Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
File: X0cesf72NSCKxw5v4sVrAEd_C4w.mft (raw, json)
Hash identifier: O7LfizjyRm0+sKHadwKmqqnbfMzmgGyEoasvUThp8Tc=
Subject key identifier: 8B:39:BC:F7:FC:4E:64:D9:C2:E4:37:BC:CC:1D:C7:87:DA:03:4D:4E
Authority key identifier: 5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
Certificate issuer: /CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Certificate serial: 01964BFD7D6DC8F0E6628BF0DADCD688698C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
Manifest number: 1433
Signing time: Sat 19 Apr 2025 03:00:26 +0000
Manifest this update: Sat 19 Apr 2025 03:00:26 +0000
Manifest next update: Sun 20 Apr 2025 03:00:26 +0000
Files and hashes: 1: X0cesf72NSCKxw5v4sVrAEd_C4w.crl (hash: Uf7aX54zGRp8uD0+db7D+pppz908h2r6qgm1igeU1dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:7d:6d:c8:f0:e6:62:8b:f0:da:dc:d6:88:69:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Validity
Not Before: Apr 19 03:00:26 2025 GMT
Not After : Apr 20 03:00:26 2025 GMT
Subject: CN=8b39bcf7fc4e64d9c2e437bccc1dc787da034d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:d7:dd:0e:a7:46:71:24:a9:b7:b9:3d:e1:
8c:c9:e4:7d:c3:4d:ea:eb:59:d3:76:ea:91:54:d3:
29:95:7e:63:6c:d6:47:07:28:f4:f6:42:b5:a8:c6:
d3:4d:d1:b3:5e:90:43:36:c6:17:54:38:16:14:f7:
ac:9c:bb:71:d1:84:ed:63:cf:e2:a3:28:f6:4f:1f:
5d:43:f3:12:4f:e8:94:ca:c4:2e:34:2e:27:c5:95:
21:ed:0d:1b:e7:7a:06:97:b9:bb:91:02:a3:5b:77:
17:0e:d8:41:e4:89:4f:23:12:c1:2e:7e:d1:5e:82:
2b:a2:f1:e2:5b:80:fe:3d:73:d8:2d:3a:ba:10:89:
84:d0:08:7c:e6:9d:d1:53:c4:fd:df:3e:d8:92:74:
33:5d:0b:13:94:c2:c4:58:30:d9:21:67:19:7e:93:
b3:08:f8:a3:e3:a9:4a:59:79:ca:7a:b3:cb:c3:d5:
bf:9d:01:7c:93:c1:25:b4:b9:70:47:f4:30:fc:22:
dc:3e:71:fb:ae:d6:9e:88:e6:ff:e1:8f:5a:a0:ac:
10:0b:88:6d:70:d8:06:e7:48:03:62:75:0e:d9:b8:
1b:b5:0c:b6:b7:dd:3f:f2:e2:06:28:1b:c7:ba:9b:
da:f7:90:8b:cf:fd:b5:31:80:5d:bc:ac:d9:da:81:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:39:BC:F7:FC:4E:64:D9:C2:E4:37:BC:CC:1D:C7:87:DA:03:4D:4E
X509v3 Authority Key Identifier:
keyid:5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:65:51:ef:df:59:ef:93:21:e8:95:44:91:fd:ba:d7:df:02:
15:de:4e:fc:1c:4e:53:99:c5:5e:fc:ba:ea:20:0d:11:a7:ee:
cd:df:fb:fa:dd:f4:73:58:1c:47:ee:e2:bd:86:e9:14:d5:05:
c4:9d:e3:c6:cd:76:01:d9:cd:e7:c1:43:b4:a1:e1:05:61:50:
f7:62:0a:ae:69:19:4e:f8:b6:2f:44:44:3a:4c:2e:f4:e4:8c:
5d:16:b9:1c:8a:b0:9b:59:ef:6a:dc:ba:3a:d2:bd:de:91:d2:
e6:f5:45:42:61:75:79:c2:a0:d9:60:fb:0d:30:3b:00:6b:8a:
52:38:1e:ec:fc:2f:a6:98:f1:3f:b5:be:2a:20:11:c0:f2:d4:
94:b6:44:85:34:a0:8a:8e:ba:6f:4b:b7:a9:66:a6:19:fb:d4:
31:43:49:12:12:77:d8:03:10:74:fb:e2:93:db:7f:94:77:bc:
83:98:1d:71:d3:8a:ba:c5:b8:fd:49:2e:d0:60:ed:f5:48:9a:
27:b1:cb:33:74:99:6c:b3:20:3e:bf:67:da:6e:e3:99:e6:a5:
0d:07:dd:1f:b6:ec:a0:d2:0f:b3:6d:d4:96:2d:24:59:e3:42:
e9:20:21:bb:b2:ca:25:fd:1f:9b:01:df:28:9d:a9:84:c8:dd:
46:85:8e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:29:16 2025 by rpki-client