Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
File: rrlJQmajhxkETYKaSgqPF6QHBOg.mft (raw, json)
Hash identifier: K/S3RCeTewKaskEqa3SnGBfTf2MZbicPRvnaMcJcgBU=
Subject key identifier: 33:F6:F4:40:35:0D:39:6A:DC:1A:2F:AB:9F:31:C6:7A:90:18:12:52
Authority key identifier: AE:B9:49:42:66:A3:87:19:04:4D:82:9A:4A:0A:8F:17:A4:07:04:E8
Certificate issuer: /CN=aeb9494266a38719044d829a4a0a8f17a40704e8
Certificate serial: 01965CF218039FC693918BB51E1FC32E771D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
Manifest number: 14FF
Signing time: Tue 22 Apr 2025 10:01:31 +0000
Manifest this update: Tue 22 Apr 2025 10:01:31 +0000
Manifest next update: Wed 23 Apr 2025 10:01:31 +0000
Files and hashes: 1: rrlJQmajhxkETYKaSgqPF6QHBOg.crl (hash: /pUIONDbZvGIQsEcQRXLIDMla7VR/6L7bKsS1gknMak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f2:18:03:9f:c6:93:91:8b:b5:1e:1f:c3:2e:77:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb9494266a38719044d829a4a0a8f17a40704e8
Validity
Not Before: Apr 22 10:01:31 2025 GMT
Not After : Apr 23 10:01:31 2025 GMT
Subject: CN=33f6f440350d396adc1a2fab9f31c67a90181252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:d6:e4:b9:a5:2c:0b:e2:f7:6e:df:5a:21:
e3:db:08:72:c8:5c:e7:ea:67:d6:12:53:60:e4:fd:
8d:9b:be:a3:ba:db:6e:dc:07:be:a0:62:5f:41:bd:
11:f6:f7:92:06:e7:da:64:5c:59:f4:70:27:1d:79:
91:25:da:ae:10:94:71:2a:41:2f:9b:c5:68:1a:f9:
99:07:88:33:f2:86:89:81:47:64:9d:51:59:cc:a6:
cc:c8:80:93:79:72:85:a2:47:31:1f:7b:d3:2f:e5:
35:ad:3e:07:e9:0b:6f:e8:10:c5:fb:34:69:ff:02:
0a:80:ca:bd:22:42:85:c6:8a:80:19:96:8e:88:1f:
a9:63:6e:af:3d:92:34:5f:ab:04:f3:d0:e7:e5:fe:
dc:85:7c:3b:ef:1b:ee:7a:09:05:e8:e5:f8:6a:62:
dc:30:df:57:2f:18:31:10:40:e0:34:ea:1d:95:f9:
dc:db:77:84:87:41:d0:86:cb:fa:fe:e2:d4:35:fb:
84:c2:68:67:be:12:38:cb:21:37:f3:45:48:62:28:
56:95:23:15:33:db:0f:5b:8c:bb:e6:36:ac:9f:f1:
20:fb:a4:f9:5e:44:07:8a:ab:0e:1c:67:95:12:8b:
a8:2e:a4:0b:b0:17:7f:b7:28:70:5d:fc:3b:21:c7:
5d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F6:F4:40:35:0D:39:6A:DC:1A:2F:AB:9F:31:C6:7A:90:18:12:52
X509v3 Authority Key Identifier:
keyid:AE:B9:49:42:66:A3:87:19:04:4D:82:9A:4A:0A:8F:17:A4:07:04:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:09:5d:77:93:2a:2d:ad:20:f8:93:83:07:1e:05:b6:50:99:
ac:28:45:24:c4:7d:9a:fc:03:7f:d6:fe:2f:39:57:f1:56:d0:
11:d3:af:76:ee:ed:d4:4e:53:0c:43:89:49:ab:41:87:71:46:
32:ce:82:f5:90:05:3f:f1:a3:34:c9:cf:65:09:a0:d1:28:7b:
b8:b6:05:2f:ba:da:e6:5e:43:b0:30:ab:28:24:1b:de:f7:b1:
87:0d:0f:65:2d:ad:15:d8:fc:23:a2:a9:47:81:b1:93:82:37:
3c:68:92:3a:20:96:16:33:1f:33:8d:89:51:ce:9c:61:02:b2:
e8:ed:56:a0:5d:7e:9d:a8:d2:e5:27:83:0f:c7:ef:43:6c:af:
31:59:13:b3:b3:e0:f7:ea:ae:67:db:80:27:26:0c:a3:58:ac:
09:d6:b7:b6:4d:7d:bc:8b:57:23:c9:bd:e6:e0:01:35:bd:b9:
17:0c:26:df:96:49:ec:a6:f4:57:21:4a:87:d1:ac:79:73:b6:
8f:ae:b0:0e:cb:74:2f:16:76:c7:6a:fa:8f:41:ca:5a:ac:52:
00:75:23:c8:09:85:de:35:d6:9e:f1:31:e8:f4:ef:12:37:a7:
1a:02:66:1a:2e:26:e8:43:f0:38:e1:51:16:68:d2:74:89:64:
a8:f8:5f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:18 2025 by rpki-client