Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
File: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft (raw, json)
Hash identifier: ThjkeEby9ULfCWV4v0Hy/pAWyHPENfOpnyM7dPlPnzQ=
Subject key identifier: 8A:67:7F:D7:D0:F1:5A:20:60:1C:89:36:49:9E:62:5F:5A:6D:8D:60
Authority key identifier: 9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
Certificate issuer: /CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Certificate serial: 01965DCD6C03136710A039E25F43D1C1EE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 14:01:05 +0000
Manifest this update: Tue 22 Apr 2025 14:01:05 +0000
Manifest next update: Wed 23 Apr 2025 14:01:05 +0000
Files and hashes: 1: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl (hash: l7F++NGdXH5+EXBxnTCsytpbXLT9nztcP3VHp/OKg+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:6c:03:13:67:10:a0:39:e2:5f:43:d1:c1:ee:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Validity
Not Before: Apr 22 14:01:05 2025 GMT
Not After : Apr 23 14:01:05 2025 GMT
Subject: CN=8a677fd7d0f15a20601c8936499e625f5a6d8d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:00:2e:49:5e:d8:66:f1:f1:48:8a:d4:e5:
7d:15:73:8e:2b:be:ce:46:b9:e4:4e:5a:de:72:01:
ff:6f:84:2c:5d:b5:6c:20:8e:13:b6:b7:1b:39:69:
a2:a8:85:8e:78:a6:69:03:62:8a:24:49:8f:81:74:
6c:2b:3e:56:ed:8b:26:8f:15:e5:3e:aa:31:24:10:
35:2d:3d:61:cb:64:5d:72:bf:c4:54:99:05:ca:41:
da:a1:5e:e5:c7:47:08:10:d8:13:e2:ff:36:9f:5f:
a7:91:0a:f7:ff:79:5b:86:8e:12:ee:40:b0:af:7b:
a1:2a:4f:dd:0e:e3:1e:1c:4b:5a:1d:d5:e3:d7:a2:
3f:53:e0:37:d0:3b:3e:de:56:15:a9:53:c8:4e:74:
55:d9:dc:94:b1:6d:95:38:35:9e:96:08:11:20:2b:
84:64:fc:b3:1a:3a:9c:7e:90:2d:a9:98:82:51:f8:
06:18:1b:bc:9e:88:69:41:85:09:26:4a:42:16:32:
96:1c:d3:29:7b:8a:d7:de:fc:d2:7a:af:8a:d2:f7:
f4:90:ec:5b:b1:53:b8:f5:b3:9c:8c:8b:98:dc:78:
d5:e7:76:4e:7a:30:87:52:15:77:7f:66:b2:18:f0:
00:49:b9:50:92:ea:ee:24:66:4c:13:13:76:ce:f0:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:67:7F:D7:D0:F1:5A:20:60:1C:89:36:49:9E:62:5F:5A:6D:8D:60
X509v3 Authority Key Identifier:
keyid:9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:45:2d:2b:5f:58:da:ae:89:38:a8:e1:6b:ef:13:cc:16:b6:
5e:31:e4:2e:cc:f5:ec:07:2b:86:a7:93:d9:1c:9a:ca:70:5f:
d2:db:66:32:84:fa:fb:41:53:ed:12:da:e1:6c:0b:51:79:5f:
18:2e:8f:6e:d0:a7:17:a5:3d:88:ad:cf:b8:03:59:c1:e1:c7:
c5:43:04:92:34:18:c9:f7:4d:13:ca:bf:73:64:96:eb:cb:8b:
f9:7e:e2:f1:14:b0:91:15:84:5a:6d:d2:7f:03:7d:a2:98:cf:
29:a4:e5:1c:9a:bb:9f:cb:2c:19:c3:26:8e:69:6a:e6:73:9c:
62:95:a6:86:25:12:b1:f4:fa:0b:26:7f:83:97:d3:e6:0c:cd:
33:b0:7e:90:3e:fc:f1:3d:ab:20:01:04:04:45:f5:11:14:37:
96:d5:0b:b1:e1:96:ad:12:4f:0d:68:9a:42:ce:10:33:fe:d5:
65:3b:9a:f9:cb:5d:10:73:29:6c:69:5c:6f:4c:20:c6:a7:e0:
29:b0:00:33:89:e7:4e:9d:3a:34:1d:b5:4b:11:90:17:ce:77:
ae:11:cf:36:fb:9b:d7:b2:56:69:cd:e6:cf:3e:20:6d:c1:40:
b2:62:ed:87:76:d2:e5:4c:ae:8e:dd:d8:a7:e7:5a:ef:0a:95:
74:19:70:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:06:19 2025 by rpki-client