Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
File: u_D5EC2y6-GvHQdRaEQ4anlj71w.mft (raw, json)
Hash identifier: gvWklJmugSNj0/kyaFk0KcBUaxVZbpoJeDTrUYn6mXw=
Subject key identifier: 13:59:F5:E2:10:3A:F8:12:AB:B6:C0:DF:B6:DE:9F:15:18:4F:87:B2
Authority key identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
Certificate issuer: /CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Certificate serial: 019612B34EAD10C80DD6663A65A4E4AF20D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
Manifest number: 03DC
Signing time: Tue 08 Apr 2025 00:01:03 +0000
Manifest this update: Tue 08 Apr 2025 00:01:03 +0000
Manifest next update: Wed 09 Apr 2025 00:01:03 +0000
Files and hashes: 1: u_D5EC2y6-GvHQdRaEQ4anlj71w.crl (hash: aL2Tue8nAuEIk9OL+YqTr/xbcXMBX5JIned8A3ie8QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:b3:4e:ad:10:c8:0d:d6:66:3a:65:a4:e4:af:20:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Validity
Not Before: Apr 8 00:01:03 2025 GMT
Not After : Apr 9 00:01:03 2025 GMT
Subject: CN=1359f5e2103af812abb6c0dfb6de9f15184f87b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:a5:6c:16:92:48:42:56:6f:d7:9d:3b:71:
5d:bf:ac:aa:ae:2a:28:f7:ed:27:76:00:35:71:af:
3f:80:d8:0f:31:9b:ee:bc:29:e8:f7:61:7f:81:79:
f5:dd:a5:84:80:2b:ae:f3:fa:54:1c:1b:4a:ea:e5:
4d:24:38:83:80:cb:49:b1:af:2f:96:fd:4c:ec:b1:
cc:7d:c5:0f:33:90:4c:3e:d3:fd:98:bc:14:ab:e4:
cd:80:3e:91:3b:a8:1e:1f:da:4c:da:dc:ce:85:b5:
e9:c3:c7:85:e7:13:5d:af:04:2f:e8:da:e1:8c:40:
28:8a:67:b8:79:3f:85:d3:29:43:e1:ce:b4:09:70:
5c:ff:ed:12:a5:10:ff:8f:42:54:d1:c6:97:5f:6d:
a9:f3:95:25:04:2e:14:a0:aa:df:91:81:89:24:e7:
22:1f:74:f9:c9:8e:2d:26:0b:22:f2:28:86:08:5e:
ac:c4:cc:58:1b:66:b6:4d:7e:cc:fe:0a:78:94:b1:
3c:04:2a:62:b6:b6:bc:76:0a:68:b9:40:69:95:b6:
ed:2e:78:76:a9:d2:fd:46:af:5f:d7:bd:d0:1f:30:
79:7f:8f:c4:c4:eb:48:35:93:0a:c4:92:74:3a:c7:
f4:7a:d3:81:fb:72:fa:a2:50:7d:99:a8:84:96:44:
6e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:F5:E2:10:3A:F8:12:AB:B6:C0:DF:B6:DE:9F:15:18:4F:87:B2
X509v3 Authority Key Identifier:
keyid:BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:91:a4:a9:cc:87:f5:84:da:99:e4:61:f4:08:ee:98:5b:34:
84:fd:56:67:0e:07:f9:f0:8c:c3:4a:54:c3:78:de:3b:5b:00:
39:2f:dc:5a:d3:dc:42:85:38:68:52:8d:e9:17:df:b4:70:a7:
ef:ae:58:3b:c9:e8:24:4a:98:7e:0d:ba:3c:40:8d:d4:ad:04:
cf:f2:94:13:1a:18:f5:a1:64:e8:8b:4c:6e:f0:82:66:82:ef:
14:a3:44:a2:29:e2:64:a9:67:f2:8b:9e:ff:b6:ab:72:a7:2f:
ee:29:71:39:1c:7f:60:96:dc:13:f8:a7:43:9d:75:0b:98:de:
f5:14:fb:34:03:da:0e:db:1c:07:5c:54:4f:26:ce:44:13:54:
a0:24:41:01:91:81:c7:9d:c6:ac:98:a3:ed:d5:81:ca:84:2b:
38:c5:f0:ea:d9:70:3d:e0:f9:89:19:39:8b:ad:a9:14:d5:ba:
7f:bc:8b:e3:6f:24:96:ad:a9:46:60:3e:c5:b5:42:83:79:83:
f6:24:d0:2d:ce:e4:b4:a2:ea:85:54:52:0d:0d:5d:bb:59:2a:
32:92:31:f8:12:eb:0c:f0:4c:dc:c4:a2:10:14:4a:bb:8b:90:
d4:e7:9e:67:10:16:59:5b:83:c5:59:f2:ca:e3:a7:aa:f2:0c:
2f:ab:c5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:08:10 2025 by rpki-client