Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
File: idXRKIo8KuF_mcuxiRdwAYm9RyA.mft (raw, json)
Hash identifier: 5UqZ9F+7ka2nPJNENb+vRrTvd2nASoa6T3EoejiQlVQ=
Subject key identifier: 00:3E:3B:B5:53:F4:0B:1C:98:02:AE:62:55:55:37:2E:9A:62:5E:4C
Authority key identifier: 89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
Certificate issuer: /CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Certificate serial: 01964067356E9868BA76C0DD7D7DFE283B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
Manifest number: 0F44
Signing time: Wed 16 Apr 2025 21:00:27 +0000
Manifest this update: Wed 16 Apr 2025 21:00:27 +0000
Manifest next update: Thu 17 Apr 2025 21:00:27 +0000
Files and hashes: 1: idXRKIo8KuF_mcuxiRdwAYm9RyA.crl (hash: z+WK8HgLEAMFMFLjbB3E1T4+w2FI4NS0vZtPO2EEr7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:35:6e:98:68:ba:76:c0:dd:7d:7d:fe:28:3b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Validity
Not Before: Apr 16 21:00:27 2025 GMT
Not After : Apr 17 21:00:27 2025 GMT
Subject: CN=003e3bb553f40b1c9802ae625555372e9a625e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:cb:a1:35:11:c9:c9:d9:50:64:6e:39:18:
7d:7d:6c:5c:ed:af:d1:68:86:f9:4b:ae:34:00:06:
45:6f:2d:d1:64:74:6d:fc:a0:e3:0e:d4:0b:df:b4:
7b:06:35:97:76:2b:77:70:c6:99:df:24:6c:73:44:
6b:5a:d3:4f:73:d6:b9:29:3e:b7:14:77:53:69:0d:
c9:c1:cb:f7:6a:48:39:34:52:9b:e6:d2:8e:62:12:
24:24:2f:99:74:a7:9f:a2:0a:2a:e5:17:ff:4f:b1:
af:47:7b:ab:cd:e2:6c:12:f0:56:33:18:3a:06:2b:
1a:19:ef:3b:c5:4e:de:9b:f4:b0:a4:c8:71:9e:2e:
b4:47:ca:fe:53:ba:91:58:20:a9:fd:dc:8d:ac:e3:
50:7b:5c:ee:53:3b:97:48:9c:17:7d:ca:60:93:89:
75:ad:92:4f:46:c1:eb:33:b2:2a:5c:7c:77:2e:7d:
6a:6d:f6:cc:ee:15:5e:ff:3e:aa:7d:3d:0f:fe:77:
7b:ff:8f:f5:d9:aa:9e:48:07:02:30:a3:e8:10:6d:
44:44:b9:a8:64:03:62:8f:c2:d4:90:b0:a0:c6:bc:
88:8b:b6:d7:c5:4e:9f:46:81:74:bf:cd:e0:1b:ba:
2c:65:5f:ba:4a:6d:96:22:77:04:49:c1:d9:75:d9:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3E:3B:B5:53:F4:0B:1C:98:02:AE:62:55:55:37:2E:9A:62:5E:4C
X509v3 Authority Key Identifier:
keyid:89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:5f:bd:a5:19:fd:14:95:e9:2b:0b:dc:33:1a:a7:ce:5e:05:
d1:47:ff:51:12:e3:7e:9a:e1:3c:1c:0a:93:f7:de:79:41:76:
34:6a:55:d5:20:fc:1b:4f:4c:0b:af:88:ee:62:e4:68:71:e3:
a1:57:b7:f8:fa:d4:15:77:5c:1d:1a:70:cf:c8:03:39:a4:ce:
75:80:20:2f:48:4f:6a:d0:5c:c2:27:c7:18:d9:7d:92:b1:b3:
e5:67:f8:69:ba:f8:84:a6:c9:5a:13:cf:71:06:1a:39:21:a1:
d8:9e:f4:53:9a:2b:82:e1:28:08:6f:7f:23:65:e8:5b:40:26:
2b:60:d6:6c:01:75:b6:65:9a:50:93:4e:83:7f:a8:2c:a8:b6:
fe:a3:b1:f1:76:2e:a1:7b:f9:c4:4b:ec:5b:5b:34:25:cf:f0:
48:8c:cb:fd:8a:9f:aa:9b:a9:af:1e:c0:05:d6:b5:14:a0:da:
31:b5:b9:01:a3:40:70:15:0d:32:12:70:63:0d:56:ae:a5:b5:
12:a9:15:d2:d3:5f:ed:ba:08:eb:ab:69:84:c5:36:03:69:9e:
23:1c:b7:ed:ed:26:b7:ea:a9:2a:9f:20:70:fc:c3:8c:d4:27:
ea:2e:ea:5b:c4:9c:26:5f:ef:64:a1:54:77:d5:06:b7:42:cc:
70:e1:de:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:44:35 2025 by rpki-client