Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
File: v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft (raw, json)
Hash identifier: K5XtOBuTS+CS1LB74jCku8bDIke3ARMFWDvv8Kjwj2E=
Subject key identifier: A8:60:DA:D9:40:C4:7E:C9:69:8F:4F:F1:01:FA:08:52:C7:89:0E:B4
Authority key identifier: BF:42:40:9A:1F:8C:1C:EE:59:74:DB:8A:42:E1:EB:67:2E:E8:34:36
Certificate issuer: /CN=bf42409a1f8c1cee5974db8a42e1eb672ee83436
Certificate serial: 019659149C91216A811554B358A9F78EF08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
Manifest number: 0B9F
Signing time: Mon 21 Apr 2025 16:00:44 +0000
Manifest this update: Mon 21 Apr 2025 16:00:44 +0000
Manifest next update: Tue 22 Apr 2025 16:00:44 +0000
Files and hashes: 1: v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl (hash: NFHm4O/t+FchYomPm91RG/kYJ1+aauUqENh8QgdncLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:9c:91:21:6a:81:15:54:b3:58:a9:f7:8e:f0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf42409a1f8c1cee5974db8a42e1eb672ee83436
Validity
Not Before: Apr 21 16:00:44 2025 GMT
Not After : Apr 22 16:00:44 2025 GMT
Subject: CN=a860dad940c47ec9698f4ff101fa0852c7890eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8f:f8:80:b2:bd:70:8f:a0:8f:3b:e3:4f:cf:
b4:ed:7a:e2:7e:6e:c6:b9:a9:73:59:4c:60:fe:30:
4a:09:7d:9a:ae:a0:c7:b5:b9:98:35:16:98:35:3e:
64:c4:91:ff:b8:74:b4:a8:77:82:23:b8:43:19:51:
72:88:d0:97:6a:44:1b:60:22:99:82:ce:e9:1d:4e:
22:32:29:bb:0d:9e:cf:d6:c9:c1:06:39:4c:17:5f:
a2:58:57:c1:7e:02:8e:f6:e6:17:30:92:de:19:6a:
30:97:e7:76:d0:45:0b:3e:52:e5:08:cd:70:43:c3:
35:d7:8e:55:90:6d:d2:5a:5b:a0:14:1c:ea:c6:72:
63:6d:17:a6:52:6b:c6:45:a5:26:a5:b9:3d:86:1b:
60:8e:5f:84:4e:55:19:e7:d5:39:e4:d5:eb:f7:70:
5f:1c:3a:5c:32:33:cc:32:39:2c:47:5f:e7:47:34:
e5:6d:f8:02:9a:e6:51:45:1b:02:24:c6:aa:08:07:
1f:d6:dc:7d:66:f2:d5:d3:d3:fd:47:a1:ae:c0:e3:
ac:f9:39:63:35:c4:e2:a7:1f:cb:45:b2:8c:f8:ee:
5e:66:37:25:71:92:00:4b:38:b8:34:22:a0:4f:fb:
17:96:e0:13:5c:7d:e0:26:17:15:82:fd:63:53:30:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:60:DA:D9:40:C4:7E:C9:69:8F:4F:F1:01:FA:08:52:C7:89:0E:B4
X509v3 Authority Key Identifier:
keyid:BF:42:40:9A:1F:8C:1C:EE:59:74:DB:8A:42:E1:EB:67:2E:E8:34:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:bf:05:8f:29:72:49:f5:5a:e8:2c:c4:98:34:c2:a2:f4:34:
76:ed:45:61:67:fb:05:6f:d7:24:dc:61:bc:47:1b:63:11:b2:
3a:48:97:ba:18:40:ec:e5:97:b2:e9:f9:70:47:ae:a0:08:f7:
4b:45:9a:de:1c:02:5d:04:58:53:2c:a7:7d:ca:75:63:22:a6:
5d:c0:67:0d:43:f8:e8:91:06:62:16:f9:20:f3:5e:4b:ae:77:
09:6c:c4:1f:79:e1:63:4f:f4:e4:18:02:35:75:6f:f3:f9:0a:
7f:26:de:10:39:7b:2f:ec:c9:a2:bc:9f:b8:43:a0:95:8d:ed:
da:e4:1e:60:a7:3a:c8:53:69:4b:15:90:af:2f:2b:ba:ea:43:
83:b9:40:4e:11:d2:7e:8a:ec:19:92:32:bd:0f:2d:13:54:95:
45:97:32:7d:56:a7:8a:08:bd:13:6f:ce:0d:8e:38:ae:13:7b:
4d:2b:79:99:35:8e:75:b9:3a:a6:82:9d:c2:4f:91:a3:2e:67:
ac:e3:02:88:d7:22:ff:cc:e5:df:ae:ce:78:67:53:99:78:d0:
66:57:3c:78:70:43:e0:72:ab:37:50:66:21:99:cd:00:da:bd:
74:29:51:04:46:91:49:4e:0f:fe:f1:98:f6:f6:2e:ea:68:a5:
c0:c3:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:21:01 2025 by rpki-client