Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
File: mtVmfEEoFBE5zKfFBH_BclC_Y68.mft (raw, json)
Hash identifier: Vky0ElbK0s+DW0pgDUR7Vu7JnZLR93IkjmvRxbdIkRQ=
Subject key identifier: A2:2E:48:F3:6E:93:FE:D5:98:60:B9:D9:52:F6:A1:F0:04:C5:2F:29
Authority key identifier: 9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF
Certificate issuer: /CN=9ad5667c4128141139cca7c5047fc17250bf63af
Certificate serial: 019651C8A85369106ED3F21B496CED785B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 06:00:26 +0000
Manifest this update: Sun 20 Apr 2025 06:00:26 +0000
Manifest next update: Mon 21 Apr 2025 06:00:26 +0000
Files and hashes: 1: mtVmfEEoFBE5zKfFBH_BclC_Y68.crl (hash: vv1+ZUbEJ5wNIAwFjIksDWdYdhz09Egw6BqbvBcX1+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:a8:53:69:10:6e:d3:f2:1b:49:6c:ed:78:5b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ad5667c4128141139cca7c5047fc17250bf63af
Validity
Not Before: Apr 20 06:00:26 2025 GMT
Not After : Apr 21 06:00:26 2025 GMT
Subject: CN=a22e48f36e93fed59860b9d952f6a1f004c52f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:1f:00:ae:d3:9c:2e:49:40:08:e7:7d:76:
e5:35:11:07:8b:ad:0f:ca:39:1e:05:22:6b:16:7d:
93:6d:9e:0c:20:4f:c0:51:bb:61:38:d7:61:0b:56:
95:01:6a:ed:65:fd:46:44:17:4f:8c:35:71:4a:c6:
56:27:58:e0:96:d7:dc:11:1f:c5:d7:82:da:1f:0b:
4b:60:e2:d5:5b:43:53:c0:8f:28:0a:f0:85:de:52:
e9:52:f0:c4:b2:38:94:ad:c8:f9:51:a4:26:57:98:
7f:ee:25:31:94:82:ec:0b:5c:98:9c:cd:b2:09:e2:
e8:4c:a7:b3:85:2b:1b:ac:b4:b6:e6:ba:7d:82:28:
2b:37:28:4a:34:14:4d:b5:15:8a:06:4f:65:dc:1d:
33:8c:a2:22:3d:05:12:65:bf:f9:31:1e:20:65:cb:
6b:f9:01:ae:ab:ae:34:8f:cb:d6:c7:2d:29:f8:58:
fb:28:80:d2:7a:1a:46:c3:cd:14:bc:c4:da:c1:2f:
c7:fb:c8:ab:e8:e1:c4:54:97:0b:2b:e2:7a:04:aa:
43:4c:00:e0:e4:e9:2a:aa:ff:8e:21:ad:f4:a6:e3:
d8:0b:3a:ad:6f:b4:8e:fe:15:f2:0c:82:5d:2a:78:
ea:38:b0:a8:81:03:8a:d8:57:31:7e:53:d3:62:7a:
0a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2E:48:F3:6E:93:FE:D5:98:60:B9:D9:52:F6:A1:F0:04:C5:2F:29
X509v3 Authority Key Identifier:
keyid:9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:73:30:4e:2d:06:bd:ee:ad:18:e2:49:53:c9:dd:5f:b2:37:
12:6a:1f:34:77:0a:5c:d5:1f:36:c8:04:7f:4f:6a:99:35:23:
ed:4a:3a:c1:4f:2c:8e:5d:c9:fc:4e:6d:b6:d3:4b:0e:d4:9f:
64:49:0b:0f:f5:b4:be:e0:45:f3:09:5e:ca:25:48:20:0c:50:
c5:eb:df:b7:cc:96:99:bb:bd:fb:7b:f0:ba:bf:a9:b2:b7:b9:
58:60:f1:98:e9:a7:08:b2:87:5b:0f:0f:27:a8:a1:d6:8c:f2:
98:71:94:5d:71:13:68:4e:9b:d5:27:19:b0:a4:60:dc:ef:78:
5e:63:8d:9e:84:cf:6b:76:0b:f0:39:35:51:e3:a6:17:91:2c:
c0:69:10:b6:9d:48:19:c2:ba:03:0f:f8:3a:2b:36:08:ae:c9:
95:58:c8:89:a7:8f:bc:95:b0:d3:55:9f:12:dd:37:74:7a:ed:
f6:03:3f:90:76:4b:6c:0a:f5:7d:7c:1d:f5:67:d9:74:54:84:
0c:88:f7:92:61:06:d2:64:7e:3c:b7:05:fc:54:ec:5c:19:59:
4f:02:63:d6:1f:7e:04:be:01:b0:96:69:cf:99:96:0c:ee:00:
28:f9:05:b2:27:7e:9d:8f:f4:6b:0d:36:98:5d:f0:c9:15:b2:
44:5c:41:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:36:27 2025 by rpki-client