Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
File: l4axG6O9mY3t75gTwTPEJkI0lV4.mft (raw, json)
Hash identifier: 8opDFIU3f4v61Wy7g+H88KxBXFbfSF+LYBQtfhPH8PU=
Subject key identifier: F9:9E:75:7D:CE:80:8A:B4:9B:ED:63:18:4C:26:B1:17:EE:A0:F6:23
Authority key identifier: 97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E
Certificate issuer: /CN=9786b11ba3bd998dedef9813c133c4264234955e
Certificate serial: 019659EFE3816FA31CD77A828C265DB62C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
Manifest number: 1D
Signing time: Mon 21 Apr 2025 20:00:15 +0000
Manifest this update: Mon 21 Apr 2025 20:00:15 +0000
Manifest next update: Tue 22 Apr 2025 20:00:15 +0000
Files and hashes: 1: l4axG6O9mY3t75gTwTPEJkI0lV4.crl (hash: qetqWjOx9o6J2hq1y1NMgaK/sSGyvOweeeRRTmFg/qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:ef:e3:81:6f:a3:1c:d7:7a:82:8c:26:5d:b6:2c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9786b11ba3bd998dedef9813c133c4264234955e
Validity
Not Before: Apr 21 20:00:15 2025 GMT
Not After : Apr 22 20:00:15 2025 GMT
Subject: CN=f99e757dce808ab49bed63184c26b117eea0f623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:be:80:3b:8a:43:70:a0:01:b5:16:6c:22:
0d:21:3a:ca:4a:33:0a:54:95:03:a2:22:63:44:74:
2f:6c:a2:06:25:eb:2b:8a:d5:7c:b9:f5:cc:c8:6b:
32:3a:e8:15:94:9b:a2:a6:42:d8:2d:f3:a0:6b:2f:
39:32:30:ea:17:2e:8a:d2:02:f8:ee:66:8b:6e:78:
92:c3:f5:fb:3a:96:d6:50:77:65:b1:2a:84:29:0f:
8a:cc:48:4d:fb:22:c2:de:14:71:bd:0f:12:83:79:
c8:77:ba:d5:a9:32:16:79:67:7e:d4:62:92:5b:77:
52:eb:33:82:91:98:48:6a:44:c5:6b:61:c7:8a:6d:
a6:53:8a:b6:4b:ae:a6:38:e8:e4:ba:4b:db:ee:be:
06:26:ae:20:8a:e2:2b:7a:a4:b4:c6:bf:29:b3:34:
c6:c7:ef:89:12:7a:ef:ad:c6:9c:a9:a2:18:87:26:
f6:71:f6:f7:9f:2a:54:0c:92:1c:ad:f1:27:80:47:
3f:3b:44:9a:2d:13:1d:cd:7c:7d:0a:d8:5c:9f:7c:
5c:42:98:09:89:30:19:dc:59:a6:c2:68:c8:97:db:
66:bc:d4:3a:85:7c:be:12:9a:ce:a4:29:46:52:77:
be:81:a1:4c:cf:62:47:bb:e5:85:b8:4d:20:9b:b0:
85:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9E:75:7D:CE:80:8A:B4:9B:ED:63:18:4C:26:B1:17:EE:A0:F6:23
X509v3 Authority Key Identifier:
keyid:97:86:B1:1B:A3:BD:99:8D:ED:EF:98:13:C1:33:C4:26:42:34:95:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4axG6O9mY3t75gTwTPEJkI0lV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d737e9-cd4d-48a0-b07c-93ffffbca55d/1/l4axG6O9mY3t75gTwTPEJkI0lV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cc:30:09:eb:c3:1e:54:f3:cc:b2:43:07:a9:f7:62:17:eb:
89:55:6c:a8:18:a3:08:3a:e7:7d:45:a1:1c:3b:fc:6e:23:be:
31:ff:37:f0:07:0f:65:9c:9f:b0:85:32:f1:2f:7d:c0:c1:f1:
75:55:c4:30:5b:aa:01:2f:27:16:9d:50:d5:4e:55:0e:d1:9a:
4f:6f:84:2e:76:9c:ff:28:11:0a:77:8d:9a:3d:24:12:c4:4c:
93:ed:8b:dc:7f:e3:7f:6b:07:bc:f7:2b:23:a2:ee:2d:bd:1a:
65:d4:fe:58:5f:26:5a:85:0e:de:32:5a:22:da:63:40:c2:35:
fb:49:13:6f:cc:7c:14:00:f9:20:86:41:3a:b5:f8:c1:dc:69:
e4:59:be:2e:be:9d:b9:db:ee:8c:bb:4e:fc:20:37:33:eb:de:
af:b7:2b:a0:5b:35:95:bc:78:3a:8e:0a:1c:5a:75:86:f7:84:
7a:51:53:5d:27:22:19:41:04:c8:92:59:57:a9:e8:6d:b8:55:
3b:1c:cc:49:60:67:3f:5d:9d:f2:17:34:35:85:e9:c8:be:4b:
d8:f2:0f:61:a6:28:a8:f8:41:36:d2:9f:74:6e:06:e3:a5:e6:
5d:18:f5:c8:49:01:90:da:69:9e:e4:ee:16:ff:24:eb:31:db:
52:b7:f2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:21 2025 by rpki-client