Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
File: savnP_2tb4YrC92JTUQyfCyUp9U.mft (raw, json)
Hash identifier: 1eSVWvmd5EdP6aXXMP4qnfiYnsAmQTz3yyY02cI+i34=
Subject key identifier: 9A:2A:FF:AB:0F:98:E9:CA:1C:11:02:C0:B4:A5:50:93:B4:C0:02:33
Authority key identifier: B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
Certificate issuer: /CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
Certificate serial: 0196587021C2176A9F8DE8C6C4BB8242DDB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
Manifest number: 02D6
Signing time: Mon 21 Apr 2025 13:01:05 +0000
Manifest this update: Mon 21 Apr 2025 13:01:05 +0000
Manifest next update: Tue 22 Apr 2025 13:01:05 +0000
Files and hashes: 1: savnP_2tb4YrC92JTUQyfCyUp9U.crl (hash: yBKApGZjpdls6tv0CCXWNAPjpMwsH5iFY+Cba6R/XGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:70:21:c2:17:6a:9f:8d:e8:c6:c4:bb:82:42:dd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
Validity
Not Before: Apr 21 13:01:05 2025 GMT
Not After : Apr 22 13:01:05 2025 GMT
Subject: CN=9a2affab0f98e9ca1c1102c0b4a55093b4c00233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:7f:ff:b3:f3:eb:77:06:e6:cc:d1:83:12:
d4:d8:8e:d2:32:85:cc:9c:06:46:c6:fb:16:f4:ff:
8e:ff:75:a9:5f:cb:e1:b8:62:d2:4c:58:67:4f:47:
4e:d5:4d:d3:eb:c3:d5:52:fd:96:72:6c:83:cc:7e:
3a:cf:91:46:df:f3:b5:b5:26:a0:54:1a:ad:46:2a:
a5:94:12:7f:36:3f:06:1b:20:95:fc:61:b2:3e:86:
ec:bf:4f:ef:d2:28:51:b1:47:fd:ec:b4:71:a3:ff:
b7:27:8b:79:6c:e4:7c:a2:35:72:dc:b3:f0:4a:9a:
30:39:44:e1:c1:20:b4:70:2c:39:fe:c8:71:cb:25:
01:34:4d:53:e1:7c:b0:ef:35:a0:b5:67:ea:f3:85:
4c:c4:09:a5:be:d8:13:3f:0b:47:c6:ab:29:3a:9d:
51:c9:55:a3:70:56:e3:df:34:5d:81:8f:9e:2a:eb:
52:06:77:bc:46:25:2f:2b:eb:2d:65:e5:c9:b5:ed:
c6:ca:14:7e:6f:c9:ed:a7:82:9f:ac:c2:e8:57:43:
3c:fd:3e:48:e6:21:bd:2f:42:35:1c:42:21:33:ab:
e4:f6:b5:80:a6:61:f2:71:01:1e:c1:93:14:e9:b7:
e8:08:be:46:56:6f:9f:09:2e:4d:f9:bb:cb:54:c3:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2A:FF:AB:0F:98:E9:CA:1C:11:02:C0:B4:A5:50:93:B4:C0:02:33
X509v3 Authority Key Identifier:
keyid:B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2f:c6:bf:7b:46:8f:e8:03:08:72:ff:c2:95:df:89:3f:18:
41:72:50:bf:21:db:2b:fc:0b:9f:cd:e4:89:4b:2c:80:cf:c7:
57:ab:44:f2:50:30:e7:78:35:fc:53:fa:07:25:31:9d:c1:53:
60:03:5f:0b:a8:ed:03:71:92:0f:9f:64:bf:27:67:1d:93:29:
77:94:c4:65:6f:fc:23:23:43:df:40:a4:d9:52:15:6a:71:0b:
9f:1e:e0:6a:56:c3:0c:e3:7d:4b:a7:0d:72:6d:a1:47:df:9b:
a2:29:67:3e:a6:37:90:b5:65:21:6f:c7:83:80:a7:e4:da:4e:
e8:44:02:5a:cf:26:2a:e6:4b:b1:f4:1c:b1:fc:df:50:f7:5f:
98:73:72:c9:34:47:42:ec:7b:75:4e:8b:b7:5e:2b:26:b0:50:
c3:1c:17:be:86:bd:00:29:1a:28:1f:42:38:a1:05:c0:20:9f:
00:1a:08:7e:35:51:8d:55:c5:08:11:d2:8e:ef:d3:61:63:90:
ce:74:3d:f2:e1:2a:51:3d:7c:1c:a2:3b:42:af:f3:bd:1c:d6:
90:0b:11:a5:af:5b:a6:c6:1d:6e:12:2f:c5:1a:4a:03:3c:03:
ee:ac:b8:88:42:4e:de:d5:dd:0a:2f:4f:e3:79:83:60:ae:42:
fe:08:3f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:21 2025 by rpki-client