Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
File: T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json)
Hash identifier: nVq9Tkqsv+ZmpOI5VT89HWKGc53lLfO33H8sk7MEL1c=
Subject key identifier: 00:5F:0C:8E:C9:18:23:59:88:25:44:23:43:05:2B:CE:D7:F1:9C:BC
Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
Certificate issuer: /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Certificate serial: 019650486FD3FA23EE32A3456A7515ECF2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
Manifest number: 03EA
Signing time: Sat 19 Apr 2025 23:00:46 +0000
Manifest this update: Sat 19 Apr 2025 23:00:46 +0000
Manifest next update: Sun 20 Apr 2025 23:00:46 +0000
Files and hashes: 1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: 7gquWzJUjwmg0HLza4ncnqI0jOBa2Cz5e24920ooRGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:6f:d3:fa:23:ee:32:a3:45:6a:75:15:ec:f2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Validity
Not Before: Apr 19 23:00:46 2025 GMT
Not After : Apr 20 23:00:46 2025 GMT
Subject: CN=005f0c8ec91823598825442343052bced7f19cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2f:e9:36:59:50:7a:90:41:1b:57:56:65:e4:
a9:df:ab:15:d9:3d:90:e2:0a:4d:f2:07:25:14:2d:
e7:a4:59:d2:02:3d:41:24:66:8d:d1:5a:2f:96:a3:
d6:dd:f9:f4:3e:4c:26:c7:78:b5:77:03:93:92:97:
38:9c:99:8d:82:7e:c3:21:63:d2:73:29:27:95:65:
85:70:cf:78:58:99:75:86:e1:19:6d:ad:5d:b0:5b:
0e:de:e1:54:b3:f8:97:7e:1d:3d:92:e4:cc:4b:41:
ff:36:1e:4e:b5:da:77:f9:a0:6c:b0:ba:f7:0a:d6:
0f:00:db:2a:98:d9:03:0c:14:b0:6a:98:fa:e3:46:
02:41:ac:43:bd:d9:3b:51:a5:34:ee:63:96:6a:90:
4a:ad:9b:0a:31:95:a8:a2:cd:bc:c8:25:f4:5d:fa:
2b:4b:d6:c8:c9:49:10:02:2f:82:fe:c4:73:f0:d4:
19:eb:09:f2:ca:f6:ec:29:fd:a5:32:68:9e:ee:f0:
3f:e3:80:29:7c:af:b5:6d:b4:a3:f8:ff:f6:75:a4:
eb:57:b3:3a:dc:21:16:d2:5d:59:c2:b5:63:6b:b8:
9c:d4:80:4f:19:7e:e0:66:b0:fd:74:e6:5e:a3:51:
28:6d:58:59:4d:a9:9c:a4:93:33:49:43:2b:72:a7:
12:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5F:0C:8E:C9:18:23:59:88:25:44:23:43:05:2B:CE:D7:F1:9C:BC
X509v3 Authority Key Identifier:
keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:aa:26:58:0e:25:b1:48:4e:30:e6:69:79:fc:4c:53:7d:ca:
2d:49:2f:c9:96:8c:81:9b:fc:9a:27:51:8e:62:82:8e:1f:96:
5a:ca:34:b3:7f:23:06:87:fe:2f:83:3f:90:2a:1d:be:73:82:
56:e2:50:50:8b:c9:0b:b2:95:be:3e:75:b1:39:35:43:bb:51:
24:42:f8:57:59:8a:d8:a9:10:d5:45:71:59:ec:67:6b:61:e3:
fa:5d:72:ab:70:33:83:c0:16:30:20:c1:09:2c:18:cc:44:73:
41:d9:fb:90:f0:4d:74:bd:ee:33:26:70:3c:d7:c5:e4:ce:57:
0b:af:91:5c:f8:3c:04:8b:0a:d9:f1:64:18:f4:ae:ed:37:7e:
e5:ea:4d:d0:9e:08:52:0b:94:34:e4:5e:c6:70:61:fc:00:e3:
16:3d:e3:a4:2a:e4:d1:f2:fe:fe:ea:c5:3e:6b:6a:e6:8d:12:
ae:fd:3f:8d:a3:7f:d8:f9:ef:17:e6:1e:cf:d2:fc:89:8f:03:
57:4e:c8:96:ff:cd:56:a8:fc:35:d0:a8:36:d4:25:1f:5b:54:
94:89:7a:c0:ea:d6:99:97:31:74:61:db:51:46:32:96:70:f8:
7c:bd:42:43:36:ac:b9:94:37:c4:f2:73:05:42:4a:c7:45:f6:
25:65:99:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:34:21 2025 by rpki-client