Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
File: USzy1zi8akeL64yogkEB_w_IGmE.mft (raw, json)
Hash identifier: RGoLsUfzlh+LbdLIjfHiCSMj7gfLga/mxlRMMoACiag=
Subject key identifier: C9:EE:34:24:E1:A1:1D:E0:F6:35:E9:51:A5:C4:CD:27:30:91:96:2C
Authority key identifier: 51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61
Certificate issuer: /CN=512cf2d738bc6a478beb8ca8824101ff0fc81a61
Certificate serial: 019653EE0D6168074E5599114C3A510FC055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
Manifest number: 02DF
Signing time: Sun 20 Apr 2025 16:00:31 +0000
Manifest this update: Sun 20 Apr 2025 16:00:31 +0000
Manifest next update: Mon 21 Apr 2025 16:00:31 +0000
Files and hashes: 1: USzy1zi8akeL64yogkEB_w_IGmE.crl (hash: ykgybZTyO4ylbCUxZeSMbQ+L6HegjsnM+yVsX5Og8kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:0d:61:68:07:4e:55:99:11:4c:3a:51:0f:c0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512cf2d738bc6a478beb8ca8824101ff0fc81a61
Validity
Not Before: Apr 20 16:00:31 2025 GMT
Not After : Apr 21 16:00:31 2025 GMT
Subject: CN=c9ee3424e1a11de0f635e951a5c4cd273091962c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:24:61:45:08:b6:d8:be:d1:a0:93:f4:44:
49:b2:e7:e8:8e:d5:e5:69:f1:ca:50:11:28:db:64:
60:18:4b:6a:88:e8:b7:04:10:a8:30:16:81:1a:42:
b0:50:8a:39:85:68:62:64:c0:f0:71:1d:ce:5a:6b:
ac:5b:9a:75:29:eb:cd:81:b8:a8:2d:33:d5:65:b1:
40:07:2e:a6:eb:d3:6d:af:fd:52:0c:22:aa:31:e8:
dc:f9:99:9c:7e:48:bb:53:06:73:77:b6:56:56:0b:
03:7f:4e:34:62:be:66:80:1f:ee:e1:0a:14:2f:47:
e8:4d:cd:aa:62:3b:48:d7:48:14:ac:98:53:af:71:
96:df:1b:62:88:3e:50:81:e2:fb:6b:f9:ae:7e:d4:
74:78:6c:ca:05:f8:0b:7a:83:78:68:37:00:b4:d8:
f5:d6:ca:13:c6:3d:23:e5:7d:de:bd:25:72:f7:ff:
43:d7:24:98:0d:b5:13:87:09:8c:13:26:e6:77:6f:
7a:4d:04:63:57:d7:7f:47:ad:2f:69:fb:2f:d6:ab:
7c:31:f9:53:4e:3d:1a:8b:ae:98:af:2f:ba:ca:5a:
52:26:88:5c:e0:94:a3:28:c7:ac:8c:ef:28:57:c2:
4f:ae:5b:07:dc:33:4e:d3:12:4d:9c:9c:5e:9c:19:
01:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EE:34:24:E1:A1:1D:E0:F6:35:E9:51:A5:C4:CD:27:30:91:96:2C
X509v3 Authority Key Identifier:
keyid:51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2d:5d:f5:00:fd:5a:49:97:7a:14:87:a2:c6:2a:d5:47:2e:
42:1c:81:8a:fa:2f:f3:d9:df:f7:2d:91:88:97:98:0a:bb:0f:
6c:3f:a6:ac:0b:b3:4e:bf:53:95:e0:a0:46:1b:b6:38:ed:ce:
1c:b2:0e:fc:93:91:b9:02:68:9f:2d:43:c9:26:f8:bd:38:89:
c5:c0:b4:2c:f5:07:77:0b:40:6a:d4:7f:89:aa:3f:a4:da:4c:
8f:3d:2d:97:67:31:2e:09:5d:59:06:af:72:80:f7:ec:fa:09:
9f:96:8c:30:45:2f:b9:3c:87:0c:a2:81:af:8c:a6:21:16:36:
16:87:7d:a0:a5:e6:3f:c6:28:f6:af:b8:ff:4a:a5:58:87:ab:
e5:25:63:aa:4b:ee:55:d7:2d:e7:1a:8d:66:17:38:5e:40:dc:
4f:5a:53:66:95:2a:80:43:86:35:e8:a1:ad:66:a6:66:d8:92:
03:93:52:7d:9a:5a:36:52:db:b8:37:60:f8:30:15:00:a2:b5:
ba:ed:84:59:1f:29:41:53:b6:5d:c6:fe:73:5b:41:fb:92:4d:
68:59:6c:6a:52:f8:75:56:24:7c:ab:8b:01:2b:36:6d:54:90:
0e:d6:ec:08:ad:59:62:33:6a:8e:24:1a:7e:c9:39:4b:c5:5a:
43:a0:13:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:40:50 2025 by rpki-client