Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
File: 9GRgXq8UuLXSjujQdsHjc491glM.mft (raw, json)
Hash identifier: c5opo/kHTxtMY2lRQX0scqhaz8ht+IBKbohzf+bpFSU=
Subject key identifier: 54:09:3D:21:E1:69:1B:0B:D5:48:D3:97:43:53:C4:4B:D4:0B:A0:B3
Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
Certificate issuer: /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Certificate serial: 01963FFA58CDD586564695D5CA1392974C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
Manifest number: 0FB1
Signing time: Wed 16 Apr 2025 19:01:33 +0000
Manifest this update: Wed 16 Apr 2025 19:01:33 +0000
Manifest next update: Thu 17 Apr 2025 19:01:33 +0000
Files and hashes: 1: 9GRgXq8UuLXSjujQdsHjc491glM.crl (hash: FshZKbNpAHGoIC7pNyBT7NeRJ1ezfD9QRgS+n4FPeu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:fa:58:cd:d5:86:56:46:95:d5:ca:13:92:97:4c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Validity
Not Before: Apr 16 19:01:33 2025 GMT
Not After : Apr 17 19:01:33 2025 GMT
Subject: CN=54093d21e1691b0bd548d3974353c44bd40ba0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:56:1c:7b:99:43:d5:9f:c6:93:1d:28:18:
df:91:23:fb:84:3c:47:d4:7f:0f:dc:78:85:1a:16:
07:7d:15:65:e8:da:5d:91:48:ce:0e:42:89:61:ef:
17:5a:b3:97:1c:39:a3:bd:7b:99:08:81:09:90:93:
94:c3:75:cc:4e:71:3d:41:c2:53:74:01:c2:60:b3:
bb:4c:a2:f7:ec:c4:c5:7a:79:41:e4:1a:68:e0:7d:
b5:30:13:78:88:a6:4e:83:2b:10:2b:c7:a7:d1:ee:
66:a4:88:46:51:3f:63:51:6f:d3:ed:2d:f1:4b:d2:
de:e3:36:47:e6:99:db:0e:c8:a9:f6:b3:fa:88:00:
d6:64:31:42:99:42:15:3e:63:d9:e6:c2:ba:48:54:
a6:60:b5:f2:85:4b:ce:e9:16:4f:10:75:2d:09:d1:
c8:74:3b:78:2c:e3:60:ce:d9:59:cd:ed:d1:59:48:
3f:b5:4f:f4:b5:0f:83:82:97:a6:03:0a:e1:26:b6:
f8:05:9a:1d:54:fd:31:77:4c:ec:e1:96:90:7b:0d:
89:52:3f:a1:c4:a0:fe:c5:af:65:2a:09:bf:ab:84:
5c:d3:ce:9c:e0:bb:08:fd:55:00:92:f8:0d:c7:17:
c6:92:62:e0:e3:f2:7a:e0:4d:2b:f5:88:bf:8e:05:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:09:3D:21:E1:69:1B:0B:D5:48:D3:97:43:53:C4:4B:D4:0B:A0:B3
X509v3 Authority Key Identifier:
keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ec:93:87:c4:89:50:1a:5d:84:71:91:b4:80:01:f7:26:55:
de:25:30:af:24:58:33:5f:58:3c:e8:47:bf:db:cb:a4:59:78:
eb:26:c4:c7:4c:6c:f8:b3:02:d6:b4:bd:48:2b:a8:bb:fd:ae:
72:23:b6:07:5d:e9:12:28:59:ba:e5:7f:8e:28:85:b3:68:0a:
67:2e:85:1c:73:4d:c8:b0:14:32:05:f4:cb:33:72:55:b7:49:
53:c1:54:34:60:6c:bb:52:87:47:c3:55:e5:4d:23:20:2f:1c:
52:fe:2c:a0:d1:88:cc:32:d9:df:b8:8f:2c:01:d7:f9:c6:7d:
fc:f8:df:59:e2:eb:92:ff:ff:ee:1b:5a:d4:e1:c4:06:98:ff:
77:4a:0f:8d:b9:5e:3a:4c:f8:62:08:3e:b5:02:dc:e8:c8:0e:
be:80:6b:e8:b1:c2:51:3e:d3:56:3d:d3:e9:51:99:ee:ad:cd:
01:b2:a6:8c:c6:bb:dc:42:75:a0:42:5b:b4:dc:ad:55:25:0a:
43:1c:d1:56:df:4a:b8:05:78:8a:55:d3:3b:e1:19:aa:58:fe:
b1:a7:6e:6b:6b:a2:9a:a5:1f:af:88:73:88:17:c2:90:b1:34:
ae:e1:37:64:5c:21:26:a6:ef:41:fa:18:b9:5f:5b:86:9b:a2:
1f:9f:bd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:39:49 2025 by rpki-client