Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
File: sSZ6Uay2bymRvqUkP-OIBolxofE.mft (raw, json)
Hash identifier: x+cEJ4sdLeORR0tGUo1drx/IpCzvn5DU+BVliN5rUuA=
Subject key identifier: 9E:5C:D6:18:CB:18:12:9D:F8:C3:13:E8:35:AE:31:C3:99:13:32:09
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 01964D7E105BC25877413F7EA36E016BBED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 10:00:29 +0000
Manifest this update: Sat 19 Apr 2025 10:00:29 +0000
Manifest next update: Sun 20 Apr 2025 10:00:29 +0000
Files and hashes: 1: sSZ6Uay2bymRvqUkP-OIBolxofE.crl (hash: LHbCQrrit4xIMc8ER+/ieI6aKfNnI3t/whlpzCLZI94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:10:5b:c2:58:77:41:3f:7e:a3:6e:01:6b:be:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: Apr 19 10:00:29 2025 GMT
Not After : Apr 20 10:00:29 2025 GMT
Subject: CN=9e5cd618cb18129df8c313e835ae31c399133209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:af:be:75:1a:26:19:2c:39:3e:4d:c8:bb:
a7:53:85:3f:35:07:86:7a:e0:42:f8:50:cd:b9:70:
5f:07:70:c8:42:76:10:50:9e:ca:dc:e0:f1:f8:72:
2e:d8:32:dd:43:17:a6:36:4b:d4:32:2c:30:5e:99:
5f:25:7c:e9:08:59:be:51:3e:e0:37:91:c5:7c:7c:
d8:28:59:de:11:fe:18:64:91:c2:97:75:b0:e7:91:
23:6f:b4:3c:3c:e0:3a:53:ac:3f:73:27:c9:2a:0e:
8a:93:f5:00:ea:be:65:67:a0:f6:b8:84:be:50:9f:
ff:ac:b0:d6:0a:b0:27:8c:9d:66:27:29:4d:76:18:
05:35:75:ec:56:33:eb:de:bc:10:34:52:62:3f:3f:
bf:e9:cf:bd:38:db:69:81:9f:f0:7c:88:e6:f2:54:
98:48:62:5d:57:bf:96:10:a1:ac:fc:98:8d:3e:62:
6c:f0:f1:c9:5e:16:d5:f5:5a:e2:0d:51:db:bd:3b:
ff:7d:e4:b3:76:45:23:91:ec:52:e4:fa:d0:dc:8a:
14:f7:7d:b3:7a:9b:4e:b0:9d:ad:60:7d:cb:43:60:
5c:62:16:75:9b:c8:1c:f5:47:cd:21:79:e7:90:45:
17:28:21:83:ee:ed:e7:2f:4e:af:57:9b:31:75:39:
bd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5C:D6:18:CB:18:12:9D:F8:C3:13:E8:35:AE:31:C3:99:13:32:09
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:53:43:59:87:d0:82:be:06:bc:0f:a0:f4:46:ff:db:ba:fc:
a9:d9:8d:0b:a4:5b:37:73:22:5e:ed:d2:6b:91:6a:91:24:46:
79:7b:df:70:7a:eb:f5:47:51:5e:16:1f:c1:09:08:1e:51:6f:
19:29:9c:58:18:4b:4f:e6:33:b2:28:19:c9:be:67:2b:24:99:
76:9c:97:9d:b4:a2:48:44:78:90:87:a7:52:7d:16:66:a2:31:
87:29:4d:a8:c7:2c:65:cd:04:76:d5:e9:04:df:4c:52:d3:86:
83:49:a2:d2:a9:d5:70:80:1a:3c:98:f1:5e:e7:40:c8:33:80:
28:3c:c2:94:b6:2a:ac:85:6a:ee:5a:23:5d:a4:08:32:3d:8d:
a7:1d:95:33:b7:18:18:02:23:a2:d3:8f:b7:74:2d:f1:d5:b1:
8e:5a:49:05:c0:34:37:79:06:1a:9f:1f:c7:58:ae:c3:42:1f:
3b:4c:2f:73:60:62:4a:20:3d:0a:f7:09:1e:e8:87:25:ef:4e:
40:85:5e:2b:bc:da:ca:79:d1:57:3d:c8:01:42:09:0a:db:4a:
cc:08:7a:0d:0f:1d:6f:37:bd:52:fe:72:77:10:03:59:76:05:
47:c3:80:85:68:37:49:f8:3f:7f:8a:aa:0b:40:0c:10:60:f9:
e3:ac:3b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:21 2025 by rpki-client