Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
File: iD9pgz7Edx87C85PAJNleTVG9qg.mft (raw, json)
Hash identifier: uzvEyjV6HZnYlYguClj+U4hyDtqYjLBMmzlGXBWQ7og=
Subject key identifier: 20:CD:C9:25:29:E4:78:14:F4:9A:6E:45:CF:E3:44:AB:C7:A9:8E:54
Authority key identifier: 88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
Certificate issuer: /CN=883f69833ec4771f3b0bce4f009365793546f6a8
Certificate serial: 019659146CDB5AD077DDD31C8E12B49FC25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
Manifest number: 053C
Signing time: Mon 21 Apr 2025 16:00:32 +0000
Manifest this update: Mon 21 Apr 2025 16:00:32 +0000
Manifest next update: Tue 22 Apr 2025 16:00:32 +0000
Files and hashes: 1: iD9pgz7Edx87C85PAJNleTVG9qg.crl (hash: FtjIpkNx/ze/YAx1i3uzYPqoBNXc3P7LtSQRk43d9EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:6c:db:5a:d0:77:dd:d3:1c:8e:12:b4:9f:c2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f69833ec4771f3b0bce4f009365793546f6a8
Validity
Not Before: Apr 21 16:00:32 2025 GMT
Not After : Apr 22 16:00:32 2025 GMT
Subject: CN=20cdc92529e47814f49a6e45cfe344abc7a98e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:70:68:3f:a1:54:b3:58:f0:99:3e:70:2c:
6d:85:d7:36:29:68:e8:1a:30:98:a1:db:07:0a:72:
95:83:d1:25:3f:9d:66:09:72:7d:03:6b:41:23:e7:
9e:87:98:14:57:4b:55:ca:c3:21:ec:01:65:e6:9c:
cc:09:b8:06:37:74:f9:f9:38:2b:d0:60:66:25:1d:
63:90:38:2d:67:ac:bb:c0:4f:97:18:54:56:eb:2f:
2d:10:c4:2d:3c:b6:6d:3c:9e:a7:08:ce:72:16:8a:
21:0f:20:12:c0:a2:86:5c:44:75:ac:45:3e:75:08:
ae:f6:98:7f:5e:f0:ae:90:5b:df:8d:70:93:80:b6:
8d:e8:f9:eb:38:72:72:19:83:07:02:fb:a6:c4:d8:
0d:72:c4:53:94:a5:d3:57:f9:05:62:e7:ed:69:fb:
27:25:61:6b:eb:7c:24:fd:8a:ba:03:f2:fb:86:a8:
0e:19:1c:05:1e:bf:59:c2:6c:9a:45:ef:7b:84:4d:
7a:d1:2f:0d:e4:46:72:f9:75:76:00:50:da:ac:fc:
8c:6e:a2:6d:f9:90:91:62:bf:53:3d:80:93:49:21:
08:9c:51:d5:0a:af:63:05:23:f5:0a:ac:88:5a:98:
ab:41:91:57:64:e7:02:1e:38:af:88:fd:94:43:80:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CD:C9:25:29:E4:78:14:F4:9A:6E:45:CF:E3:44:AB:C7:A9:8E:54
X509v3 Authority Key Identifier:
keyid:88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ad:21:79:33:d6:33:cd:5b:e6:58:8f:78:f7:6e:7f:fd:bf:
27:d8:fd:72:45:51:f3:b6:eb:a0:07:74:64:bd:42:df:d4:ef:
bd:51:3d:2a:e3:4f:32:56:29:c5:13:23:c2:ea:0d:99:0c:9c:
6c:60:1f:ef:2e:d6:f0:ab:1d:d9:c5:e1:d1:3b:59:bd:06:a3:
be:37:7e:28:eb:c5:86:d3:6a:5e:0d:64:a5:e2:0b:f2:32:3f:
df:04:10:fd:27:a6:6b:0a:c7:4c:bb:31:f6:9d:1f:29:f3:11:
bf:36:1a:fd:cb:7c:05:49:05:a9:aa:6d:79:9e:30:b0:72:29:
83:8c:e9:34:3f:7d:8a:fc:63:73:30:cc:38:ab:48:36:08:10:
fa:a5:3f:4f:40:11:c0:03:24:c1:74:8d:1d:23:3f:2f:cb:0b:
8b:4e:59:bf:0c:31:de:ef:a2:60:cf:98:f0:da:17:79:b8:2a:
3e:58:57:d0:b7:57:3d:b8:4c:94:67:17:cc:9e:7e:63:bf:7a:
7c:ab:e0:de:b2:6b:64:7d:f3:13:6c:59:0a:ed:78:4f:8c:36:
b7:d8:43:e0:32:f3:24:0f:b7:ce:ad:2e:3e:d4:30:c8:8a:cd:
ea:bb:78:7c:e5:ff:02:36:33:26:c5:f3:a5:31:08:07:3a:00:
44:b0:14:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:13:46 2025 by rpki-client