Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
File: idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft (raw, json)
Hash identifier: WmSbEjZe04ilgGYmwy1SOkhbA13l5rh4LD17MlyCtmg=
Subject key identifier: 58:F5:2F:8E:5F:5F:D8:97:E5:B7:BA:28:AE:05:CF:B9:21:D5:BC:35
Authority key identifier: 89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
Certificate issuer: /CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Certificate serial: 019649A122C1D112C05D97388E0C9A1E0F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
Manifest number: 0E17
Signing time: Fri 18 Apr 2025 16:00:18 +0000
Manifest this update: Fri 18 Apr 2025 16:00:18 +0000
Manifest next update: Sat 19 Apr 2025 16:00:18 +0000
Files and hashes: 1: idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl (hash: FMkVdEOS5V1b0QWxEG+7Ht3zdKEe1eDVIZ0GTad/ztM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:22:c1:d1:12:c0:5d:97:38:8e:0c:9a:1e:0f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Validity
Not Before: Apr 18 16:00:18 2025 GMT
Not After : Apr 19 16:00:18 2025 GMT
Subject: CN=58f52f8e5f5fd897e5b7ba28ae05cfb921d5bc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:29:97:ec:b5:eb:1d:38:d3:14:bc:4c:95:
a2:00:df:f2:40:b4:9e:8e:b6:23:8d:d5:69:5f:23:
fe:11:56:86:4b:71:65:df:bd:0b:ae:ef:0a:aa:d2:
17:56:dc:9b:45:c7:07:42:91:8f:55:d9:6f:3b:70:
a5:b6:47:2e:ab:48:8f:cb:56:3f:89:f5:93:c3:a4:
ec:10:b0:e3:25:14:ee:a0:9d:1d:e7:2d:c7:90:30:
42:c7:8e:34:43:14:49:c8:47:8b:b8:ad:b3:b7:64:
3a:46:1b:2e:d2:d9:19:46:68:6c:f0:4b:c7:53:37:
f4:64:6f:9d:12:76:e7:92:2a:2e:ed:fc:da:28:60:
c0:53:39:67:91:07:ee:a4:9e:86:43:4d:62:a3:45:
7f:2a:95:3a:b4:e0:73:b4:b0:af:fd:19:b8:7c:be:
25:ae:fb:d4:05:ea:c1:be:9c:13:36:e4:5e:46:8b:
27:c1:a6:1b:c1:d8:2c:a3:7c:a0:07:67:11:75:35:
fb:85:13:db:4e:29:c0:8c:3d:98:a1:0d:ad:d5:3a:
e7:87:e8:d5:cc:65:33:3f:04:a9:da:16:68:18:fa:
0b:b2:8a:eb:c3:71:cc:81:e6:c8:7b:fd:89:21:c7:
5b:5c:4d:bf:0d:7d:0b:a9:6c:c8:bb:93:5a:56:27:
43:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F5:2F:8E:5F:5F:D8:97:E5:B7:BA:28:AE:05:CF:B9:21:D5:BC:35
X509v3 Authority Key Identifier:
keyid:89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:59:e4:b0:de:94:27:a5:61:7f:ce:b8:75:79:13:c3:8b:7e:
99:9e:1e:e5:17:24:18:c2:d6:73:dc:28:88:43:f0:6d:0c:08:
75:2f:3b:83:bb:86:ed:19:c9:58:4f:30:0b:19:a6:ee:24:84:
29:93:38:ff:41:bc:5f:2f:51:3d:ca:2a:ef:d8:4b:55:aa:19:
25:11:ba:7e:6b:0e:5e:8c:6c:c3:b9:2f:cf:9c:54:ee:e5:bb:
fe:0b:e7:47:1b:20:6e:82:05:f2:cf:bd:fb:ff:69:c6:64:70:
6c:28:85:05:25:ea:67:df:44:4a:a7:8d:5b:fb:15:98:55:df:
fb:7c:aa:ca:40:b7:5f:1e:83:83:a0:b4:c8:23:46:c5:ca:25:
dd:d7:fe:94:7b:93:48:98:11:db:37:4c:2b:ba:dd:48:cf:d3:
05:7c:ed:c2:9b:ff:2b:43:ac:38:2d:a2:0c:81:3f:49:51:22:
95:c0:7a:e2:17:d7:be:30:ae:ef:d4:5b:d0:9f:ea:dc:1f:af:
f5:67:33:a6:1f:f4:7f:a1:bb:fd:dc:ec:e1:ab:60:e3:60:f3:
84:f5:c7:f6:81:19:6f:fd:9e:c2:21:d3:48:12:1d:bc:9c:7e:
4b:93:38:19:29:73:ca:c9:74:25:a8:ad:e0:50:ee:e5:0d:72:
23:bf:9c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:24:51 2025 by rpki-client