Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier: KBACl9zwppHkhwfKVK7Iu9e3t6f9Tc4UsojkJXH0Unc=
Subject key identifier: A9:66:C7:54:B9:F6:06:AC:39:59:8E:76:90:3D:45:6F:C6:0C:E8:B8
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer: /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial: 0196586F84A767D7AD4E197805F6FB11817E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 13:00:25 +0000
Manifest this update: Mon 21 Apr 2025 13:00:25 +0000
Manifest next update: Tue 22 Apr 2025 13:00:25 +0000
Files and hashes: 1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: AVxJGwSoFi2q3Vam+JYbnZ1iksciqGBVbshDJeVgnhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:84:a7:67:d7:ad:4e:19:78:05:f6:fb:11:81:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Validity
Not Before: Apr 21 13:00:25 2025 GMT
Not After : Apr 22 13:00:25 2025 GMT
Subject: CN=a966c754b9f606ac39598e76903d456fc60ce8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:77:a2:02:21:e0:80:02:1d:80:e4:7f:17:
8c:b4:18:fd:ac:21:48:ee:35:cb:fe:7e:fe:8d:c0:
c6:72:75:6c:3e:ed:96:6f:c9:cc:2f:60:f4:2d:a0:
54:6b:2d:79:5e:9e:ca:ac:cc:9e:b6:30:ab:6f:b7:
0f:4c:40:fd:b3:23:ab:f1:ba:4c:bf:5b:6b:cc:4e:
8e:ad:55:02:d4:a2:83:74:bd:78:2c:ea:38:26:f8:
77:66:c9:28:91:f0:b8:9b:88:bd:8b:e9:f4:2a:89:
3d:27:96:a2:d5:5d:aa:af:80:71:14:9d:2a:05:af:
61:65:b7:de:f9:3b:9c:97:37:31:a9:72:ba:4f:7b:
34:75:39:da:17:34:70:64:4f:58:60:32:f0:ad:dd:
e8:a5:af:1c:a9:5c:74:db:b8:46:a5:08:df:7d:78:
5c:20:48:df:1a:24:13:87:ad:07:b0:86:1f:26:49:
cd:a9:ac:c7:38:8b:28:d4:08:29:e7:21:e4:10:29:
31:c0:06:7d:00:cf:5a:1e:f5:ff:4d:eb:f8:47:77:
52:05:8e:42:0c:da:a5:7b:1b:d1:e3:51:f4:c3:73:
f0:4c:4f:2c:58:fd:00:ef:7c:78:dd:51:61:43:a6:
44:fd:4c:31:36:22:34:f5:14:9b:b6:2c:c1:c8:af:
e5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:66:C7:54:B9:F6:06:AC:39:59:8E:76:90:3D:45:6F:C6:0C:E8:B8
X509v3 Authority Key Identifier:
keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1e:c2:a7:9c:50:c6:a2:b3:cb:e2:1e:6e:fd:0c:52:6f:98:
1c:15:98:b4:ea:fb:39:37:2c:56:52:c6:c0:31:0e:17:1c:66:
88:94:81:79:44:6c:1e:89:14:c1:be:0f:3a:67:7d:fe:4e:ec:
49:44:22:70:52:22:91:0d:67:d0:98:f8:61:c6:2c:32:35:a0:
06:2e:25:67:82:4b:0e:76:cf:bb:15:ec:1a:5f:c6:7b:ca:ca:
81:aa:0e:07:ed:00:dd:0a:0c:31:4c:75:cc:06:f9:08:56:e8:
26:a4:a8:72:b6:2a:f2:92:3c:89:d1:05:c9:da:e6:40:5b:32:
b0:65:fe:f7:c3:ac:c7:5c:ba:d9:a6:91:da:85:51:48:f7:1f:
cb:7c:a1:c3:f9:43:a0:30:d0:b3:ca:bf:bd:a8:f5:68:87:e8:
16:b1:7b:ce:49:4b:97:ff:cb:2c:aa:b4:66:e0:3c:c7:06:d0:
74:3b:d2:00:85:b5:b8:e3:e4:62:93:c3:bc:12:74:35:6c:31:
b2:1d:c4:ce:41:c5:b8:d3:b9:ea:cd:98:1e:22:6a:6a:c6:4f:
58:3a:00:b2:d7:18:c5:ad:ea:a4:92:db:3d:d7:78:f4:d5:cb:
38:3e:cb:fd:0a:6b:d7:db:f1:4a:a2:c8:bd:7d:85:99:13:64:
62:f5:88:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:12:17 2025 by rpki-client