Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/488f2f-c3f3-4692-b1d8-23532b9d6766/1/1vrDRWGv3CP27_aJSiK9Nr5ge-M.mft
File: 1vrDRWGv3CP27_aJSiK9Nr5ge-M.mft (raw, json)
Hash identifier: hH5eeux8VVcRfQGkw7LZwNICgAkE+FkuKvFHXAvJAs4=
Subject key identifier: E4:27:25:5B:A9:A2:BD:21:2D:42:5D:67:53:15:D5:9B:23:6B:D9:9A
Authority key identifier: D6:FA:C3:45:61:AF:DC:23:F6:EF:F6:89:4A:22:BD:36:BE:60:7B:E3
Certificate issuer: /CN=d6fac34561afdc23f6eff6894a22bd36be607be3
Certificate serial: 01960A55D9BC57D1EA90E99C288B058C6087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDRWGv3CP27_aJSiK9Nr5ge-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/488f2f-c3f3-4692-b1d8-23532b9d6766/1/1vrDRWGv3CP27_aJSiK9Nr5ge-M.mft
Manifest number: 07C9
Signing time: Sun 06 Apr 2025 09:02:00 +0000
Manifest this update: Sun 06 Apr 2025 09:02:00 +0000
Manifest next update: Mon 07 Apr 2025 09:02:00 +0000
Files and hashes: 1: 1vrDRWGv3CP27_aJSiK9Nr5ge-M.crl (hash: +nMHBUlksT58yFiM/1iiyBTTwOoxwlcjAp0yeHwm9Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/488f2f-c3f3-4692-b1d8-23532b9d6766/1/1vrDRWGv3CP27_aJSiK9Nr5ge-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/488f2f-c3f3-4692-b1d8-23532b9d6766/1/1vrDRWGv3CP27_aJSiK9Nr5ge-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vrDRWGv3CP27_aJSiK9Nr5ge-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:55:d9:bc:57:d1:ea:90:e9:9c:28:8b:05:8c:60:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fac34561afdc23f6eff6894a22bd36be607be3
Validity
Not Before: Apr 6 09:02:00 2025 GMT
Not After : Apr 7 09:02:00 2025 GMT
Subject: CN=e427255ba9a2bd212d425d675315d59b236bd99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:b0:60:ca:9f:06:8d:5f:8f:19:c2:d0:f9:
4a:3e:b0:9a:67:86:2c:f3:6e:45:88:e4:3f:68:d4:
89:90:a5:74:72:32:f0:aa:f1:c6:c2:62:52:65:65:
45:fa:cb:c6:9e:d8:7a:f6:f6:9f:8d:88:8a:3b:c2:
20:65:1e:ce:7f:31:a2:66:25:d8:f5:48:62:82:8e:
47:e9:86:b3:0d:8d:f7:7e:87:bc:0b:db:90:cb:eb:
82:ac:3d:d8:9e:3f:a3:70:ce:ea:d1:cc:76:c0:fe:
3c:a4:07:92:a0:c6:04:30:9e:5e:c3:51:8e:50:31:
f3:fa:1b:b2:81:72:7a:42:5b:bb:6d:d2:d6:3d:60:
83:e7:19:3b:e1:f6:c3:cf:a9:39:98:fa:30:f0:33:
fc:29:48:92:6c:e5:8b:7f:6e:86:94:84:0a:e1:35:
a9:fc:3a:2d:e1:03:a1:57:c0:4b:f9:c8:6f:eb:10:
15:a0:2e:cd:0e:d6:d3:c5:04:9d:b4:9f:8f:a0:3f:
84:d7:4c:4d:0b:51:64:ee:6e:81:95:20:99:78:0a:
0a:db:33:6b:95:45:7b:46:a1:36:8f:aa:38:7e:52:
0e:4e:24:39:ec:3e:78:be:02:c2:78:a7:4f:23:a6:
a3:2b:3e:ad:da:8f:1a:46:11:13:d2:5e:59:d9:68:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:27:25:5B:A9:A2:BD:21:2D:42:5D:67:53:15:D5:9B:23:6B:D9:9A
X509v3 Authority Key Identifier:
keyid:D6:FA:C3:45:61:AF:DC:23:F6:EF:F6:89:4A:22:BD:36:BE:60:7B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDRWGv3CP27_aJSiK9Nr5ge-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/488f2f-c3f3-4692-b1d8-23532b9d6766/1/1vrDRWGv3CP27_aJSiK9Nr5ge-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/488f2f-c3f3-4692-b1d8-23532b9d6766/1/1vrDRWGv3CP27_aJSiK9Nr5ge-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:98:b8:a2:d3:8e:b2:da:17:a7:f9:e6:0a:3c:df:bf:09:e0:
33:c8:1f:97:6a:0c:75:3e:7f:bc:4e:c7:63:8a:ea:f8:35:f2:
53:31:c7:92:3f:e9:9c:8d:e2:14:74:6d:7c:05:a0:b8:e4:78:
a6:a3:e1:ee:32:3a:81:2b:02:34:87:25:85:a4:18:aa:8f:10:
c3:78:9b:56:77:8f:ba:86:32:ad:fe:dc:c9:4b:ce:bb:3c:fa:
68:4e:4a:cf:63:5f:41:d9:6b:6f:25:75:87:38:c0:e3:40:ff:
ed:d1:98:f2:16:3f:4a:3f:af:79:e9:0e:14:30:e6:ab:1e:2d:
b4:83:8e:8f:d0:32:1d:68:81:83:00:fe:42:40:27:00:20:62:
fd:00:ee:a0:7e:4c:42:56:39:c8:f6:44:2d:17:b8:93:29:4d:
b2:4b:b2:21:7b:f0:bf:ab:63:3d:d2:7e:b8:d4:0d:a0:b1:be:
77:ef:13:10:53:01:f7:c1:e6:a7:f2:4c:ab:cc:88:fe:0b:86:
19:e9:83:b4:9e:41:c7:34:85:a3:d7:77:4b:bc:12:19:f3:61:
fb:54:db:21:20:cc:ee:a0:b4:ac:4c:aa:4a:9f:63:59:97:3c:
4d:3d:bc:46:76:00:14:39:d4:75:22:2e:1d:75:b6:eb:be:d5:
43:88:50:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:31:43 2025 by rpki-client