Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File: Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier: vfYam3Jb1XhPCoRNn1loc1T14kxLuO1mOoPgL21aKeQ=
Subject key identifier: 1D:F2:0B:7B:A1:D5:89:DE:E8:AB:77:5A:C4:A6:18:92:64:E5:A9:C0
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer: /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial: 01965BA7FB32412FFCF8D2F83E15B5442911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number: 102E
Signing time: Tue 22 Apr 2025 04:00:57 +0000
Manifest this update: Tue 22 Apr 2025 04:00:57 +0000
Manifest next update: Wed 23 Apr 2025 04:00:57 +0000
Files and hashes: 1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: ILV7z5xPpaWPjolhzDZIlQQfd0WpF/L86Lgt0yINT44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:fb:32:41:2f:fc:f8:d2:f8:3e:15:b5:44:29:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Validity
Not Before: Apr 22 04:00:57 2025 GMT
Not After : Apr 23 04:00:57 2025 GMT
Subject: CN=1df20b7ba1d589dee8ab775ac4a6189264e5a9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:3b:89:5e:ed:c1:b7:c8:4e:4b:1e:9e:c5:
59:42:13:da:6f:6e:b8:11:04:23:ed:d4:32:c0:df:
e4:ee:30:f9:65:e1:9a:4e:8a:1b:cc:1d:72:56:2c:
83:6b:81:78:99:33:1c:ad:3f:69:7e:45:96:c3:56:
95:b4:b1:09:86:4a:fc:53:39:6b:fa:f6:6a:7d:c6:
14:51:40:45:45:3d:94:36:e9:c8:b9:50:8d:64:04:
73:32:d1:37:c0:c0:c8:ae:c9:e1:1f:a1:72:36:52:
4f:b8:87:6b:3d:ac:cd:b7:e8:be:87:22:ee:14:48:
f6:57:e1:a9:d6:ea:3a:5d:97:08:2f:c9:9b:cd:a9:
64:db:5f:f9:85:24:b0:6c:da:06:13:90:fd:9a:c0:
ce:08:2b:bd:df:65:09:5f:04:18:eb:00:81:5a:65:
f2:5e:a5:48:3b:3d:83:26:cb:c1:8d:32:e4:bb:58:
49:b7:91:bc:3d:22:7b:84:98:d2:54:c6:c8:ae:76:
b6:4f:60:9c:d5:6e:90:4f:8b:28:20:12:be:6b:84:
d8:bf:5c:64:0c:2d:b0:e6:e8:bd:ba:a9:30:7b:2f:
9f:c9:eb:82:a3:ee:26:c0:69:f6:b6:ed:2d:08:58:
32:42:f1:da:34:ca:ad:3b:0d:d7:48:90:43:70:f2:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F2:0B:7B:A1:D5:89:DE:E8:AB:77:5A:C4:A6:18:92:64:E5:A9:C0
X509v3 Authority Key Identifier:
keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:89:4e:6f:32:fe:49:b3:48:e0:6b:51:3e:12:db:38:e5:1e:
49:7c:d9:d1:16:c7:35:23:95:5a:32:d8:56:d6:8f:b2:1a:cf:
4e:e2:98:56:1f:1b:4b:6e:a2:a1:f5:ec:15:78:e3:a6:53:ef:
17:f5:cf:4d:f3:93:55:5e:8e:bc:d4:0e:f9:0b:3b:fb:9c:37:
49:a4:fc:95:a4:47:f1:47:49:39:64:aa:32:89:b2:bd:ed:af:
9b:8c:c7:8e:ca:53:57:de:0f:ef:b4:91:83:5e:32:26:55:09:
01:6c:59:87:16:e7:b0:ea:35:a9:d8:32:4d:7a:b0:27:26:96:
d6:c2:17:64:8a:9b:d1:32:b9:45:2a:fa:e5:85:9b:44:fb:89:
7e:3b:f0:0f:f5:98:d2:a5:96:5e:00:87:a0:ce:ab:4c:28:2e:
97:fb:0f:8f:c8:0e:7e:f1:92:67:83:84:71:94:0f:3e:46:88:
bb:39:5e:a2:ac:33:eb:4b:31:38:ae:14:e3:bf:47:a1:eb:ec:
27:53:35:49:44:4f:04:cb:4f:d9:fc:a2:31:3f:4f:d3:eb:06:
87:af:63:bc:30:77:fc:33:e8:f9:cf:1a:b6:60:02:b4:d0:c3:
86:bd:41:d1:e1:92:f6:5c:17:71:1b:88:82:ef:a3:f0:1b:fd:
2c:66:37:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:14:06 2025 by rpki-client