Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
File: 9V4Fkwjkaz074E0x_V4Q9U80OQw.mft (raw, json)
Hash identifier: Y+42F22EQpbFAm3+vL1+9gbJXO/J63a+HsycRj/uewU=
Subject key identifier: 24:1A:CE:A4:C1:F2:10:91:82:A3:B0:C7:7A:6C:6B:CC:9A:06:18:AF
Authority key identifier: F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C
Certificate issuer: /CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
Certificate serial: 019657CB0CC4724E5A02CFDE4755197C9C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
Manifest number: 045B
Signing time: Mon 21 Apr 2025 10:00:46 +0000
Manifest this update: Mon 21 Apr 2025 10:00:46 +0000
Manifest next update: Tue 22 Apr 2025 10:00:46 +0000
Files and hashes: 1: 9V4Fkwjkaz074E0x_V4Q9U80OQw.crl (hash: jlcr4SdjnCOJTmOTOuPVLmBLP8LOishV3oF/gCr41bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:0c:c4:72:4e:5a:02:cf:de:47:55:19:7c:9c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
Validity
Not Before: Apr 21 10:00:46 2025 GMT
Not After : Apr 22 10:00:46 2025 GMT
Subject: CN=241acea4c1f2109182a3b0c77a6c6bcc9a0618af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:b4:1e:89:43:e4:78:e2:37:cb:c9:fa:32:
8c:2e:01:6c:c3:a1:b4:fb:e3:76:97:5b:79:77:c1:
32:ff:2a:5e:2c:30:a0:e2:ec:b4:64:9a:88:c7:7a:
07:5c:aa:46:57:20:e2:9e:d5:ff:1c:46:70:5c:d7:
ee:7f:29:93:ab:3d:33:fd:6a:03:06:ba:b9:9d:76:
ae:6c:a9:4d:c7:e9:53:1e:28:2f:21:38:5e:59:67:
b3:7e:1d:06:c3:85:46:10:bb:44:5e:5a:b9:1c:4e:
0b:d3:82:f9:b4:2f:7b:ce:2b:c1:93:2e:96:2f:9c:
d7:10:87:64:73:8e:5e:2d:49:a6:fc:d3:4a:59:27:
43:e5:f3:5e:8e:94:6e:17:0f:31:a4:cb:d5:86:e3:
4c:9a:7e:f3:8c:66:c9:49:11:1e:eb:ff:9d:70:fb:
44:1d:18:db:b4:cb:39:ab:9e:ba:c8:43:39:63:ad:
5f:a9:85:e4:bc:ba:c3:fa:ae:1f:58:93:23:5d:90:
b7:aa:de:3d:5c:fc:54:bf:60:d4:b0:cf:79:19:e3:
b2:0c:39:5c:9f:75:4a:58:4f:69:9f:43:12:35:fa:
b8:6e:b8:cb:77:dc:bc:87:f2:fb:ba:bf:e1:14:00:
8e:e3:96:52:a2:c4:b7:00:70:c6:f4:2f:6d:13:1b:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1A:CE:A4:C1:F2:10:91:82:A3:B0:C7:7A:6C:6B:CC:9A:06:18:AF
X509v3 Authority Key Identifier:
keyid:F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:90:ef:10:f0:3d:5f:4e:ca:93:4b:65:3a:b0:dc:fc:13:46:
35:40:7b:17:33:5f:74:4a:f3:d9:bb:7a:6c:ac:29:98:2d:13:
94:28:3f:3d:2c:2b:b4:f1:ef:b8:95:49:45:e1:88:74:17:dd:
b6:1a:84:7f:1f:0e:42:94:1d:76:c1:d0:39:03:f1:7c:35:5e:
5b:43:ff:d7:20:ab:68:62:93:3b:15:92:26:69:19:0d:5d:f9:
08:a9:2f:80:37:45:e7:ca:3f:68:f3:a0:11:33:a5:fd:74:29:
7a:b3:98:d5:78:f2:91:db:5c:9f:0a:26:2c:7d:0d:b1:9b:22:
77:26:d5:cb:49:ed:55:a6:f6:8c:fc:14:a4:b4:99:a5:ba:73:
e3:99:82:47:a0:cb:7d:07:7c:68:7a:d3:ac:4a:64:3e:15:33:
ed:18:a0:d9:78:6f:64:84:95:48:c4:2b:24:33:3c:b4:a7:f1:
f7:25:b7:5b:17:cc:7c:5f:9a:2d:bc:20:9c:98:84:f7:d2:c6:
a7:e6:4e:6d:15:42:0c:03:3c:6a:76:f5:b9:13:b6:54:28:8c:
2a:51:06:df:f4:1b:7b:57:ba:49:d3:40:87:db:13:b7:9a:95:
68:f1:e0:bc:b5:5f:9f:79:55:38:db:96:b2:a6:49:c0:4d:e8:
90:b1:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:37:14 2025 by rpki-client