Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
File: v5r7gj8fivhy55Pye2St74zU3Bs.mft (raw, json)
Hash identifier: hkki7LQvBStNupeplMmggE7RP6yISKzJL8u04P3NgV8=
Subject key identifier: B9:52:D3:DE:67:8C:C6:22:95:6D:FF:60:48:97:EC:E6:31:0F:8D:EF
Authority key identifier: BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
Certificate issuer: /CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Certificate serial: 019644E88576E75D2643E2EA005108FD96E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
Manifest number: 02B2
Signing time: Thu 17 Apr 2025 18:00:11 +0000
Manifest this update: Thu 17 Apr 2025 18:00:11 +0000
Manifest next update: Fri 18 Apr 2025 18:00:11 +0000
Files and hashes: 1: v5r7gj8fivhy55Pye2St74zU3Bs.crl (hash: e+gPGH3dRs5XWB/RuUYmzL7vQeIGQMVlafm1ILy/ljQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:85:76:e7:5d:26:43:e2:ea:00:51:08:fd:96:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Validity
Not Before: Apr 17 18:00:11 2025 GMT
Not After : Apr 18 18:00:11 2025 GMT
Subject: CN=b952d3de678cc622956dff604897ece6310f8def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:08:e9:5d:cd:74:be:69:19:8a:ea:fd:fa:
aa:e6:d2:42:23:f3:d4:10:51:86:37:02:9c:e2:02:
dc:9b:d9:f2:46:0e:c2:2e:a1:47:56:67:6a:12:99:
7b:ff:6a:1c:c7:25:06:9e:d6:46:74:15:ac:66:d9:
b0:01:b5:4d:66:e3:99:41:ba:5b:4e:4c:f1:15:60:
e9:b2:2e:0f:bc:9d:a9:dc:76:07:5b:19:24:75:a7:
cd:3f:4e:f7:c2:33:37:89:92:cd:78:26:78:47:37:
1f:83:4f:b0:7e:6b:e3:94:02:c9:55:fc:79:7b:9a:
e4:32:31:9e:e2:1d:c2:2d:73:08:06:db:65:db:b8:
2b:0a:26:da:85:90:81:d2:10:e5:a3:a2:5c:3a:b4:
4f:f9:04:30:33:fd:bd:f2:09:37:c4:44:19:c6:af:
ee:57:15:69:f9:f4:2b:9e:ec:eb:10:e8:a0:d0:2b:
2f:de:02:a5:23:d4:26:30:f2:a9:20:d1:9e:05:8c:
7c:7f:d9:68:7d:8c:5b:e3:80:f9:77:9f:ae:42:2b:
14:4d:ea:ea:3d:a9:87:08:88:d9:3d:f0:1b:d4:0f:
47:cc:06:08:08:d6:25:de:d8:23:a4:d0:2a:cd:c0:
3b:5f:d0:5d:af:83:eb:c9:a3:b1:c5:a0:9a:b1:12:
9b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:52:D3:DE:67:8C:C6:22:95:6D:FF:60:48:97:EC:E6:31:0F:8D:EF
X509v3 Authority Key Identifier:
keyid:BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:47:89:c7:11:fe:a7:0b:f2:49:46:d2:e5:95:fb:88:14:cb:
ff:c5:cc:ad:52:31:85:64:ec:cb:03:0c:67:fa:96:e1:da:e8:
dc:d7:5c:4e:e9:38:71:aa:32:8f:15:2c:23:6c:a5:45:9a:a2:
1c:3f:f7:e1:21:b4:e1:cd:a4:58:44:6c:9f:56:5a:63:f8:52:
22:3f:f0:1a:15:a6:da:fd:83:34:e3:6f:75:83:87:89:1d:d9:
a8:c8:26:34:e7:30:4f:a9:cf:67:d3:2a:9c:d6:3e:bf:fa:06:
f8:71:6a:be:5d:31:1f:97:87:c3:b0:80:cd:13:46:ad:29:4b:
73:31:6b:76:24:8e:bd:5c:b6:20:f2:40:ea:c6:e1:97:b9:7f:
f2:17:91:e7:dd:d5:85:cf:80:c2:e6:d7:88:2e:64:5e:49:48:
b0:2a:69:aa:97:33:5e:b9:1f:34:2d:06:a8:76:ce:66:08:d7:
81:6d:cd:a3:80:3f:a8:a4:18:fc:e7:62:db:ad:97:98:18:f1:
69:88:8f:39:43:ff:b9:e1:56:c9:88:b1:84:21:7f:48:7d:e7:
b2:2d:c2:89:e9:c7:5d:ef:3c:cb:9e:8f:c1:4b:05:1e:ec:be:
a2:e4:86:6a:98:7f:96:19:5f:66:18:e9:34:64:36:70:fa:0b:
6e:c6:82:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:47:27 2025 by rpki-client