Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: JFenBJPzdVY0LRzAVPPPYHsOH3X3uG8EsosM8epoAGg=
Subject key identifier: BE:61:A8:EF:EB:04:13:3A:E1:62:A6:35:37:59:B2:F8:EA:08:E5:54
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 01964CD91ABE6FE6F0FBE38E886B88EC8E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 07:00:18 +0000
Manifest this update: Sat 19 Apr 2025 07:00:18 +0000
Manifest next update: Sun 20 Apr 2025 07:00:18 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: 4+JzlFPOLvE6/lel0U9nyBrVv/Q6xZhGB4sXrsyFPUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:1a:be:6f:e6:f0:fb:e3:8e:88:6b:88:ec:8e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: Apr 19 07:00:18 2025 GMT
Not After : Apr 20 07:00:18 2025 GMT
Subject: CN=be61a8efeb04133ae162a6353759b2f8ea08e554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f5:6b:63:34:71:80:4f:06:bc:f2:a3:34:8a:
0f:a0:8e:26:41:5c:bd:9d:44:dd:76:f7:86:4f:f8:
71:53:8a:f2:d7:6b:50:d2:54:72:ad:9b:35:4f:84:
1e:ee:08:99:6c:8c:09:63:75:4c:be:70:74:c2:65:
26:7a:4c:c3:4d:bf:a1:18:4e:26:a5:65:4b:66:20:
67:d8:92:f9:bb:2e:4b:38:e9:67:a6:ef:49:38:7c:
94:76:7f:02:e7:81:d5:4d:c1:8f:74:e8:5b:2e:ce:
88:e9:c7:bf:c3:5e:1f:48:0b:74:6e:87:42:50:25:
0b:2c:22:a1:67:6d:d1:d3:a4:85:a0:62:9f:0e:7f:
0c:d9:b5:19:8f:9c:fb:2f:46:03:3e:08:08:15:3d:
95:33:e4:53:df:35:6a:77:64:4f:06:f1:1b:e9:7b:
a0:11:49:fb:53:68:03:fb:e1:42:9b:9c:da:80:aa:
fa:03:6d:3c:16:a5:9b:d0:bd:65:22:41:14:a3:bb:
bf:9b:36:12:7b:23:44:6e:0f:98:55:17:4f:a2:05:
19:31:14:b7:bc:97:29:b2:43:cd:fa:b6:38:06:67:
56:5f:a1:eb:e3:0a:1d:09:2d:04:44:83:45:9a:6f:
69:87:ef:70:3f:5f:18:c5:07:44:fa:0a:f6:1f:f0:
5d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:61:A8:EF:EB:04:13:3A:E1:62:A6:35:37:59:B2:F8:EA:08:E5:54
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d7:97:5a:f2:ca:b3:33:c4:1f:36:d5:63:09:7e:f1:4b:92:
47:bd:3d:07:c3:5d:26:62:5d:93:69:96:d7:21:9c:79:fd:31:
12:77:8a:f3:2b:6a:d7:de:a1:44:48:36:b4:5f:6d:ee:b3:71:
e0:7e:42:d5:0c:d0:93:7f:cf:66:c6:4a:06:41:b7:32:c2:5f:
8a:34:cf:23:7c:2b:f4:6e:cf:9a:b6:90:c4:94:28:31:b0:06:
eb:97:ef:b4:b7:51:d0:42:b9:0d:00:50:65:b4:cc:46:fc:f1:
40:eb:f7:a2:e9:c6:ef:ef:4b:bc:d0:66:f2:76:af:a0:b2:40:
6e:e7:a5:b7:55:60:b3:ad:13:4f:49:17:8f:81:34:2d:3d:26:
8b:56:9f:d3:73:0b:3a:6d:5b:07:aa:8a:ec:e7:61:87:23:ee:
15:34:d2:0b:d3:e8:39:7d:1e:ee:d9:23:7e:47:6c:48:1c:63:
a8:da:c2:44:ae:a0:f2:22:2e:d8:b2:6d:ab:5e:c9:6e:3b:b4:
56:e4:f7:71:34:4e:e8:48:18:3b:42:e2:de:bc:d6:bb:43:e8:
cd:9c:56:eb:62:29:b2:56:5b:92:bd:c3:8e:21:f9:ce:32:2e:
fd:d0:f2:a7:19:4e:86:58:6b:76:39:80:e6:9d:13:3d:e2:21:
b4:3a:3a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:06:43 2025 by rpki-client