Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
File: sV9qUOakiH4XxTsPwQ5LfhST7rU.mft (raw, json)
Hash identifier: 5gsLOII0acHpWX3C4/Gh64Oq6aMqc2C5buXnJ4GCD3E=
Subject key identifier: CF:98:47:9E:49:47:45:5C:55:DB:51:08:91:A6:F1:A3:3F:1D:39:72
Authority key identifier: B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5
Certificate issuer: /CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5
Certificate serial: 0196553763D38270CEA238DEFAF4D15F8D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
Manifest number: 10E5
Signing time: Sun 20 Apr 2025 22:00:15 +0000
Manifest this update: Sun 20 Apr 2025 22:00:15 +0000
Manifest next update: Mon 21 Apr 2025 22:00:15 +0000
Files and hashes: 1: sV9qUOakiH4XxTsPwQ5LfhST7rU.crl (hash: VyWpmqIPDf70xfbQr/eTAKWzNJbAQ8K4e8TfiIjdkxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:63:d3:82:70:ce:a2:38:de:fa:f4:d1:5f:8d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5
Validity
Not Before: Apr 20 22:00:15 2025 GMT
Not After : Apr 21 22:00:15 2025 GMT
Subject: CN=cf98479e4947455c55db510891a6f1a33f1d3972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:fd:36:9d:23:c7:d5:16:9f:e0:23:e4:2a:
e6:67:0f:5b:dd:7a:27:37:98:4f:e5:0d:7e:73:96:
ee:02:3e:92:9c:c0:9a:0d:67:15:70:71:19:6a:e1:
66:36:6a:b2:53:47:a7:92:79:58:03:94:a7:51:f3:
b8:87:e8:63:a0:51:d1:e3:34:83:ec:fb:e7:52:cc:
d0:ca:89:88:7f:71:23:4b:33:cd:d8:44:57:31:f6:
c9:32:d5:0c:1f:a3:12:c6:fd:50:74:67:55:db:19:
f0:94:ef:93:22:67:b7:6f:0b:db:89:e6:cc:dc:24:
53:ca:b5:16:77:c0:7e:c7:f1:fd:a9:ab:d3:fe:1f:
c2:56:8d:20:31:4c:a2:e6:f8:ee:b1:8a:20:33:40:
51:05:32:4b:62:0c:8a:8a:c4:61:f6:17:a0:46:a8:
6d:c5:91:e5:43:94:40:7b:35:ac:0d:ed:78:eb:00:
fe:29:51:8a:8e:73:f4:e7:d8:bc:f2:a9:c1:b6:ea:
72:29:ea:dc:46:89:1d:7c:ab:a2:f8:72:4b:1d:ac:
e2:56:16:b8:0a:84:bb:4e:69:60:86:2e:45:33:12:
a5:a9:44:50:2d:a6:0c:a7:ee:4b:05:fb:a7:f8:e8:
ed:9d:60:ff:fc:d6:3d:de:95:b5:6b:ed:3c:0f:b2:
6a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:98:47:9E:49:47:45:5C:55:DB:51:08:91:A6:F1:A3:3F:1D:39:72
X509v3 Authority Key Identifier:
keyid:B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fa:21:b8:9f:f6:59:9f:fb:d1:5d:8e:26:f9:7e:95:79:e6:
84:85:73:7d:79:0d:42:69:4c:2a:a8:b5:e6:3a:fd:8a:21:57:
ab:5d:a6:fa:e5:37:36:f0:e6:e5:95:0b:7f:f4:da:a4:69:f2:
57:dc:b1:1b:31:e8:8e:14:74:0e:b9:f5:ef:76:09:67:cc:aa:
ef:f2:c6:f5:87:05:15:14:c4:9a:b0:2a:2c:07:b5:21:ec:6d:
dd:aa:4b:ed:dd:9e:a8:4b:45:54:6c:35:57:3e:c8:05:cf:c8:
bb:01:a3:26:d0:fb:94:12:76:9b:72:26:bd:16:57:2a:4b:44:
91:a9:73:65:ce:ab:ce:4d:65:b5:8c:4d:4c:23:7d:d9:57:6b:
8b:a2:f1:8e:55:1c:fb:77:2b:56:6b:e3:2c:2b:ed:7b:58:25:
6b:8b:41:48:f1:3f:42:51:4e:b5:76:7c:73:77:66:73:af:10:
1b:2f:4f:37:df:11:29:4b:b4:ff:93:b4:06:79:85:df:97:b9:
ab:9b:4c:0c:22:2b:48:00:00:37:1e:14:b0:6a:f2:65:1e:57:
ca:62:b1:0b:9c:f7:5e:c7:89:b2:9d:85:bb:6e:ed:75:7f:5e:
fd:58:93:73:de:e1:8c:93:76:7b:bd:9c:51:1e:37:db:67:8e:
12:06:3c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:49:16 2025 by rpki-client