Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json)
Hash identifier: GQGaXb/IGMO4iEJtHomfuGyonJaN1cRjJswDgdJSd6Y=
Subject key identifier: E1:E9:DF:74:3C:A1:BE:A4:80:9F:80:BD:D5:DC:77:A0:1E:02:F4:3D
Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
Certificate issuer: /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Certificate serial: 01958CCE43A211057C5868A12A87F9971B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
Manifest number: 0220
Signing time: Thu 13 Mar 2025 00:01:22 +0000
Manifest this update: Thu 13 Mar 2025 00:01:22 +0000
Manifest next update: Fri 14 Mar 2025 00:01:22 +0000
Files and hashes: 1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: vR4NF3JJzjz+xyA2afSaa8zimomDN2GTy19h2j7PYCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:43:a2:11:05:7c:58:68:a1:2a:87:f9:97:1b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Validity
Not Before: Mar 13 00:01:22 2025 GMT
Not After : Mar 14 00:01:22 2025 GMT
Subject: CN=e1e9df743ca1bea4809f80bdd5dc77a01e02f43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:cf:ef:74:2d:34:63:df:7e:41:fa:1a:54:
6f:36:e5:3f:0b:22:70:a0:e9:c6:ce:b4:ec:d8:46:
b6:a8:1f:a5:c3:99:1c:45:c2:89:f6:b5:c2:2b:7a:
d2:d5:c1:8a:db:67:5f:80:35:ef:7a:bc:71:cc:e9:
44:0f:40:90:71:8b:92:56:4e:b1:c0:3d:47:a0:6f:
4e:07:ca:a4:65:5f:0d:c7:f9:06:89:37:07:50:57:
78:2b:4c:c2:c0:12:78:2f:fb:f0:db:d1:c8:70:cc:
bb:b3:b0:75:54:b7:fe:37:b2:31:d5:cf:03:10:76:
70:81:fa:bb:f5:f0:59:f0:04:15:39:2c:d1:c2:4d:
0a:23:07:8b:d4:55:c0:e1:0d:d5:b7:1d:12:73:d3:
9b:95:a2:9f:59:2c:0b:e4:82:08:18:66:96:19:35:
bd:09:13:75:72:e9:15:fa:ca:5c:42:6c:45:15:e9:
7b:60:84:96:56:5a:67:ad:fc:7f:12:74:77:be:01:
df:7d:93:d3:b6:84:40:74:6c:22:4b:ee:3c:92:8f:
c5:b4:e7:2e:4a:58:ef:a5:8a:f0:21:39:a3:d8:7f:
64:a4:b6:71:9e:82:45:03:c2:37:6b:d7:5f:9d:c1:
d5:63:8a:0d:12:67:3f:99:7e:ec:68:c0:5b:6d:20:
4d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E9:DF:74:3C:A1:BE:A4:80:9F:80:BD:D5:DC:77:A0:1E:02:F4:3D
X509v3 Authority Key Identifier:
keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:82:24:1d:d5:74:aa:ab:a0:4c:bf:85:ea:c8:4e:40:0c:70:
eb:42:c3:bc:ee:88:3e:da:ae:ce:42:bb:b3:67:d8:a4:35:fb:
af:6c:c4:2a:66:81:1b:39:ef:5d:a1:07:64:ae:2c:16:96:3c:
a0:04:a1:f4:ed:b5:e5:8b:12:b2:e3:e4:62:15:23:2b:be:81:
45:f1:a9:cf:54:d9:3b:02:6a:50:0c:e5:9a:cd:1c:a3:aa:e4:
e9:2a:23:ab:c6:8e:17:3b:ec:27:2d:39:d0:4b:f2:a9:32:cb:
75:28:1d:fe:91:89:71:a9:7c:20:5e:c7:18:df:2c:aa:c3:46:
e4:29:d4:2d:37:94:aa:ad:7c:a3:c3:89:08:46:16:a9:72:cd:
09:f9:48:48:1d:d4:36:57:61:c6:ac:28:f2:2e:f7:93:09:80:
70:d2:92:0e:96:0f:74:fa:ee:fe:c5:ec:98:07:d7:22:90:b1:
15:88:4a:f9:ae:18:f4:2d:33:69:4e:f8:de:b9:ce:e4:3d:5e:
5e:2e:fc:f8:71:2e:5b:20:db:7a:c7:0c:61:ed:ef:00:b2:43:
2a:86:19:7f:87:7b:a8:ea:35:4b:db:af:ae:23:ae:6c:7f:01:
99:70:a2:5d:69:67:48:3c:dd:16:72:e2:4a:70:01:b5:b2:af:
7c:e2:5d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:39 2025 by rpki-client