Subject: CN=b559751dc9e373629fa9cb0e8599e67f975d742d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:9e:ce:ca:cc:1d:44:74:d7:58:8d:71:47:
bc:d7:92:02:d0:05:bf:2d:81:ac:74:91:fe:bf:72:
4d:16:89:1a:3e:5a:49:09:4e:03:30:f2:87:2a:13:
fa:ed:33:aa:85:30:f8:3d:3b:98:3d:2e:e8:77:43:
24:2d:0b:36:34:d3:b4:4d:10:e4:e9:59:ed:6a:b7:
3f:1e:ff:47:a0:a2:58:7f:20:e5:38:61:60:7a:3c:
62:f9:9c:36:e2:b8:29:82:64:ba:92:fb:9f:c1:bd:
a8:e7:af:b6:79:ef:42:6c:d7:d2:02:41:a1:a7:33:
00:e7:e5:1e:46:83:6a:ab:6d:3d:d2:97:ef:3e:65:
08:75:53:62:7e:1b:18:b9:53:9c:d3:9f:be:c6:a0:
cc:3d:6d:fd:92:f0:0e:e6:cc:7d:f6:2c:5d:29:b5:
eb:ab:67:e6:c7:d6:eb:04:0a:17:57:26:c6:06:86:
46:e0:97:90:43:c9:e6:07:73:37:83:0a:9c:b0:ee:
9d:34:a9:83:6f:b3:6b:35:f1:dc:cc:bf:fd:34:92:
c2:d0:7a:11:1f:f7:ad:5e:79:38:17:1a:28:5e:e8:
f8:36:f9:ce:fc:d8:30:1b:dd:09:06:37:97:99:c8:
21:15:5d:e8:c0:6c:7d:20:ee:63:8e:19:29:69:9a:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:59:75:1D:C9:E3:73:62:9F:A9:CB:0E:85:99:E6:7F:97:5D:74:2D
X509v3 Authority Key Identifier:
keyid:A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9e:74:8f:ed:2c:05:01:f8:95:a0:78:92:6f:67:8b:8b:7d:
a5:d8:f5:64:42:34:80:b4:49:93:49:6a:d1:f7:c9:c2:e7:82:
14:64:b7:c8:a8:a4:df:63:b1:f6:ca:09:2a:36:57:15:7f:83:
e0:1b:01:f1:92:27:24:9b:34:f2:d8:53:5c:41:94:e2:23:10:
09:3c:5d:1c:4d:91:ca:91:c4:e3:25:4e:69:71:f8:5c:5f:06:
50:54:5e:03:da:f0:10:55:34:f4:55:2f:f1:83:89:1a:92:63:
48:9c:35:ed:57:63:4a:03:73:62:a1:8d:d7:23:71:33:1d:d8:
2b:a9:00:bd:f9:81:86:f4:bc:70:02:5f:29:14:0b:0d:e5:be:
00:fd:d5:40:e1:0a:b7:90:b2:59:48:ae:14:0c:e2:ec:c2:8f:
3a:47:85:fd:3a:3a:72:6d:ac:3d:be:0e:c4:86:4c:bf:e1:cf:
f8:52:3f:4c:d5:95:85:6c:cd:42:a2:a6:d5:b1:e2:b4:e6:a3:
ba:c9:36:af:d9:b4:a6:58:3f:d0:c8:91:d3:8b:77:04:9b:11:
0c:2a:c8:05:21:b2:d0:c0:a8:48:3e:0d:77:f1:b1:b8:21:b7:
5f:70:c7:c1:87:51:04:f6:91:a2:b9:53:22:af:69:5b:21:c2:
f2:8f:96:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:55:40 2025 by rpki-client