Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
File: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft (raw, json)
Hash identifier: KgF6KO5l2AyLbaC/ZgXUkLdBj98cTBRj6pzoTx0tENQ=
Subject key identifier: 70:9B:CB:3E:28:2F:ED:66:B0:CF:03:81:9C:88:94:5C:C6:95:84:D5
Authority key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
Certificate issuer: /CN=ac7862c299d6088718760a96168272fccbfda970
Certificate serial: 019648583C5B72BF17694579C7B1A9CECA1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
Manifest number: 0337
Signing time: Fri 18 Apr 2025 10:01:04 +0000
Manifest this update: Fri 18 Apr 2025 10:01:04 +0000
Manifest next update: Sat 19 Apr 2025 10:01:04 +0000
Files and hashes: 1: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl (hash: BZlk5K0cN2liUfLktZSl8AS9lRwzNr9x3gItMJ/8dJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:58:3c:5b:72:bf:17:69:45:79:c7:b1:a9:ce:ca:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7862c299d6088718760a96168272fccbfda970
Validity
Not Before: Apr 18 10:01:04 2025 GMT
Not After : Apr 19 10:01:04 2025 GMT
Subject: CN=709bcb3e282fed66b0cf03819c88945cc69584d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f8:03:67:69:37:b8:1a:58:95:c3:d9:a9:87:
1d:9b:a5:e0:a2:e6:26:c0:c7:d0:5a:f3:05:5b:65:
30:28:93:26:bb:ac:d4:3c:c7:0c:b3:2c:7b:75:b1:
b2:81:52:3b:21:24:d0:a9:7e:36:a0:1b:cb:4e:eb:
b2:6b:39:46:25:b8:31:ec:0b:75:99:35:f7:7f:fd:
42:8d:13:2e:d8:02:ad:09:3a:c8:0f:47:d5:eb:28:
51:73:6f:a1:18:3f:3e:db:20:3c:3a:ca:68:0a:90:
0e:94:c4:9a:c2:f5:bf:3e:65:e1:8c:3f:f8:ca:2d:
80:21:af:9a:75:67:5e:fe:91:b4:07:1d:a5:85:5d:
78:33:dc:a7:d0:09:bf:d5:f9:b8:f1:e5:67:ee:8c:
39:36:c1:53:df:e6:33:e3:aa:4a:14:11:e1:6e:4d:
6e:0e:27:a6:47:d8:d1:bb:10:f7:34:c8:b2:eb:48:
68:d6:57:5d:7e:09:2a:4e:f4:1a:56:b5:8b:5c:80:
85:0b:4a:34:a4:18:f6:06:30:82:8a:89:f6:13:f1:
dc:40:c0:98:48:63:d4:4e:83:31:15:13:17:e2:8f:
9a:50:3c:c6:f7:be:20:19:9f:df:7c:c5:3f:7f:83:
35:66:81:21:ac:a2:82:01:24:6b:21:e7:29:88:11:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9B:CB:3E:28:2F:ED:66:B0:CF:03:81:9C:88:94:5C:C6:95:84:D5
X509v3 Authority Key Identifier:
keyid:AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:81:88:ee:d4:a0:80:12:10:1d:f0:bf:ac:09:5b:f7:b3:40:
45:a8:eb:47:d4:c7:87:0e:88:07:04:bc:8e:d3:0c:f3:cd:b1:
cb:e6:94:54:a3:38:b0:05:73:a2:79:1a:3d:f3:6a:61:be:e4:
f5:31:ff:96:7b:e3:f1:ef:07:be:f3:fe:8f:8b:03:a4:76:0f:
46:aa:44:d3:71:3a:52:df:25:9f:78:38:00:d9:6a:a1:46:ea:
2f:33:75:55:3c:0a:e3:60:17:b0:8e:df:18:7f:46:f5:75:58:
b9:c3:22:45:b6:4c:f6:63:b7:fb:7a:e1:2a:79:0f:1e:e2:5c:
18:0d:ec:1a:b1:f1:e4:76:61:63:e3:5c:8e:92:13:e6:4f:a7:
19:6c:cd:98:e6:37:27:4e:7d:5f:2e:a0:99:91:49:74:b4:20:
79:b6:6b:57:17:5c:68:f7:fc:2d:8d:a2:50:22:6d:e1:22:98:
59:c7:a8:cd:3d:a7:4b:98:5d:bd:d6:03:eb:06:7f:53:ae:7a:
82:c2:55:24:e2:75:fc:db:82:ed:60:d7:47:f1:ab:75:82:ba:
52:88:77:05:cc:35:bb:9a:1c:02:28:84:ed:0b:ff:0c:e8:c5:
1c:eb:33:55:4c:01:c2:26:71:44:e6:20:98:db:dc:f8:15:ad:
d1:4c:ee:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:37:28 2025 by rpki-client