Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
File: SRrcI2V17CPX67-9wgQ5kYAmvvw.mft (raw, json)
Hash identifier: b40JyVurrSXJrm2RNYeBfgzxUJf0+eegG6x0iF/7gK0=
Subject key identifier: E0:C0:14:5D:B3:CC:7E:DF:38:C1:37:DE:67:2C:9D:9B:15:45:CB:31
Authority key identifier: 49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC
Certificate issuer: /CN=491adc236575ec23d7ebbfbdc20439918026befc
Certificate serial: 0196553861EE850AE9051ABB3318DAD76549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
Manifest number: 1225
Signing time: Sun 20 Apr 2025 22:01:20 +0000
Manifest this update: Sun 20 Apr 2025 22:01:20 +0000
Manifest next update: Mon 21 Apr 2025 22:01:20 +0000
Files and hashes: 1: SRrcI2V17CPX67-9wgQ5kYAmvvw.crl (hash: HnQs9Y9FqpRcciYWUD30R9zk8zgkJg5Q4sqVbKb+tzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:61:ee:85:0a:e9:05:1a:bb:33:18:da:d7:65:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491adc236575ec23d7ebbfbdc20439918026befc
Validity
Not Before: Apr 20 22:01:20 2025 GMT
Not After : Apr 21 22:01:20 2025 GMT
Subject: CN=e0c0145db3cc7edf38c137de672c9d9b1545cb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f4:9b:61:d2:d7:75:33:03:1b:13:d7:26:76:
24:10:04:44:0f:d2:ba:90:5e:21:bc:0a:22:67:d2:
df:c0:aa:6a:07:f3:fa:ee:b8:31:bb:42:a2:b2:d3:
1c:2c:09:2f:e8:02:1d:5b:a1:93:c2:11:fe:19:1d:
60:f2:d3:2d:2d:65:12:93:1a:8b:88:96:be:66:98:
89:82:79:44:d8:8d:13:d8:95:5c:03:18:d4:a9:cc:
75:f9:f8:0b:57:73:8f:67:4a:cc:88:d1:67:d4:52:
ef:df:94:dd:36:b2:01:1c:c6:f2:f5:e1:4e:4b:0f:
0e:08:44:ca:93:c3:de:0a:2c:43:44:9d:75:25:51:
03:7c:7d:02:da:bc:61:88:11:5f:c6:3b:56:dc:33:
59:94:b1:7f:bc:56:35:d2:16:88:3e:12:0b:7f:2d:
48:c7:ff:2f:31:c5:20:38:a1:8e:ae:12:d2:58:f1:
a9:b7:76:9e:4e:81:1b:17:a2:33:b1:44:06:89:1b:
4a:dc:70:de:b9:5c:2b:91:b4:58:cd:f4:01:3d:64:
1d:5a:f4:a3:ad:f5:09:d4:fc:cf:fe:ec:24:d5:8f:
c9:8a:6d:59:5c:b0:7c:75:62:2e:d7:20:37:92:ba:
88:5e:88:25:2d:0b:07:a8:d2:40:9e:87:a2:ab:ca:
4b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C0:14:5D:B3:CC:7E:DF:38:C1:37:DE:67:2C:9D:9B:15:45:CB:31
X509v3 Authority Key Identifier:
keyid:49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:58:21:41:5f:6d:54:8e:a8:de:8e:5a:f2:79:98:18:b2:57:
3a:9e:8b:79:6a:f7:03:c7:8b:ef:d6:2b:ab:f5:2f:f9:04:cd:
2d:33:fa:bf:1d:ec:16:c6:57:84:07:3f:20:a8:f6:67:9d:5f:
86:b0:de:94:d9:47:bf:7d:b6:66:81:f8:95:1b:45:2c:0e:4b:
86:1c:53:0c:f9:12:4a:f3:32:cb:d7:c9:d3:12:ae:01:ee:c6:
53:45:27:16:ad:2d:f8:e5:0f:cb:2c:93:27:94:14:cc:72:5f:
80:e6:fa:6b:2a:e2:f7:69:7f:a9:d5:9b:5f:34:82:01:74:c5:
86:d6:43:c0:03:6b:f6:b9:a0:69:ae:63:e0:d3:7a:b9:55:a5:
a0:92:62:38:dc:5f:89:5e:0a:83:21:0e:bc:e5:cb:79:1a:43:
12:0b:b7:93:47:cb:bb:04:6d:db:1b:6d:ef:6b:1c:90:db:c3:
7e:83:3b:54:8b:af:e5:54:a1:3a:f7:3e:0f:ce:08:19:4f:8e:
03:22:8a:ad:fe:e8:1d:82:9f:5e:90:6d:0c:99:b4:a0:d6:bc:
f3:f3:88:c0:bd:2e:83:40:a3:16:b7:b2:41:5f:81:76:b4:44:
c3:7e:7a:78:3a:17:60:34:17:5e:91:99:7e:ae:bc:02:14:d7:
a0:ef:db:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:34 2025 by rpki-client