Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
File: 1peKb6yHM4CG9TacW0AhsIBhHlc.mft (raw, json)
Hash identifier: UQQhUZ0TCEnhkz9SxBZmVLgPi4ONbU3kwPbcwW2AZL8=
Subject key identifier: 7F:0D:29:77:70:80:5B:A7:03:11:1A:C9:12:23:55:6D:1D:7C:F5:41
Authority key identifier: D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57
Certificate issuer: /CN=d6978a6fac87338086f5369c5b4021b080611e57
Certificate serial: 019653EE106F017909072F1D0E3241CA61D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
Manifest number: 0135
Signing time: Sun 20 Apr 2025 16:00:32 +0000
Manifest this update: Sun 20 Apr 2025 16:00:32 +0000
Manifest next update: Mon 21 Apr 2025 16:00:32 +0000
Files and hashes: 1: 1peKb6yHM4CG9TacW0AhsIBhHlc.crl (hash: FqkzQd5soTzh3qTm76ZXYZUBjAMZ3yHqKDp4iG3bt/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:10:6f:01:79:09:07:2f:1d:0e:32:41:ca:61:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6978a6fac87338086f5369c5b4021b080611e57
Validity
Not Before: Apr 20 16:00:32 2025 GMT
Not After : Apr 21 16:00:32 2025 GMT
Subject: CN=7f0d297770805ba703111ac91223556d1d7cf541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:51:61:3b:7f:15:45:b3:ab:03:cd:1c:ca:
33:00:51:36:06:5f:2f:68:8b:20:6e:2c:b2:55:4d:
51:3a:5a:8e:c1:c9:a1:5d:30:f9:f9:22:34:c7:8a:
82:80:4b:7f:9c:1e:77:35:ad:37:a7:87:5d:c9:f2:
cf:b8:94:ee:02:02:6f:0b:97:e4:87:e2:cd:73:04:
d7:f3:95:58:61:ec:cc:02:f3:2c:b7:0d:6d:5e:2a:
19:da:b0:4e:de:e6:d5:7b:83:36:ea:40:db:6c:34:
0d:1c:d0:ac:c1:5d:21:d6:2d:f7:27:19:62:03:ad:
d8:5e:32:1e:95:e4:ea:ae:a3:08:38:d4:84:67:83:
1e:32:5d:0e:7c:49:92:e0:1c:a0:28:7e:7e:80:2d:
7a:26:de:56:f4:6a:d1:55:07:a9:1b:fa:6a:91:79:
41:a9:55:ce:51:a3:96:e8:0c:8e:b1:2d:08:70:b4:
5d:ad:39:86:c5:b7:ab:94:e3:da:94:88:ce:71:64:
ea:1d:81:5d:30:45:f6:51:6b:cc:7d:2a:59:a6:94:
0c:f6:ee:93:3e:db:cc:81:aa:ca:86:f8:93:08:37:
06:10:4e:f3:5e:ac:76:9e:93:0a:3b:e9:a8:e8:e0:
27:04:ff:b9:f8:5c:2a:2f:85:1f:e0:58:53:bf:03:
aa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0D:29:77:70:80:5B:A7:03:11:1A:C9:12:23:55:6D:1D:7C:F5:41
X509v3 Authority Key Identifier:
keyid:D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:30:7e:1b:e6:9e:c2:bd:b4:a7:e9:f3:ee:a8:88:1e:56:f3:
5e:59:89:36:43:20:a1:75:8f:78:36:f6:81:cf:93:08:78:8e:
f7:83:b9:d8:52:7e:97:77:03:3e:59:6e:81:c1:44:89:4a:19:
3f:02:df:8e:8c:5a:88:82:a9:21:b6:04:7b:f3:2c:99:68:d2:
5e:ed:1d:fd:b0:64:aa:8f:57:7e:20:7a:2c:ba:89:d0:05:7a:
97:ec:ca:bf:c7:11:e3:c8:bf:e7:ca:bd:02:95:fe:6f:38:fe:
15:f2:da:fa:16:cb:7b:df:71:d5:90:86:f5:b7:48:74:7c:22:
c1:6a:2d:78:99:9d:1d:ff:37:3c:67:4f:c8:7e:eb:2f:e7:db:
ab:20:e4:df:71:91:8f:c6:7e:24:d8:98:42:d7:a6:2b:7b:ae:
52:4f:fa:c5:7a:fd:a3:1b:df:c9:c9:02:09:1e:38:22:94:7c:
92:50:ed:ec:36:2b:f0:1b:5f:e1:9a:45:ca:fa:95:68:30:30:
69:fe:8e:76:fe:bb:e9:ce:03:c0:1a:65:2a:33:07:f7:d9:ad:
91:50:d5:cd:be:76:39:ed:a9:0e:9a:5e:39:f6:d9:95:ac:5f:
f5:23:94:cd:68:ab:2e:e7:a7:f6:12:cf:04:85:c7:f5:e5:21:
95:17:60:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:46:58 2025 by rpki-client