Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
File: 9yjCKwJQJ1-m63NLoA55D343pVA.mft (raw, json)
Hash identifier: Y1NdwdzD4NaFHW5Gl4NS3XsXFT/WRWqwfhfjwJ1LnAg=
Subject key identifier: 16:BA:FA:5E:28:08:45:EA:9D:7C:35:7A:20:F7:AD:85:38:73:EA:A8
Authority key identifier: F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
Certificate issuer: /CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Certificate serial: 01965914BB10282E59A156D0931699933BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
Manifest number: 082D
Signing time: Mon 21 Apr 2025 16:00:52 +0000
Manifest this update: Mon 21 Apr 2025 16:00:52 +0000
Manifest next update: Tue 22 Apr 2025 16:00:52 +0000
Files and hashes: 1: 9yjCKwJQJ1-m63NLoA55D343pVA.crl (hash: D/Ph4BDxngVdwk8j2WkJj/0XW0BRwV8q61hC6l2/k9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:bb:10:28:2e:59:a1:56:d0:93:16:99:93:3b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Validity
Not Before: Apr 21 16:00:52 2025 GMT
Not After : Apr 22 16:00:52 2025 GMT
Subject: CN=16bafa5e280845ea9d7c357a20f7ad853873eaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:0f:42:bf:76:71:41:86:19:41:49:dc:75:
a4:47:35:04:34:f2:c6:86:07:f1:b5:ef:95:88:97:
11:81:36:68:2b:fa:5c:89:06:33:18:3a:e7:32:4b:
68:80:f9:61:4e:b0:be:83:2d:d2:bd:13:e3:10:29:
aa:b6:d2:fc:cb:19:ae:14:cb:7a:90:3a:cd:26:df:
51:e9:e0:9d:4c:fd:09:94:df:8f:19:42:ad:f9:d6:
c5:3d:e9:32:a1:52:1b:66:b9:9e:f5:8a:66:3b:85:
9e:7d:1b:79:65:07:18:2d:ca:6b:a2:89:3c:e2:c4:
6d:a4:5b:2a:13:3b:c0:81:ff:52:eb:2b:3c:3e:25:
81:2b:a3:5a:de:cf:84:83:e0:cb:9f:51:cf:6b:e1:
9d:e9:fb:e4:f8:1b:ea:f1:19:17:b9:59:b7:1f:e2:
2b:8d:81:0e:b7:14:9f:4b:3a:b3:2f:a4:ea:6d:ac:
c4:17:0a:a9:90:69:03:e5:76:ee:2c:51:6e:60:25:
26:88:07:f5:c7:a1:5f:47:e7:aa:03:94:50:13:3a:
bc:4b:77:de:e9:6f:e8:35:c0:59:4f:5c:ad:e6:d1:
4e:27:74:d2:1e:6e:21:5b:47:a1:4f:31:c4:00:c5:
e0:d8:39:a3:37:0d:e8:7e:75:aa:ba:70:b6:2b:5f:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BA:FA:5E:28:08:45:EA:9D:7C:35:7A:20:F7:AD:85:38:73:EA:A8
X509v3 Authority Key Identifier:
keyid:F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d4:03:f2:78:46:eb:75:98:f3:91:a7:fc:d9:7c:27:1e:c0:
ec:28:86:c8:d8:da:6e:d0:e4:08:91:37:2f:a3:c0:82:7d:ab:
6d:31:b8:4c:bd:44:da:ff:92:90:97:8f:68:4d:f6:eb:85:29:
f8:2a:30:e3:4a:b1:5c:fb:84:98:ba:da:96:3c:7f:8c:81:6f:
d0:ed:c1:4b:e0:61:a4:bf:ea:06:55:96:3e:e9:12:cb:09:02:
1b:e4:11:a6:e8:03:e8:81:cc:2c:42:34:4e:c6:f5:41:79:f4:
94:a9:33:4b:6e:92:71:a5:ad:47:c6:c5:00:cc:c5:2c:32:2d:
40:60:a5:dc:a3:1f:19:7c:43:f6:76:d0:c8:b6:f5:99:f0:65:
19:11:70:ec:74:39:b0:52:36:ea:26:9a:c8:10:c9:05:67:ac:
a3:98:c3:17:0b:6c:59:aa:2f:77:52:c7:15:d2:24:8e:24:7b:
f3:c9:39:d3:f2:33:6b:3e:f6:e1:5b:a4:cf:8f:3e:5b:b2:e2:
e6:e8:86:33:73:6b:c8:40:a3:17:70:a3:17:78:69:e2:11:ad:
13:69:15:46:56:91:a9:68:9a:bd:c8:97:f0:c5:f5:39:06:98:
89:e5:80:7b:29:e2:9f:65:62:93:91:4f:5e:30:d5:66:75:06:
ad:26:bf:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:15 2025 by rpki-client