Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
File: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft (raw, json)
Hash identifier: lMiAgWqYN7ZaWJs+o2lb89jPXltmntxvrP44yud+Q8U=
Subject key identifier: C9:18:E2:B0:11:B9:58:59:B2:32:13:46:36:18:8B:68:68:46:AB:73
Authority key identifier: D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Certificate issuer: /CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Certificate serial: 0195903D7E5E0A013818BBC6EC72F93D93DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
Manifest number: 1495
Signing time: Thu 13 Mar 2025 16:01:43 +0000
Manifest this update: Thu 13 Mar 2025 16:01:43 +0000
Manifest next update: Fri 14 Mar 2025 16:01:43 +0000
Files and hashes: 1: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl (hash: kGOrGBxTr8BR3Sj4nxIt1gKutLEQ++hnxLbHIjJwIQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:7e:5e:0a:01:38:18:bb:c6:ec:72:f9:3d:93:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Validity
Not Before: Mar 13 16:01:43 2025 GMT
Not After : Mar 14 16:01:43 2025 GMT
Subject: CN=c918e2b011b95859b232134636188b686846ab73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:51:7b:d3:19:2b:b2:ce:6a:07:f9:e2:46:
49:3f:7b:e5:05:d2:da:c0:f1:dd:37:02:a6:42:e0:
36:e5:2e:cd:cd:fa:07:0c:c8:70:4c:7d:84:95:02:
d5:8d:b9:b5:ed:f4:f7:26:e1:90:87:56:ba:26:a2:
61:c4:e6:bd:cd:f8:d2:94:82:cf:85:fa:c3:b1:27:
8d:95:f4:10:a8:72:6f:f2:0f:6c:8f:19:9e:e3:e4:
a5:6d:a7:1f:4a:36:39:48:d9:53:4e:8c:fb:60:f1:
31:ad:ed:70:28:8c:80:53:1a:b5:05:16:58:2c:d9:
30:90:bf:08:e5:4e:f7:92:74:43:39:5f:3b:cb:6e:
97:c7:f2:89:dc:b2:88:8e:16:7c:a8:e6:68:03:01:
84:56:6e:61:da:43:ae:a9:12:e5:0c:e5:bf:14:14:
4d:d0:cc:22:07:c0:12:a4:54:0d:41:f8:0f:cd:fc:
61:e5:40:14:89:e0:99:5b:67:89:13:7f:79:7d:54:
11:3b:9a:63:f4:d4:63:e1:d6:ad:ff:52:08:cd:8c:
6b:f8:84:9b:9a:13:ea:f7:eb:21:55:17:98:bf:86:
5b:ff:62:93:02:9e:b9:f9:b3:13:d4:51:9d:ec:c3:
7b:db:46:59:ee:77:c2:75:69:de:b8:0d:fe:8d:c0:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:18:E2:B0:11:B9:58:59:B2:32:13:46:36:18:8B:68:68:46:AB:73
X509v3 Authority Key Identifier:
keyid:D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ad:72:e5:ab:23:f8:99:12:9a:be:aa:74:18:af:46:ac:f7:
d6:cc:24:79:f1:60:8d:bc:ca:fb:78:88:8e:f6:ce:2d:7e:8e:
96:28:f4:0d:d3:01:0b:85:ee:a8:06:d2:c9:b2:51:fc:42:d6:
c0:8e:24:e8:46:01:8b:41:d2:d9:80:cf:63:77:71:de:65:78:
21:22:0a:29:bd:a6:19:66:99:b0:1a:78:28:a2:d4:fe:66:36:
42:ae:f9:41:f6:be:d4:4f:b6:6d:55:23:48:79:ff:db:52:da:
82:c7:ae:f5:dc:aa:ac:87:66:b2:2c:23:68:28:86:5e:39:d1:
fa:22:24:d9:39:ba:5c:68:79:13:7a:26:8f:f6:a5:37:51:be:
06:d3:90:ef:25:b8:21:26:ea:6c:13:d4:c8:f4:a9:98:56:81:
39:33:90:4c:06:87:65:37:e5:41:ae:bb:04:fc:bc:5b:fa:cc:
5d:95:2f:47:37:e2:53:96:67:9c:8c:4d:c9:13:45:df:84:a2:
7c:ac:de:a9:b0:ba:e7:22:60:01:0d:fa:28:40:d5:09:87:40:
5a:99:6f:cf:a6:2f:b8:5b:f4:6f:76:c4:b0:d4:c5:ed:4a:97:
ac:2a:6e:64:ea:22:3c:de:d0:e5:7d:0a:9a:6d:09:6d:a5:c8:
7a:5c:18:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:39 2025 by rpki-client