Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
File: C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json)
Hash identifier: XVxNHv14jHMmpdNsIbRlADbhqFU30ofkGG8uLfVdRwU=
Subject key identifier: C3:E4:CA:F2:67:E3:05:AD:AE:9F:A7:31:F1:6D:FE:36:32:38:00:61
Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
Certificate issuer: /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Certificate serial: 019657261A2A306515DA1B964C75858C9F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
Manifest number: 148C
Signing time: Mon 21 Apr 2025 07:00:36 +0000
Manifest this update: Mon 21 Apr 2025 07:00:36 +0000
Manifest next update: Tue 22 Apr 2025 07:00:36 +0000
Files and hashes: 1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: +DrhLM++STQfoWpQNw9Xl+oleb5/LIylIXTjnC2pe80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:1a:2a:30:65:15:da:1b:96:4c:75:85:8c:9f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Validity
Not Before: Apr 21 07:00:36 2025 GMT
Not After : Apr 22 07:00:36 2025 GMT
Subject: CN=c3e4caf267e305adae9fa731f16dfe3632380061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:4e:af:62:cf:70:ed:67:d8:87:e5:3d:89:
9a:ab:56:a6:46:35:5e:cb:29:dd:ba:af:3e:a1:b7:
70:fb:ce:d4:3d:48:17:07:04:be:f9:4c:2e:e6:3a:
52:d9:9c:31:c8:e1:ca:01:ed:e1:7e:94:6c:d9:18:
9e:7f:d8:80:b4:d0:a4:15:c1:5c:83:89:f2:91:ed:
53:03:47:ea:23:ad:bf:5f:64:8e:9c:23:e5:13:7c:
14:8a:52:7a:48:fb:cf:66:b0:67:df:c6:fa:ce:b6:
7d:b8:c7:21:42:aa:a9:df:bd:ba:a5:d8:12:3c:67:
d4:9b:2c:f2:01:42:58:2d:21:f2:47:70:06:93:0a:
c0:35:e4:61:6f:51:8c:6d:5d:3d:42:86:f0:b9:2f:
18:4c:9c:c4:cb:70:bf:52:a9:cd:e9:43:1b:81:a5:
90:c3:cf:9d:51:c4:9b:13:09:0f:d8:0e:d6:69:8b:
aa:c3:d4:de:5f:1d:a7:4e:49:5b:de:af:c6:de:cd:
89:02:09:25:2e:8b:44:fe:65:22:98:3f:68:f5:97:
a4:b7:37:1b:71:be:18:d2:e1:1f:43:1a:bc:56:08:
51:fa:b1:0a:17:26:b2:63:0b:d3:0a:db:8b:ea:22:
c0:0f:31:74:33:da:bc:79:62:68:a9:05:f6:7d:8d:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E4:CA:F2:67:E3:05:AD:AE:9F:A7:31:F1:6D:FE:36:32:38:00:61
X509v3 Authority Key Identifier:
keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e1:dc:31:d7:07:a2:2f:db:47:2c:c3:bb:25:50:bf:c5:ef:
a0:25:30:1e:b0:b0:c2:5a:d6:ea:46:b3:6d:65:74:8e:88:3e:
2b:d2:2b:d8:59:40:22:14:e3:86:49:03:fc:6e:86:31:72:60:
ec:30:3c:fb:ba:9e:b7:bc:f0:55:70:7d:51:c8:b8:15:67:40:
85:8c:c0:50:97:5c:eb:ef:bb:57:da:c9:7c:62:fd:66:ff:ba:
70:ea:6a:15:69:69:36:ec:8b:c1:41:f9:07:7b:41:ee:9d:64:
74:31:dc:82:c5:38:3b:91:f1:53:12:a3:ea:eb:11:d2:b7:ab:
bf:e6:6b:76:ab:f0:29:f7:5c:62:dd:74:c2:ad:03:51:f8:7c:
b9:34:a5:d2:38:0e:42:48:ce:4c:20:6c:8d:5a:f3:93:fa:a9:
4b:f2:6c:9c:20:c4:a1:68:6e:d2:3a:e1:0b:81:dc:2c:95:ff:
4f:b7:64:30:08:f8:9e:d0:c0:82:fc:ad:56:ab:4c:34:2f:46:
09:0d:24:91:45:a9:51:2f:e1:a2:82:76:fd:15:ca:ff:f8:30:
84:bf:cc:46:89:8c:a4:f5:c7:d2:29:b7:6d:64:a3:c4:a1:9c:
57:74:19:84:a3:86:18:e9:b9:1d:49:98:96:af:f5:fe:9d:d4:
ab:e1:51:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:01 2025 by rpki-client