Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
File: _sl9DBu8zD2GcSKhFxD1X3AjAI4.mft (raw, json)
Hash identifier: JoEgwKfrhWxK33awzxI9yqaueGi2KsdenUwZMLRumZQ=
Subject key identifier: 13:A7:87:FC:22:F0:AA:97:F3:79:B0:2A:98:D3:76:BE:96:4A:7B:C3
Authority key identifier: FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
Certificate issuer: /CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Certificate serial: 019655DCB1BFEA887E7244B3D1FDA1FE5AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
Manifest number: 03F6
Signing time: Mon 21 Apr 2025 01:00:48 +0000
Manifest this update: Mon 21 Apr 2025 01:00:48 +0000
Manifest next update: Tue 22 Apr 2025 01:00:48 +0000
Files and hashes: 1: _sl9DBu8zD2GcSKhFxD1X3AjAI4.crl (hash: m7DHFHUitm6hilo4j4SC5W+irsxURftt8F9nwfvC/ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:b1:bf:ea:88:7e:72:44:b3:d1:fd:a1:fe:5a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Validity
Not Before: Apr 21 01:00:48 2025 GMT
Not After : Apr 22 01:00:48 2025 GMT
Subject: CN=13a787fc22f0aa97f379b02a98d376be964a7bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:3b:4a:2d:94:0a:dd:15:df:01:57:52:d2:
43:21:b1:93:fe:9f:40:57:a9:41:59:08:16:9e:4a:
e0:20:84:e8:3d:4e:a4:98:d1:98:38:bb:65:66:3b:
d0:8e:53:2b:0a:0e:6d:ef:36:8d:88:d4:6b:a1:47:
95:ed:e5:e5:9f:8a:d7:eb:1e:c0:ac:34:ca:fb:77:
1a:8f:0c:e8:81:cb:bf:df:3b:70:b4:ef:95:0c:7f:
88:ad:89:f1:43:1e:47:9b:f7:f2:2b:07:1e:4e:fe:
ea:9b:2b:b4:e8:fd:7e:e0:9f:9e:7e:21:a0:c8:b5:
9a:1f:b5:3e:54:b2:fa:d2:36:a9:5e:d2:1b:92:31:
b0:c0:93:a9:d9:85:9c:47:e4:d2:bb:b0:1e:a8:86:
06:0f:16:85:37:ee:c2:a6:b8:6c:f1:d5:5a:02:0c:
a6:21:41:8c:f8:b8:42:48:11:ec:7e:41:4e:b0:60:
99:e4:d1:b0:7a:59:bf:35:0c:9c:4d:71:80:85:d2:
ca:4f:26:67:ca:55:05:c9:ec:d1:94:93:82:2d:c9:
88:a3:19:93:fc:d1:7f:ff:2b:19:f0:96:9d:19:e3:
84:18:f8:61:34:52:af:df:d3:40:b8:8f:b1:b1:94:
e6:5b:5b:0b:19:a5:6d:d3:6b:82:1d:a9:54:8c:5f:
75:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A7:87:FC:22:F0:AA:97:F3:79:B0:2A:98:D3:76:BE:96:4A:7B:C3
X509v3 Authority Key Identifier:
keyid:FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6d:0f:76:e0:8c:5c:00:05:ed:82:3c:2d:67:44:51:48:0f:
f4:e5:f1:f5:f3:0c:f0:c1:8e:24:6e:33:58:b8:2c:f1:d0:73:
cd:de:6f:92:d3:0d:84:6f:15:12:f0:0f:8c:d5:b8:94:22:bf:
bb:21:ff:e8:98:ce:61:81:65:f5:c5:8d:24:27:39:f0:c0:a5:
d4:f5:73:00:2a:24:18:b0:23:2a:f3:88:37:1f:a5:4b:cf:31:
7a:45:fe:62:af:14:95:8d:fe:a6:a8:39:76:85:0f:aa:0f:92:
2a:7f:da:d8:9a:5b:91:c4:61:0e:e5:5d:a2:d3:7f:65:d3:1f:
26:dd:1f:17:00:83:61:cc:2b:26:42:f5:de:76:ff:52:bf:0f:
72:bc:69:26:5d:0a:b1:18:3c:cd:15:76:f3:57:0b:ec:f0:f9:
61:97:99:29:75:f1:8a:3e:b3:e0:6a:df:90:ba:ea:f0:db:3d:
7e:a7:04:a6:e1:0a:ee:f7:6d:9d:05:0a:07:e7:90:a8:d9:23:
2c:42:69:f0:32:05:6c:d9:2a:af:85:f8:38:ab:2a:88:fe:01:
aa:6e:f6:38:30:f7:c8:28:f7:08:34:71:f2:4d:3d:83:30:84:
c6:4e:23:c6:93:3b:8b:57:ba:1b:ea:02:0a:ef:16:cf:35:91:
6b:82:9a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:53:01 2025 by rpki-client