Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
File: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft (raw, json)
Hash identifier: yUYT+s/aad9mDlI8k1TvwCV6qmitcvy5o0G3IrrffpA=
Subject key identifier: 7A:67:B9:9A:8C:34:12:DE:70:F4:80:8B:D5:D7:ED:F5:33:4A:3C:0E
Authority key identifier: 03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
Certificate issuer: /CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Certificate serial: 01965C4C627895F078EB1B9D885CDA2A54C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
Manifest number: 14FE
Signing time: Tue 22 Apr 2025 07:00:31 +0000
Manifest this update: Tue 22 Apr 2025 07:00:31 +0000
Manifest next update: Wed 23 Apr 2025 07:00:31 +0000
Files and hashes: 1: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl (hash: SWwXBuHoV+Yc8kTz6WgHACgyksKTh1pdq91ugQjvc1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:62:78:95:f0:78:eb:1b:9d:88:5c:da:2a:54:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Validity
Not Before: Apr 22 07:00:31 2025 GMT
Not After : Apr 23 07:00:31 2025 GMT
Subject: CN=7a67b99a8c3412de70f4808bd5d7edf5334a3c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e3:f5:8a:23:ce:ee:af:b8:5c:e2:7c:62:47:
93:a1:91:17:ae:db:cb:86:89:1d:bc:d3:fd:ae:a7:
e4:04:be:71:47:9b:a7:78:1f:3b:df:3d:b7:43:94:
4b:d6:2f:15:db:c9:99:99:80:a5:a8:a3:71:9f:c4:
ec:34:97:44:74:8a:1d:22:66:9d:15:55:ce:3f:06:
a0:d2:a4:69:7d:d8:a8:19:58:4c:db:3a:56:57:0b:
eb:92:f7:3c:88:a6:9f:65:7d:58:ad:1c:63:ad:7d:
21:18:e2:35:34:88:4a:0c:27:8a:27:e7:4b:c9:7e:
d0:3b:d2:c0:2d:0d:4e:a0:e7:8e:62:e3:c9:04:79:
ba:7f:32:f2:6d:f9:d1:4a:4f:62:92:5b:14:a0:f1:
80:89:d7:e8:9c:88:ce:4d:a3:c5:ca:1b:35:88:cc:
3d:4c:0d:98:92:b0:dc:23:4e:c0:75:c4:2a:60:63:
5c:8c:95:b7:b7:d4:33:f9:75:a1:fb:20:65:fa:69:
e7:ba:f2:86:2c:d2:69:0f:87:c2:79:c8:b6:f7:87:
dc:2f:bb:20:7b:47:dc:37:0c:75:ec:a9:4f:ca:1a:
22:21:50:b2:74:61:89:c6:f6:72:eb:b3:8a:9e:29:
2c:28:60:6d:b7:a0:da:c4:11:28:54:9d:cf:e5:3e:
77:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:67:B9:9A:8C:34:12:DE:70:F4:80:8B:D5:D7:ED:F5:33:4A:3C:0E
X509v3 Authority Key Identifier:
keyid:03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:77:6c:a6:1a:29:a5:e3:12:8a:3a:46:13:97:06:16:1c:8a:
38:bc:68:35:90:ed:3d:17:d6:16:58:b5:ac:53:63:aa:58:8c:
8a:aa:1a:0a:68:72:84:59:2b:86:8d:ea:25:02:dc:82:ab:5e:
28:98:66:06:1f:d7:b9:11:ef:a6:82:3a:d3:14:85:8a:66:aa:
25:56:7d:80:96:1f:76:c9:c6:f1:44:08:d0:fc:c3:e1:df:5d:
c4:fd:da:72:d2:80:58:39:27:90:99:5b:c3:fb:62:b6:ff:e6:
76:bb:b0:e8:b4:88:f4:d8:68:c2:70:9a:26:3a:2d:6b:e3:f8:
39:af:a9:5a:1e:d8:72:78:3a:0d:24:5e:56:8f:03:29:24:1a:
ed:12:37:b1:69:ef:bb:3c:21:3e:0b:11:b9:28:cb:ae:91:83:
fe:e5:50:0d:ac:fd:42:5b:9d:dc:e0:9c:01:91:42:97:9b:74:
9c:db:d8:74:92:0d:9d:4a:f0:af:0b:6d:21:18:06:3c:f0:77:
ca:c4:3d:3a:6e:5a:9b:bf:d9:b3:85:21:97:5a:c2:b1:38:08:
65:17:5b:e6:f0:fb:cb:8e:1f:ef:4d:6a:47:e8:fc:ef:cd:6d:
da:e2:62:2d:47:37:93:a5:09:30:89:ed:b8:57:9f:4b:d3:ea:
6a:dd:51:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:14:39 2025 by rpki-client