Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
File: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json)
Hash identifier: LHGYBqWZfHG6ZfUD0s1OA9TQ+HflHmFDd8NMlVk/Geg=
Subject key identifier: 9A:E7:C7:A9:3C:3D:1E:BB:1F:D0:71:3B:5A:E0:DE:11:A7:EF:B5:E1
Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
Certificate issuer: /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Certificate serial: 01964F6D406211756DDAA8863D7081DD6A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
Manifest number: 019A
Signing time: Sat 19 Apr 2025 19:01:22 +0000
Manifest this update: Sat 19 Apr 2025 19:01:22 +0000
Manifest next update: Sun 20 Apr 2025 19:01:22 +0000
Files and hashes: 1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: 1fQlLVyq3UoD01vAjAaQSjjbiIcJuqMr7nmUNHjiiso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:40:62:11:75:6d:da:a8:86:3d:70:81:dd:6a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Validity
Not Before: Apr 19 19:01:22 2025 GMT
Not After : Apr 20 19:01:22 2025 GMT
Subject: CN=9ae7c7a93c3d1ebb1fd0713b5ae0de11a7efb5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:9d:f5:aa:fd:90:ed:98:a9:2f:c9:1e:df:
bf:cc:36:fb:ce:3b:44:90:f1:2c:3a:63:b2:81:ac:
b5:5a:98:ad:8a:86:1f:02:ad:49:59:aa:c3:9b:a7:
c2:ab:cf:e2:47:a3:80:6d:a7:26:e7:6e:65:df:e3:
b2:67:a6:c6:35:fb:24:96:0f:83:65:1a:6f:30:4d:
40:7c:76:c5:7e:96:a7:c7:17:a4:ab:86:cc:0e:6f:
b5:ec:94:12:40:5d:69:cc:f3:dd:9c:aa:11:19:7d:
93:20:06:03:94:cf:96:da:75:22:cf:2a:1d:f5:e9:
c9:16:bd:e3:b3:e7:65:b6:a1:99:6e:56:dd:b3:75:
84:b7:2b:04:ef:40:52:b2:ca:82:58:78:4c:15:e0:
c5:df:34:1b:d9:96:08:4c:b8:e4:fe:e6:a3:4e:47:
d6:cb:d1:19:af:bf:20:c6:39:10:51:88:a2:51:f7:
ed:9f:9e:32:23:fc:1d:36:0b:0b:a0:f8:5e:62:43:
32:2d:b3:01:ac:13:69:70:82:8a:a2:15:ac:4a:66:
d1:4a:eb:f6:c2:78:08:de:37:46:ab:9c:25:c1:60:
c2:b7:df:39:7d:54:eb:bc:1f:94:fd:88:90:b1:96:
85:97:1d:de:b5:4b:31:c9:2b:d0:c1:3d:85:ec:b4:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E7:C7:A9:3C:3D:1E:BB:1F:D0:71:3B:5A:E0:DE:11:A7:EF:B5:E1
X509v3 Authority Key Identifier:
keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2e:9b:49:98:59:c6:24:e6:31:76:ca:3d:d1:48:79:54:ae:
d3:7a:21:9a:7c:cb:d5:ac:1b:c4:5d:35:dd:e7:20:d9:5c:ff:
02:44:28:bf:08:e7:0c:40:ac:11:70:84:9b:de:07:38:26:89:
65:e9:de:a6:d7:c8:57:df:56:24:74:de:58:b6:61:31:22:89:
09:f0:da:89:93:c4:33:dd:47:89:e9:b6:c6:7d:70:1f:6a:f4:
85:e8:82:96:51:ee:f7:8f:3f:28:8c:cd:89:4d:c7:2a:89:01:
ab:2c:a4:44:1f:c0:fc:c0:4d:6f:9f:e5:2e:60:44:73:7b:55:
d2:18:fa:96:03:d7:ad:52:36:3a:87:53:a4:d9:2b:4e:ba:5d:
0e:ac:f5:e1:ae:f8:d9:fd:5b:29:08:a6:5b:47:68:3d:88:44:
e6:9c:32:d0:95:f9:45:e4:0b:ab:08:bc:0e:81:0a:e5:77:2a:
c7:c3:c5:a0:5d:ee:2e:2f:1a:84:41:86:de:de:08:21:e9:e6:
df:35:72:24:99:16:3e:f9:bc:91:90:bb:30:8a:74:d1:26:7d:
19:69:d8:43:62:6d:2f:2f:74:ff:1b:60:80:aa:47:88:f3:93:
b5:d2:e4:0b:80:83:ad:16:a5:45:b0:21:60:54:47:21:d7:e4:
89:92:c0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:13:43 2025 by rpki-client