Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier: sjVRuaOTgAGvtoESONhkaKQdjHxUhgm+vNXBwlGNN5M=
Subject key identifier: 9B:32:94:83:43:19:C4:35:35:4C:B8:D8:BF:82:BF:D0:71:65:AA:58
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer: /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial: 01964B8F9A983B123838B783A6D9D904CE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 01:00:24 +0000
Manifest this update: Sat 19 Apr 2025 01:00:24 +0000
Manifest next update: Sun 20 Apr 2025 01:00:24 +0000
Files and hashes: 1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: dMJjqJKYF52zAnHU6r+B0QintovKv0lV0YPuUp9MS9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:8f:9a:98:3b:12:38:38:b7:83:a6:d9:d9:04:ce:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Validity
Not Before: Apr 19 01:00:24 2025 GMT
Not After : Apr 20 01:00:24 2025 GMT
Subject: CN=9b3294834319c435354cb8d8bf82bfd07165aa58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:64:5c:f6:ac:c9:cf:e7:5e:96:56:22:d5:
87:e3:67:81:62:ed:62:cb:23:0f:ca:e7:ca:0a:57:
51:74:54:59:9e:6d:67:0e:62:72:50:18:a2:43:6c:
af:68:4a:a7:00:a6:96:6f:27:19:15:a2:6e:87:94:
0d:8d:54:6e:a1:63:6d:66:be:5c:7f:a6:36:1a:b1:
85:57:7c:65:40:10:3c:94:11:d3:46:51:72:59:6e:
f4:8a:3d:55:8c:51:67:ea:78:39:a5:a6:b9:e8:17:
03:2d:a8:19:a3:18:9c:12:05:b2:73:6e:b5:47:c6:
7b:09:0b:78:a9:be:0c:bc:c8:d6:10:49:35:95:76:
4a:79:9c:64:93:99:df:d6:09:ec:1e:14:8a:57:72:
d7:30:6b:ee:0b:63:39:43:57:97:09:0b:99:28:89:
c9:db:a9:16:c5:5a:95:81:3c:25:03:a5:62:fd:e7:
04:1a:cd:6e:fd:c7:a6:84:a5:0b:3f:65:cb:58:64:
d6:e6:25:fa:af:c6:fa:20:93:25:a0:c3:91:11:b7:
5c:f8:55:29:82:b3:ce:19:45:1e:1c:82:22:74:90:
64:08:95:d5:96:ea:0e:b7:16:ac:0c:34:16:ba:a1:
80:52:16:9e:a3:ea:00:dc:fd:00:75:8a:30:db:58:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:32:94:83:43:19:C4:35:35:4C:B8:D8:BF:82:BF:D0:71:65:AA:58
X509v3 Authority Key Identifier:
keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a7:f3:c0:be:c9:c4:71:b6:35:85:24:ed:ea:e3:43:44:7d:
05:b9:18:3e:fd:29:ed:55:c5:b8:03:be:2d:11:2f:b3:f2:c7:
ff:74:97:5a:15:85:e2:80:06:b3:28:3f:13:ae:37:bd:b9:64:
a3:2c:53:fe:5f:e1:7c:df:c3:a0:01:cf:ac:24:76:49:c5:9c:
6e:09:89:6c:4d:cd:4d:8d:31:b9:71:c0:c8:bf:be:51:95:da:
51:65:c4:f0:af:de:7f:49:7a:e2:8b:88:3a:39:f8:cc:1e:49:
e7:35:77:14:83:91:9c:45:4f:e7:9a:81:75:2a:cf:aa:ac:4e:
3e:6a:2f:b5:90:23:07:cd:4b:9a:37:40:32:89:c4:f5:2c:d2:
84:d2:a7:04:3d:ee:d9:59:f9:91:2a:0c:9c:a5:e7:8f:ec:f4:
18:b7:47:86:b2:15:92:d7:3c:51:fa:bd:e1:99:c3:c3:0a:41:
cd:cb:77:83:23:36:41:4a:e1:85:26:3e:2f:59:40:64:8f:66:
8c:1f:0b:b0:f6:fe:da:63:84:07:8a:20:4b:cc:32:9f:09:85:
49:f4:60:c5:47:b9:fa:22:fd:09:7d:a9:d1:cc:7d:01:5a:bb:
fa:f0:e6:1a:e0:92:fc:38:02:d6:9b:f3:c9:94:7d:1e:db:34:
07:85:28:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:53:54 2025 by rpki-client