Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
File: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft (raw, json)
Hash identifier: Qmz2CeX4/QAVc98yWd7LWlmloijVswuXAhzX0l+V6OQ=
Subject key identifier: 29:80:4E:C4:C8:7C:BB:8A:AC:33:52:00:1D:2A:F3:AC:91:2D:4A:DD
Authority key identifier: F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
Certificate issuer: /CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Certificate serial: 01965B03A151F504FE88A786B2C5A4A85B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
Manifest number: AB
Signing time: Tue 22 Apr 2025 01:01:26 +0000
Manifest this update: Tue 22 Apr 2025 01:01:26 +0000
Manifest next update: Wed 23 Apr 2025 01:01:26 +0000
Files and hashes: 1: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl (hash: Y6pc+ppAmCa0clomLL9zfEoaTnxIaBeYIVdmMw/5m/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:a1:51:f5:04:fe:88:a7:86:b2:c5:a4:a8:5b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Validity
Not Before: Apr 22 01:01:26 2025 GMT
Not After : Apr 23 01:01:26 2025 GMT
Subject: CN=29804ec4c87cbb8aac3352001d2af3ac912d4add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bb:5a:88:d3:48:d9:b3:44:cc:76:5b:ce:79:
09:df:6a:a7:29:85:bf:fe:8f:e2:42:ac:7b:13:36:
17:c5:44:89:88:72:aa:8b:57:4a:9c:a7:ad:14:87:
b4:95:e9:18:f2:52:01:70:90:b1:6c:49:f6:d5:d9:
4c:0b:7e:e9:bc:dc:d9:ad:ba:31:0d:15:84:8d:57:
99:ad:34:4c:d7:4f:4b:4c:0e:89:b7:ca:37:0f:f1:
d1:79:0b:02:1b:4f:ef:ca:52:15:c2:53:47:71:08:
b7:2b:a6:3e:6e:f5:0d:f1:54:b8:8c:27:45:1f:ce:
2f:08:62:47:7c:71:5e:ca:29:11:7f:26:c2:d7:75:
27:aa:e8:07:14:83:8d:6c:b3:b0:18:52:e4:dc:92:
0c:b6:41:a6:71:4e:9d:73:2a:de:71:67:3e:77:63:
ab:3d:e1:f7:06:c9:39:6f:36:ed:9a:28:ec:61:25:
e6:da:2b:b9:82:56:c5:33:3d:f8:a6:fa:56:d0:99:
02:d7:4b:5d:e4:48:f3:99:c0:bb:75:2b:ca:1f:45:
d7:21:b3:9d:e3:25:3e:90:6d:ec:0c:21:a1:9f:99:
ad:e4:8a:0f:a1:db:5d:10:99:8e:80:9c:c7:a3:be:
74:c0:cd:c5:fe:eb:5d:e6:d3:1d:db:6a:82:53:80:
bb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:80:4E:C4:C8:7C:BB:8A:AC:33:52:00:1D:2A:F3:AC:91:2D:4A:DD
X509v3 Authority Key Identifier:
keyid:F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:bc:87:ba:29:6f:55:86:67:8e:f8:10:b1:8c:0d:b8:da:9e:
26:5c:3d:5d:e5:fd:e6:a9:a0:ba:d2:d4:0d:49:6c:6e:d7:2d:
de:e0:8e:5e:d4:0e:44:b1:b7:00:4c:58:f3:2f:0d:08:8f:bd:
8d:9d:ee:d8:0c:e0:37:22:6e:81:d6:36:e7:55:8f:81:86:97:
cf:d6:b8:29:73:ff:62:7a:70:96:37:7f:27:e3:f9:4d:23:d5:
aa:c6:57:77:af:04:4a:bb:0e:82:55:72:a2:a1:4e:65:6c:01:
f1:54:55:67:35:1a:8c:05:08:aa:4a:66:3a:33:70:78:55:d0:
40:13:35:40:4f:eb:23:2b:d4:d8:31:7a:41:b2:d5:db:39:69:
ad:51:ec:b0:82:9e:de:a4:e9:d7:3f:bc:ba:4f:8a:c4:72:31:
cb:f0:8a:3a:3a:38:74:02:40:4f:13:e8:b4:24:a7:c0:e2:04:
ce:69:37:4a:7a:e8:b9:39:14:e6:1b:40:0c:8f:3e:e4:5e:67:
a0:e6:81:0e:20:0b:55:84:17:99:cb:12:32:85:f3:7c:02:b0:
a7:6d:01:43:fd:91:8e:b7:db:cd:87:c9:0d:e7:92:3f:27:7a:
8b:be:15:48:dd:36:88:c6:a4:12:74:b7:a8:b0:1a:07:74:cd:
94:41:b2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:55:02 2025 by rpki-client