Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
File: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft (raw, json)
Hash identifier: m9DJ13899LhTNwmCsMhARfyM0dS3oQ8E8uCJULo2H2k=
Subject key identifier: B4:24:12:BC:8D:7D:39:8D:CD:8C:8E:F7:5C:77:74:76:34:95:76:22
Authority key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Certificate issuer: /CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Certificate serial: 01964B905136AA909911B366E184972BE2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
Manifest number: 0551
Signing time: Sat 19 Apr 2025 01:01:11 +0000
Manifest this update: Sat 19 Apr 2025 01:01:11 +0000
Manifest next update: Sun 20 Apr 2025 01:01:11 +0000
Files and hashes: 1: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl (hash: 2EDiIbL8x12+w5dc0dg4N5S3ReOD+CODTlXUXUJVHf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:51:36:aa:90:99:11:b3:66:e1:84:97:2b:e2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Validity
Not Before: Apr 19 01:01:11 2025 GMT
Not After : Apr 20 01:01:11 2025 GMT
Subject: CN=b42412bc8d7d398dcd8c8ef75c77747634957622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bd:95:58:81:c3:34:c6:7f:16:23:0a:8c:d8:
77:a6:b0:6a:88:3b:8f:90:07:41:cf:e0:51:cd:27:
ce:d6:ff:56:b2:24:3d:0e:f9:da:14:d8:f2:55:1a:
c1:b9:0d:4f:4a:33:9c:f3:a1:08:7a:82:5c:de:82:
28:5f:94:0b:bf:5e:83:da:10:7e:54:02:61:7d:28:
3e:b8:a1:08:1a:00:5a:5f:7a:bc:b9:7f:fa:02:73:
16:68:5e:bc:e4:f7:b4:1b:42:57:bc:a2:41:fe:06:
27:a5:9e:91:e5:79:09:b8:58:ed:96:d9:b7:02:a7:
bc:a3:01:f7:0e:67:52:1e:41:ce:7d:bb:63:b1:f1:
9e:5d:d4:8d:59:72:2a:c3:86:8e:43:10:80:f0:de:
58:d3:dd:57:9b:53:8b:e0:d8:16:d4:4a:6c:10:0a:
ed:9e:59:f9:5e:53:07:f7:65:d0:37:b3:20:22:0d:
b9:b9:8e:fc:1c:85:5b:b3:12:ce:ee:73:08:78:7f:
e4:2a:91:74:c7:da:79:0e:21:a8:8c:53:59:d6:d3:
09:1e:c4:68:c1:9b:3b:5d:cc:94:9a:86:ca:a3:c8:
00:a9:9d:a9:2d:78:7a:e8:38:d1:5a:78:bf:aa:dc:
1d:07:f3:6f:00:dc:05:ea:33:8f:a7:3a:91:01:0d:
4f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:24:12:BC:8D:7D:39:8D:CD:8C:8E:F7:5C:77:74:76:34:95:76:22
X509v3 Authority Key Identifier:
keyid:FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cb:d9:f4:b5:a9:ac:e8:51:ae:27:4a:5a:87:99:e5:4f:c8:
c0:d7:94:6d:cd:fe:9a:74:fd:32:6f:07:f5:6c:aa:b5:52:e3:
99:7b:d2:cf:c3:6b:92:3f:0d:79:f5:9b:55:16:c2:47:13:99:
92:10:c9:5b:63:7b:51:c6:0d:1a:f4:b2:17:1f:21:ac:59:6d:
ec:2d:a4:ee:98:73:01:6d:d4:ae:d8:db:9b:de:5f:f8:ff:b3:
3e:a0:b0:ba:13:52:66:59:96:05:3d:66:82:3c:63:68:14:95:
45:19:9d:f7:46:93:1a:5d:68:3a:a9:11:e8:6e:11:fd:b1:6d:
8f:d7:e1:1f:14:72:3c:2e:e9:f1:04:e6:e7:2c:6a:2d:f4:28:
67:36:e8:dc:7f:09:ae:46:38:59:50:6b:a4:ef:43:02:52:6c:
60:bf:b3:1d:62:e0:7b:5f:3c:19:26:bf:b4:00:f0:f4:6d:84:
50:e2:5c:76:7b:db:f9:66:3b:c9:53:4c:c5:ea:1c:6d:76:ae:
fd:fc:3b:5a:2a:94:78:e8:2a:4f:75:59:0b:79:f5:2b:61:11:
e6:83:23:32:03:ed:64:dd:a2:61:09:ef:4b:3a:28:8c:d3:08:
ae:35:89:96:c9:9a:97:e6:0d:c3:90:9c:3e:ba:24:36:f9:34:
f4:db:5f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:38 2025 by rpki-client