Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
File: Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft (raw, json)
Hash identifier: /mj50hP3VJl+JuHIqCspiKBkCCLS/HxluhANsvtAMm8=
Subject key identifier: 0B:E8:F7:CE:C7:77:9B:31:C1:FA:E3:AE:44:A4:5C:D7:78:1F:6A:75
Authority key identifier: 32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A
Certificate issuer: /CN=324d9d8b0504555676b918ee391dc153a987e38a
Certificate serial: 01965537D76AD4D65CB416A15DD71259B5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
Manifest number: 0F22
Signing time: Sun 20 Apr 2025 22:00:45 +0000
Manifest this update: Sun 20 Apr 2025 22:00:45 +0000
Manifest next update: Mon 21 Apr 2025 22:00:45 +0000
Files and hashes: 1: Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl (hash: ft9Wj8dGpCwjjJYt+csC9DhIKZjykesZiQ13xN/pnOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:d7:6a:d4:d6:5c:b4:16:a1:5d:d7:12:59:b5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324d9d8b0504555676b918ee391dc153a987e38a
Validity
Not Before: Apr 20 22:00:45 2025 GMT
Not After : Apr 21 22:00:45 2025 GMT
Subject: CN=0be8f7cec7779b31c1fae3ae44a45cd7781f6a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:d1:7d:cc:a8:bb:76:38:31:3e:a0:e5:2b:
89:97:14:be:e5:54:d4:78:d9:ce:e3:84:4d:56:60:
e9:ae:7d:73:bb:4c:28:64:15:78:13:d3:c9:29:50:
e1:71:78:ac:15:d2:b9:18:44:42:82:b0:24:06:ca:
4e:07:ad:cd:28:26:8d:22:64:a1:a3:39:ee:bc:0c:
f1:e5:1e:bd:a5:ac:2f:45:2c:db:b8:3e:b9:4c:af:
75:66:d8:6c:d3:07:bb:41:5b:60:0c:8a:dd:75:0a:
f1:ab:9e:73:96:de:11:74:dd:5c:7f:f5:c0:60:f5:
be:4b:db:28:43:9a:80:8e:d3:e3:31:2d:1c:53:87:
93:79:25:13:e6:b0:b2:2a:58:f5:dc:c6:b7:0b:41:
16:5e:88:67:b6:40:cb:e6:e0:b2:91:ff:c4:66:e3:
31:b0:6b:cf:e0:e7:b7:bb:84:1a:9a:ef:28:4b:67:
c6:4e:4e:23:bf:16:df:3e:87:b1:f6:be:ff:3f:35:
47:a5:ea:68:4c:7f:86:9d:31:79:7a:3d:ad:95:7e:
5b:7d:4b:2e:07:a6:ef:99:f7:1f:1b:2e:31:e9:ec:
e8:f5:aa:82:3f:d8:eb:1b:a9:d5:90:39:61:fc:49:
6f:14:9b:cb:92:84:9b:92:09:24:bb:dd:4d:86:e8:
c2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E8:F7:CE:C7:77:9B:31:C1:FA:E3:AE:44:A4:5C:D7:78:1F:6A:75
X509v3 Authority Key Identifier:
keyid:32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f1:96:d0:d4:c0:3f:7b:26:4e:42:3c:7a:b3:db:13:ff:15:
c2:d1:7d:87:49:5a:a8:2d:c9:b2:28:fe:63:35:d9:e7:e0:b5:
c5:e8:70:ee:6b:6c:cc:45:ee:36:68:03:de:fa:22:5e:65:3e:
39:73:fe:18:50:8d:1b:7f:03:e2:07:b9:03:8f:ee:c0:0c:b2:
17:2d:16:5d:69:c8:af:4b:9c:99:aa:9c:3f:61:8e:ac:ee:7e:
86:32:4b:e0:8a:0b:15:25:50:4b:80:a6:d9:c8:c4:49:36:b3:
8f:eb:f7:d8:6a:94:90:9c:79:85:7c:2b:e8:e4:8e:21:20:aa:
77:8f:43:56:37:c4:04:21:95:0f:d9:5d:7a:78:0c:53:c9:2f:
f4:ae:38:31:5f:2e:69:30:cb:19:cc:b2:50:66:33:c4:f6:99:
13:12:fa:4b:f2:dd:68:d9:88:40:8c:95:40:ab:15:48:ca:40:
cc:67:ba:2f:d1:6c:07:77:8c:22:4a:18:86:b8:c0:3b:a9:c2:
6b:75:ff:40:1f:b4:0f:c4:65:ff:a9:8a:77:7e:c4:dd:4d:27:
fe:79:1f:ea:cb:cd:ad:db:18:7b:0e:c2:0c:6f:cf:88:e4:92:
9a:3e:70:df:b5:7d:5c:a6:8e:d0:84:e3:ed:fa:40:d8:42:f3:
7b:f9:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:00:06 2025 by rpki-client