Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
File: r1UJ13Yi0who8jYTxagW5ySEAWU.mft (raw, json)
Hash identifier: jrEHhd6rG5qu5623AqGFBbA0zliREINGwgZzp6lzr0A=
Subject key identifier: 6C:CC:73:EB:34:62:6A:A7:C6:67:CF:93:A0:17:00:B9:1F:DE:6F:54
Authority key identifier: AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
Certificate issuer: /CN=af5509d77622d30868f23613c5a816e724840165
Certificate serial: 01965914DADB43D1AF259FD3EF3286246446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
Manifest number: 05B4
Signing time: Mon 21 Apr 2025 16:01:01 +0000
Manifest this update: Mon 21 Apr 2025 16:01:01 +0000
Manifest next update: Tue 22 Apr 2025 16:01:01 +0000
Files and hashes: 1: r1UJ13Yi0who8jYTxagW5ySEAWU.crl (hash: C8I7rtcnASAibZSej6wefJMMEXjOOvZgKhNFbZVZpGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:da:db:43:d1:af:25:9f:d3:ef:32:86:24:64:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5509d77622d30868f23613c5a816e724840165
Validity
Not Before: Apr 21 16:01:01 2025 GMT
Not After : Apr 22 16:01:01 2025 GMT
Subject: CN=6ccc73eb34626aa7c667cf93a01700b91fde6f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:3a:3b:b5:52:dd:fe:31:65:c1:86:d5:d5:
09:aa:1c:52:2e:a6:c0:d9:30:74:b3:14:a5:da:74:
8c:c3:6b:e0:44:64:32:19:bb:68:1a:da:6e:7d:b7:
9b:29:53:4b:78:9d:32:eb:1d:8a:c7:92:25:38:bd:
d7:f9:0d:61:1a:ef:44:95:e8:47:60:09:21:b3:d0:
d6:17:59:a1:24:57:ed:95:27:5f:1b:63:28:78:3f:
aa:f9:2c:d4:4c:c4:9e:da:5a:52:99:29:28:f2:37:
47:23:1e:8e:21:98:c2:62:51:38:fa:5b:00:db:66:
06:70:7b:76:72:a3:8d:9a:0e:a7:7f:d5:8a:78:e5:
4f:5e:f7:2c:69:ee:05:8d:33:fb:0a:ff:c2:91:43:
a9:b0:38:43:2a:24:c5:ab:7a:21:66:5f:74:9b:da:
62:de:b2:36:e3:17:0c:30:b9:13:e9:6f:16:f3:79:
a2:2b:e2:64:9e:a4:42:83:45:aa:a7:6d:bf:e0:b1:
6b:c3:8c:36:bd:74:af:f3:a3:07:3b:0f:52:00:ea:
e2:b2:1a:70:a4:6c:53:0a:7c:5f:0d:ca:58:46:f5:
da:ae:2b:ae:13:a7:f3:40:e0:37:0a:d9:f9:89:c3:
55:26:a7:61:f6:ff:78:f3:8e:73:0d:2a:a4:22:88:
a5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CC:73:EB:34:62:6A:A7:C6:67:CF:93:A0:17:00:B9:1F:DE:6F:54
X509v3 Authority Key Identifier:
keyid:AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:16:7a:53:58:5b:28:97:3c:00:d0:bc:5f:1d:2b:e6:38:fb:
28:20:27:ce:14:5a:2c:23:a1:0f:af:09:2c:8c:ca:a2:46:59:
79:94:79:37:ca:f5:d9:a9:c8:12:43:5f:21:f3:1b:4a:a3:e4:
7b:ab:c3:e5:f0:2c:c5:6f:3d:4a:04:ff:34:1c:e7:9e:6e:dd:
4c:e9:4d:82:c7:00:ce:31:b2:04:96:3c:8f:75:b9:2b:f0:b8:
f0:2e:df:76:b6:96:64:ce:0a:58:20:ea:71:6c:62:74:97:5a:
c0:07:60:95:9f:d8:3d:02:5e:4c:0b:6c:c3:47:f9:91:4a:02:
fa:bb:68:a9:37:96:bc:76:b3:64:55:20:2d:70:ce:8f:a4:be:
de:cb:87:7a:04:ad:3c:6a:f5:78:b8:e3:1b:61:7b:52:0e:9f:
f9:0c:74:7a:b7:8b:b6:8d:dc:c2:d1:70:9c:6f:b2:b8:8b:4b:
a7:47:0e:8e:b4:e3:89:80:34:74:4f:1c:b1:99:86:03:38:08:
26:03:ba:2b:24:49:c5:94:c8:36:a6:ad:5b:e2:e1:e1:80:b9:
cc:ec:49:e4:db:5c:fa:f9:5b:17:5a:72:fa:74:42:89:3c:43:
b0:9e:c8:19:0a:f5:11:8b:72:bf:c4:5b:3e:14:6b:b3:84:5e:
8a:58:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:52 2025 by rpki-client