Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
File: 0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json)
Hash identifier: S7YnKb+/WJjSKQBF6rkbSOepkHqItddsKOA64UAdAcA=
Subject key identifier: F5:29:04:7D:9E:A4:86:70:40:17:5F:26:00:AC:05:22:66:DB:78:B6
Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
Certificate issuer: /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Certificate serial: 0196428D083AEB5628221FA4310ED2773D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
Manifest number: 14EE
Signing time: Thu 17 Apr 2025 07:01:00 +0000
Manifest this update: Thu 17 Apr 2025 07:01:00 +0000
Manifest next update: Fri 18 Apr 2025 07:01:00 +0000
Files and hashes: 1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: AsEgOjWZlZIT1EcZPrFRyuuQrYnsQ6rpgjK926f1NI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:8d:08:3a:eb:56:28:22:1f:a4:31:0e:d2:77:3d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Validity
Not Before: Apr 17 07:01:00 2025 GMT
Not After : Apr 18 07:01:00 2025 GMT
Subject: CN=f529047d9ea4867040175f2600ac052266db78b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:89:04:2a:77:a8:46:49:1e:c4:b8:d4:85:
14:cc:d1:98:d4:e6:a8:79:23:75:83:c7:8c:74:c0:
89:29:a7:19:cb:64:be:2f:55:ba:c7:66:8e:c3:7b:
61:ba:77:78:16:6c:0b:bf:d6:4a:49:3d:79:09:2a:
2e:da:96:0d:52:68:ac:c4:82:b6:9e:6d:e9:8f:ea:
97:93:87:53:86:73:d2:41:24:5e:bd:6a:37:64:e9:
cc:b6:ed:a2:90:06:97:53:9b:06:d7:f2:64:87:ca:
66:0e:5e:ea:c1:72:87:df:56:07:17:ed:24:0c:f8:
e2:a6:2c:ce:f0:bd:07:f4:f0:f3:a0:26:38:8e:28:
69:b3:c6:ff:9a:7a:12:d7:9a:bc:55:7d:e9:ea:cb:
74:b0:34:6f:b9:e7:3e:1e:42:dd:d7:47:f6:17:8c:
1b:ff:59:b1:43:98:60:f5:01:72:c1:50:60:bb:f9:
d5:3a:af:a8:cb:e7:e6:97:06:a5:e2:3e:96:49:63:
68:94:9b:c3:62:7c:47:c5:74:9f:a5:3f:46:ab:f7:
f9:44:65:48:d1:6d:78:f1:28:5e:be:90:c1:44:3a:
9a:6d:ba:d6:ad:16:1a:5d:16:84:e6:67:9a:83:8a:
bb:0f:bc:54:8a:6a:5d:a9:a6:02:50:eb:61:a8:29:
0e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:29:04:7D:9E:A4:86:70:40:17:5F:26:00:AC:05:22:66:DB:78:B6
X509v3 Authority Key Identifier:
keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5d:22:4e:85:aa:13:59:d1:d4:64:4f:db:07:a5:22:39:0f:
21:7c:30:64:21:f0:0c:e1:00:59:b0:9d:ff:d7:05:fa:e1:aa:
cb:65:93:d5:0b:7c:0d:3a:29:bb:79:ec:33:81:2f:e3:1a:fc:
9f:5f:de:1c:f5:64:52:f2:33:91:2e:78:07:23:a2:07:39:b3:
00:80:df:c1:c4:36:31:34:8c:e4:d4:03:fe:2c:76:2f:16:5a:
13:72:e2:95:6b:7e:88:af:e3:f6:a2:d8:ad:7a:58:36:24:b3:
0b:a9:34:8e:bc:c8:8c:73:d7:1f:36:f5:81:3c:d1:9a:bc:27:
90:0d:bf:63:85:19:22:58:68:96:2e:f0:10:0d:ea:e6:fa:1d:
9b:2e:1d:52:cb:e7:a4:87:28:bd:1d:46:09:e1:ab:6f:3d:bb:
4d:48:dc:19:5a:be:0c:15:73:39:53:e5:93:1b:04:e7:87:b6:
56:cc:28:f1:93:29:4c:54:6e:05:67:b7:63:c5:7a:9c:62:21:
08:70:c8:de:9e:f6:e9:22:8f:1f:c2:01:aa:b9:d3:c1:54:21:
ff:c6:1d:37:aa:3b:f7:ec:12:76:21:17:14:f3:26:c7:aa:8d:
0a:b7:e3:32:73:70:f5:87:ce:30:4d:5e:4b:9a:ba:cb:4f:a0:
c2:a2:18:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:23:51 2025 by rpki-client