Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
File: rnIxk3EEsmkAemyoPH_ZKes59Hc.mft (raw, json)
Hash identifier: /a8tvDpHchI357XoJdulQH92uJKOKCiFFBIx3I5R2pE=
Subject key identifier: 1D:8D:21:21:7E:06:12:96:01:CB:87:68:9D:14:33:C8:B0:AB:D7:A9
Authority key identifier: AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
Certificate issuer: /CN=ae7231937104b269007a6ca83c7fd929eb39f477
Certificate serial: 019651C927D1D6B2C18CBF80D478067A0C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
Manifest number: 148C
Signing time: Sun 20 Apr 2025 06:00:59 +0000
Manifest this update: Sun 20 Apr 2025 06:00:59 +0000
Manifest next update: Mon 21 Apr 2025 06:00:59 +0000
Files and hashes: 1: rnIxk3EEsmkAemyoPH_ZKes59Hc.crl (hash: QADnll9SU+BjRvGD6Ows4B2r/g5h+yGAlT/oTuvTe2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:27:d1:d6:b2:c1:8c:bf:80:d4:78:06:7a:0c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7231937104b269007a6ca83c7fd929eb39f477
Validity
Not Before: Apr 20 06:00:59 2025 GMT
Not After : Apr 21 06:00:59 2025 GMT
Subject: CN=1d8d21217e06129601cb87689d1433c8b0abd7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:f1:9e:1b:fd:80:40:70:65:69:2a:e8:93:
38:25:c4:65:f4:3e:1a:7b:68:0c:61:e4:b8:38:43:
60:17:0e:c5:5e:60:f8:05:d4:0b:1a:ac:08:cc:f4:
a9:72:80:a7:6b:c0:16:ba:bb:4e:8c:d3:e0:13:30:
ee:df:d7:74:67:29:d3:32:28:1e:21:74:f9:d1:31:
fe:cf:2d:72:52:08:6b:18:4d:7f:17:c4:dd:bb:1b:
59:ec:d0:85:a5:1d:3c:7b:03:38:6f:ee:25:05:ac:
d0:5a:b8:47:96:81:a3:1b:72:b3:34:50:d8:d2:05:
49:5d:0a:9e:df:81:61:22:bc:19:ed:76:4a:62:2c:
1a:ea:83:0d:53:84:cc:e3:69:4e:a7:dc:04:b6:7b:
38:aa:a2:6c:5b:56:42:9b:a6:c0:d8:0d:5c:d5:8b:
cd:ba:08:88:86:d5:13:b3:78:37:11:6f:0e:3d:d5:
e2:73:a7:c6:00:4e:78:3a:94:aa:e5:5e:ef:3b:58:
e3:91:40:e3:b0:fc:e5:28:6d:e0:0b:52:a0:ad:f1:
b2:fc:f7:bd:aa:dd:84:5a:d8:66:41:56:1f:6c:c7:
8b:8f:45:b7:9d:cc:cb:97:df:5f:fe:b8:3c:74:44:
e1:3e:41:d9:3d:33:38:e7:01:84:98:e6:48:a7:89:
30:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8D:21:21:7E:06:12:96:01:CB:87:68:9D:14:33:C8:B0:AB:D7:A9
X509v3 Authority Key Identifier:
keyid:AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ed:53:58:3d:0c:52:bf:1b:24:eb:f0:09:e4:7d:4e:e9:9a:
3d:bf:26:19:45:20:80:6f:a0:e6:7d:18:59:53:cf:20:e1:aa:
07:e3:08:8d:99:d7:13:14:cc:05:19:5b:05:be:b5:e9:fd:61:
e5:26:1e:e6:e2:3f:a4:64:82:aa:8e:6c:9b:6f:63:0e:ca:fe:
fa:8c:e4:8a:36:cc:cd:b1:03:f8:a6:5a:63:c0:2b:0e:a7:17:
0f:7d:87:64:9d:8c:ab:89:22:39:84:83:4e:d9:52:0e:5d:73:
b3:58:15:ce:d2:26:d8:45:f3:5f:fe:b3:08:ec:95:07:bb:33:
82:bf:5a:bf:ec:6b:e3:bd:70:48:86:7e:36:b7:ed:d2:b1:69:
26:a0:13:e3:1c:63:c3:b8:92:5e:21:78:c8:7c:42:eb:2d:d9:
bb:d7:64:7c:11:c8:87:63:28:bb:26:59:62:4d:8c:1b:24:af:
60:60:b1:7f:cc:a4:b9:81:3e:cb:6a:6d:e6:e1:1c:e6:0d:5d:
66:48:e4:53:72:ef:c1:00:10:2a:f2:28:f7:11:8c:76:ed:05:
16:46:01:8e:b6:9c:59:1b:da:82:7d:ea:39:89:ad:6c:d2:26:
33:0f:1f:fa:27:cb:bf:33:20:9c:d3:ab:dc:7f:93:50:dc:de:
23:05:56:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:40 2025 by rpki-client