Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
File: _-rFP47j7k0UPHDf9nNVIDheTNE.mft (raw, json)
Hash identifier: pxmlO2O00gll52vbvohE9rpnPFARy0obC9WUe5WjHMU=
Subject key identifier: 21:2B:DF:E7:E4:00:3E:F8:7A:B3:8B:58:9B:CB:00:8D:E1:F3:AD:4F
Authority key identifier: FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
Certificate issuer: /CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Certificate serial: 019649A17D2E8BA28A34327A4899E1AD8FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
Manifest number: 14F4
Signing time: Fri 18 Apr 2025 16:00:41 +0000
Manifest this update: Fri 18 Apr 2025 16:00:41 +0000
Manifest next update: Sat 19 Apr 2025 16:00:41 +0000
Files and hashes: 1: _-rFP47j7k0UPHDf9nNVIDheTNE.crl (hash: 6aOkoCaVK3Im1rBRKl9il+29pMt+XGdAgHy3DNe1SUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:7d:2e:8b:a2:8a:34:32:7a:48:99:e1:ad:8f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Validity
Not Before: Apr 18 16:00:41 2025 GMT
Not After : Apr 19 16:00:41 2025 GMT
Subject: CN=212bdfe7e4003ef87ab38b589bcb008de1f3ad4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:23:51:b8:47:81:77:bf:64:a2:30:4f:18:
68:3f:f7:7e:2f:05:d7:ef:de:de:80:84:b0:81:c1:
3d:65:57:3d:91:d2:92:5d:72:84:87:42:a7:24:53:
4f:d3:ef:59:bf:11:7e:ec:4f:79:e7:d6:7e:73:da:
d0:36:bf:6e:97:17:f7:05:a9:0a:f5:3d:db:0b:86:
2c:7a:79:4d:04:73:1f:59:28:12:2c:6e:4b:35:d3:
34:ab:41:71:36:d3:e4:53:b5:d8:2a:1a:1a:29:17:
bd:52:1b:02:9c:10:be:58:05:4e:16:cb:f8:91:d2:
28:c1:88:43:de:89:54:3e:31:c4:b0:49:de:6f:a6:
5a:da:07:8a:64:bb:d3:f7:6a:c8:32:6b:e8:31:cf:
b5:58:2d:18:b5:8a:02:d6:30:51:a0:53:c1:c6:b7:
22:e4:a3:74:e4:a4:58:bf:89:98:76:c4:e5:07:8b:
4c:31:73:eb:13:b6:5d:79:4f:93:3d:2c:fd:ab:3e:
37:26:2a:f6:f3:9b:c8:1c:ce:bb:5f:af:29:8e:51:
fd:46:86:80:bc:40:85:59:59:6c:7b:8f:6b:88:2f:
7e:b4:47:fb:2c:53:08:79:21:b5:2e:3b:a7:28:7b:
c1:0b:55:27:c9:83:04:84:c9:34:21:53:1e:49:5d:
6d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2B:DF:E7:E4:00:3E:F8:7A:B3:8B:58:9B:CB:00:8D:E1:F3:AD:4F
X509v3 Authority Key Identifier:
keyid:FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:72:d8:ff:71:ed:96:4d:2e:18:a6:e2:b9:1a:0d:7f:82:60:
55:bb:1e:48:1e:1c:e5:bb:5c:1e:5a:24:53:af:04:26:95:3c:
6f:cc:82:ed:2e:23:57:02:a5:93:1c:43:26:79:47:14:ef:10:
0e:09:7d:88:f3:72:d3:c2:d9:2f:f3:d8:67:71:58:4e:7f:fa:
a5:6e:29:c0:11:e5:d2:1f:5a:76:18:4a:a4:fb:0a:1c:90:7e:
64:24:ea:e4:dd:80:5c:0b:da:cd:49:77:24:6f:b3:c7:b5:ca:
b3:e8:0c:29:bd:af:9b:fb:e8:de:32:a2:22:b2:ee:df:71:d3:
50:2a:96:1f:c8:c8:88:d0:c5:49:17:70:b7:67:56:c1:64:fd:
20:52:d3:f8:04:8b:46:ae:b7:57:cf:0b:2e:95:37:8d:dc:32:
45:9e:0f:b4:39:7c:0e:d5:b9:3a:21:55:60:d8:56:ca:ea:57:
a8:cd:83:8c:94:a4:3a:03:3e:59:2f:01:00:1d:57:a5:83:11:
26:4e:a9:3e:28:45:68:f5:4a:43:a6:2e:05:99:e3:76:89:d9:
15:02:f6:a7:af:16:b6:80:a2:9b:f1:87:02:9a:06:c7:0f:05:
77:31:3d:cf:bb:cf:00:12:3d:fa:1b:ae:9c:c6:e6:b2:c9:52:
22:f6:ec:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:36:48 2025 by rpki-client