Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
File: V9minRgOgZpHgvtsbqFtOn0ykQA.mft (raw, json)
Hash identifier: Gqy6IZ3QuzplTVrFCbaBANj3kXtC5k+ToGVHtAcq/LY=
Subject key identifier: D9:7E:97:2E:B6:5D:58:5B:76:5D:CB:EB:26:DE:61:87:13:FD:FD:B0
Authority key identifier: 57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
Certificate issuer: /CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Certificate serial: 01965538BDE0ED0629FDA1A60884985085CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
Manifest number: 0713
Signing time: Sun 20 Apr 2025 22:01:44 +0000
Manifest this update: Sun 20 Apr 2025 22:01:44 +0000
Manifest next update: Mon 21 Apr 2025 22:01:44 +0000
Files and hashes: 1: V9minRgOgZpHgvtsbqFtOn0ykQA.crl (hash: DxJQeILZFrZs5jvFHwgXzrcqOknAPmtFKcyjij2bn0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:bd:e0:ed:06:29:fd:a1:a6:08:84:98:50:85:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Validity
Not Before: Apr 20 22:01:44 2025 GMT
Not After : Apr 21 22:01:44 2025 GMT
Subject: CN=d97e972eb65d585b765dcbeb26de618713fdfdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:73:af:66:54:bf:82:03:9b:ef:33:a5:39:
78:9c:e0:d3:44:ca:ca:ee:36:01:6b:d9:a0:de:a5:
3b:9d:12:fc:94:64:ce:2c:b5:5a:02:f2:fb:51:db:
99:37:af:05:20:78:9a:eb:c9:78:73:8e:7d:da:fd:
4f:26:91:0b:85:28:d3:cb:82:32:ec:da:9f:0b:44:
45:88:08:d7:af:44:62:a3:fb:b5:5c:08:68:a0:3b:
03:50:82:44:5a:65:a3:d9:da:d1:72:1d:3f:e3:bc:
22:a0:e0:68:1d:dc:ae:93:42:84:1d:90:80:b2:ae:
9a:5b:94:81:b9:6b:ec:52:0b:46:42:03:11:19:48:
3e:64:66:c6:1a:85:af:e8:d2:9f:f8:8e:9c:b0:90:
77:41:46:d9:a3:91:ce:3b:9e:3c:66:dc:87:6c:a6:
07:2d:cc:11:5d:18:17:6c:03:23:fd:ad:ba:6e:a0:
a1:21:3b:55:86:e8:f5:fa:9c:f1:1f:28:93:3c:85:
65:f3:2f:35:82:06:f5:95:6a:23:75:eb:14:45:25:
06:32:84:74:44:6b:5f:de:c0:83:e9:fb:9c:8a:fa:
c4:43:61:3c:76:ae:6d:ef:15:5a:2a:ae:07:a4:ff:
99:13:ba:0a:65:be:f7:e7:be:a4:ca:c5:0c:7e:1c:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7E:97:2E:B6:5D:58:5B:76:5D:CB:EB:26:DE:61:87:13:FD:FD:B0
X509v3 Authority Key Identifier:
keyid:57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:74:c1:41:5c:03:50:ad:fb:10:c6:60:e7:87:c1:bd:74:2a:
e6:16:a6:6b:81:d0:ae:d2:aa:30:77:6b:f2:39:8b:c3:92:7b:
61:bd:0a:61:b4:3f:16:c2:c9:2b:2a:80:bd:f5:a5:e0:56:4f:
bd:6f:e1:e1:5b:21:c0:33:72:61:0c:6f:f1:6c:81:dc:4e:03:
2d:8a:b7:72:ba:69:73:39:3b:60:b2:2e:ff:4a:c4:33:7f:69:
f7:1f:55:69:71:fe:38:d8:e7:d9:ab:38:64:9f:74:8e:a4:54:
76:66:e1:aa:e4:a1:73:a2:d5:d8:42:16:19:4a:5a:95:68:8a:
33:d4:23:47:d5:ad:8d:8a:2b:81:c4:a2:d2:1a:d7:24:6b:c1:
bc:8d:60:89:c4:4e:3e:50:ff:96:bd:2e:02:77:88:d9:2b:a2:
7c:3e:d1:7b:39:63:1a:12:05:48:a1:c9:47:9d:52:c8:66:e5:
a7:8e:23:3d:6e:99:01:26:42:d1:01:6a:69:ee:b0:91:20:96:
3c:ea:ea:59:b7:9d:4e:ac:bc:d4:48:6c:41:aa:19:e6:a3:09:
e5:ee:b2:60:4f:b4:34:9d:42:bc:46:6c:92:a3:dc:78:f9:da:
43:75:77:97:c4:c2:b8:db:6f:c6:00:cb:79:f8:c0:7e:14:8c:
52:94:24:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:40:36 2025 by rpki-client