Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
File: I-_rMup5TJRQkgia5cE1AvdxbN4.mft (raw, json)
Hash identifier: WWigVkOL/qPT+poEFV9ifK3Yhi+NGxKwzqhefi6sL/4=
Subject key identifier: 65:60:4A:87:5A:08:3E:4F:27:4D:02:3A:2E:13:4A:FF:BA:F9:B7:E0
Authority key identifier: 23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
Certificate issuer: /CN=23efeb32ea794c945092089ae5c13502f7716cde
Certificate serial: 01964A4695DCB86D70FF44CD94D3F6EE6B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
Manifest number: 14F5
Signing time: Fri 18 Apr 2025 19:01:01 +0000
Manifest this update: Fri 18 Apr 2025 19:01:01 +0000
Manifest next update: Sat 19 Apr 2025 19:01:01 +0000
Files and hashes: 1: I-_rMup5TJRQkgia5cE1AvdxbN4.crl (hash: 1C5zLgDgzYCZsWypHphabKR0oTc7LoZcj1h0laeBvWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:95:dc:b8:6d:70:ff:44:cd:94:d3:f6:ee:6b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23efeb32ea794c945092089ae5c13502f7716cde
Validity
Not Before: Apr 18 19:01:01 2025 GMT
Not After : Apr 19 19:01:01 2025 GMT
Subject: CN=65604a875a083e4f274d023a2e134affbaf9b7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:da:b8:64:9e:29:da:c5:71:8f:2c:b8:07:
ec:d0:06:c8:62:e1:89:78:7f:f0:1f:f8:35:73:03:
ff:67:b8:44:7d:2d:d9:a0:75:a1:ed:ac:eb:3c:c0:
cf:a5:2d:9e:c3:c3:0f:ac:4f:2c:bf:03:00:c6:80:
a1:b4:3f:18:55:38:b3:c3:7b:74:28:8b:e5:f6:c3:
5b:71:bf:45:a6:b1:43:96:84:10:ac:29:f6:22:42:
07:7e:14:28:f8:be:5d:f0:bd:87:16:35:2c:ea:9b:
e6:4e:9a:82:2f:1f:96:0b:2a:4b:39:03:1c:86:98:
ee:7f:7f:89:4d:3d:48:85:24:80:76:91:0d:5e:b5:
32:40:12:aa:5e:4b:0e:5b:75:fc:6a:ae:62:cd:51:
52:c9:55:b6:6c:c7:6e:85:d7:89:79:38:fc:ab:7a:
40:66:55:79:b0:5d:55:96:34:32:c3:53:7b:c0:7d:
20:85:51:f6:c6:02:c4:ee:e3:dc:ad:98:c5:6d:0c:
f8:01:5d:47:64:f5:de:b1:b1:e0:5c:ac:ce:dc:2b:
81:55:1b:da:6b:1b:b2:4c:d1:b0:81:8e:5d:c6:a7:
18:a5:87:11:ca:f0:0b:9d:1c:09:c4:09:9a:1e:20:
4d:98:f6:68:cc:40:27:b2:16:d4:22:42:4a:3a:95:
e2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:60:4A:87:5A:08:3E:4F:27:4D:02:3A:2E:13:4A:FF:BA:F9:B7:E0
X509v3 Authority Key Identifier:
keyid:23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:03:5d:2b:85:39:6d:c4:c2:d3:b8:fd:f7:b4:2e:68:66:08:
67:68:62:b6:1d:11:68:44:06:a5:05:e6:e8:ae:e5:36:ca:38:
90:d0:e4:c0:58:04:be:6e:24:3d:95:05:f4:70:4a:21:11:66:
9d:0c:c3:67:aa:db:a3:c0:92:63:ab:46:3e:b4:80:49:72:e9:
34:1f:c2:93:d3:e0:a6:c0:7d:f1:62:45:43:7e:3b:37:5a:28:
b8:f2:ac:04:41:6c:fe:fa:66:e8:4e:1f:09:9a:08:bd:7b:05:
f3:e5:d0:29:b5:67:c0:a1:7d:aa:2b:4c:d5:23:be:12:aa:18:
53:15:ff:e7:2e:66:74:35:66:fe:43:77:48:df:5d:d5:e9:74:
67:87:9f:8a:e2:9d:79:e0:c5:e0:ac:bb:3f:13:58:bd:85:a1:
38:60:25:1f:4f:d8:45:4b:9b:51:f7:dc:07:e6:3c:39:1a:23:
25:53:70:75:7d:d6:7e:86:e2:ff:5a:7e:a9:1d:d4:9b:cb:05:
de:48:cd:4a:79:70:c7:90:a3:5d:87:44:7a:28:08:13:dc:16:
1d:be:2f:77:5b:b1:b7:54:4f:a6:c9:30:65:07:79:b3:84:c7:
18:00:37:d5:da:a8:be:ce:91:23:b3:58:dd:1d:3d:21:c5:3b:
b4:3c:70:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:33:08 2025 by rpki-client