Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
File: U1wJpqvN8dobR6tK8_-O_KWBRF0.mft (raw, json)
Hash identifier: 1XD7GX56F6KgOX5PA20t6tm7mOLYVB7y5KfmZ64+kb8=
Subject key identifier: 2D:FA:3C:7B:B0:4C:80:0A:72:61:CD:EF:43:60:24:B2:D3:90:AB:B1
Authority key identifier: 53:5C:09:A6:AB:CD:F1:DA:1B:47:AB:4A:F3:FF:8E:FC:A5:81:44:5D
Certificate issuer: /CN=535c09a6abcdf1da1b47ab4af3ff8efca581445d
Certificate serial: 01965538752166AB15AAF5A89861D53495B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
Manifest number: 0462
Signing time: Sun 20 Apr 2025 22:01:25 +0000
Manifest this update: Sun 20 Apr 2025 22:01:25 +0000
Manifest next update: Mon 21 Apr 2025 22:01:25 +0000
Files and hashes: 1: U1wJpqvN8dobR6tK8_-O_KWBRF0.crl (hash: EQ0AFLuZQgRXVM2mGYeKVGDjgeI8KOqCalzdSMrEZPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:75:21:66:ab:15:aa:f5:a8:98:61:d5:34:95:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535c09a6abcdf1da1b47ab4af3ff8efca581445d
Validity
Not Before: Apr 20 22:01:25 2025 GMT
Not After : Apr 21 22:01:25 2025 GMT
Subject: CN=2dfa3c7bb04c800a7261cdef436024b2d390abb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:4b:37:25:12:78:7f:64:09:2f:c7:9c:17:
4b:0c:f5:a1:30:30:f3:5c:30:17:d7:4b:03:d1:da:
89:f4:c5:e2:b4:0d:59:fd:4b:76:a5:c9:f8:09:41:
17:bb:25:f6:b9:5d:c4:ed:99:bb:fd:c8:02:a0:e3:
7a:c9:ad:bf:e7:b0:f0:cf:09:af:8c:40:b1:45:44:
99:53:0a:38:d5:0b:9b:51:14:3a:b0:e1:6e:c9:62:
01:cd:f1:de:98:8f:8c:b8:ca:0e:14:6e:66:6f:21:
30:74:37:f5:5c:eb:68:4e:f9:40:fd:ca:b8:bc:04:
14:36:09:e0:4b:87:95:70:af:c0:71:16:72:d1:a3:
7f:3f:07:4a:e6:c6:f8:92:b3:6e:09:03:62:3d:ef:
e9:98:62:a9:e2:46:64:92:91:22:dc:e0:d0:c1:62:
be:0b:de:37:fa:f7:5c:f9:c8:3e:e8:0a:97:66:a6:
98:10:8a:80:5c:29:6f:4f:46:af:8c:f7:bd:00:71:
60:65:36:50:24:01:b0:3f:28:45:84:c5:99:80:96:
c3:55:f1:2c:74:3b:2e:f2:5c:b1:b1:aa:90:1d:ff:
85:1f:5e:99:69:1c:5b:f0:78:f7:10:e0:c1:4e:05:
cc:64:22:fd:94:90:1e:a2:ec:ec:2f:de:39:dc:a0:
45:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FA:3C:7B:B0:4C:80:0A:72:61:CD:EF:43:60:24:B2:D3:90:AB:B1
X509v3 Authority Key Identifier:
keyid:53:5C:09:A6:AB:CD:F1:DA:1B:47:AB:4A:F3:FF:8E:FC:A5:81:44:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e8:d8:c4:d4:ea:32:53:25:b3:24:00:21:3e:a4:b5:b9:08:
ed:a1:6f:eb:0f:1d:27:48:e2:6e:f2:8d:36:54:d2:4e:e8:50:
ad:ee:bf:74:8e:6b:5c:2f:56:90:fa:3e:11:e0:a0:10:0d:05:
db:6d:cf:1f:ff:fd:41:0c:5a:0e:c9:f4:51:2a:ac:95:93:72:
e5:8d:13:6b:16:5a:f1:d5:6c:e8:ed:9e:f3:a5:6c:32:33:aa:
0c:7e:31:87:d7:38:0a:c9:54:10:b2:10:64:c9:a9:d8:5e:de:
da:4f:55:4e:35:9c:77:b2:b2:64:c3:84:5b:ea:b3:15:80:39:
35:be:93:c0:60:e7:98:b0:7b:fd:de:ee:ac:31:85:88:30:5e:
bb:1a:2c:d4:28:ed:69:74:ec:f8:99:f0:fc:b9:fc:28:11:72:
0b:d4:fc:b7:97:ee:e5:ac:a2:8b:aa:04:26:dc:c6:5b:62:01:
fc:e6:09:44:f5:a5:6a:73:e4:0d:f0:1a:b3:6e:0e:61:89:4f:
83:14:23:f9:8f:09:42:24:5b:f6:14:ec:64:0c:1b:11:e9:d8:
8e:75:9b:60:91:03:66:23:79:ab:1f:8d:8d:df:fd:0d:19:b3:
32:57:ae:b4:f8:d6:b4:a0:6a:27:0d:67:ac:e2:78:af:64:44:
e6:93:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:13 2025 by rpki-client