Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
File: D4jGhrHhIvzcFlwCN6D149mQvwE.mft (raw, json)
Hash identifier: 14Du6HclPqOyNiAfPyj9L6PQ10StNUsPWQ/FYW1Vgiw=
Subject key identifier: 32:14:CB:DA:60:2A:58:A3:60:5D:B4:C4:65:B5:4B:62:0B:93:5B:38
Authority key identifier: 0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
Certificate issuer: /CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Certificate serial: 0196550089097AAC2CBD1CD21B808558FA58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
Manifest number: 0AAB
Signing time: Sun 20 Apr 2025 21:00:20 +0000
Manifest this update: Sun 20 Apr 2025 21:00:20 +0000
Manifest next update: Mon 21 Apr 2025 21:00:20 +0000
Files and hashes: 1: D4jGhrHhIvzcFlwCN6D149mQvwE.crl (hash: uKij+jf7+txUitKpwxcM9j7rORDK5o3aaq+C6LAER6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:89:09:7a:ac:2c:bd:1c:d2:1b:80:85:58:fa:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Validity
Not Before: Apr 20 21:00:20 2025 GMT
Not After : Apr 21 21:00:20 2025 GMT
Subject: CN=3214cbda602a58a3605db4c465b54b620b935b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:31:14:82:5a:fd:07:de:03:c3:bd:05:e3:11:
80:44:3e:c8:dc:91:7d:25:8e:2d:df:bc:dd:f7:ae:
a0:ab:4b:e3:38:b1:d1:0f:07:d0:64:7d:92:d0:f8:
ff:9c:78:fd:99:03:4d:5a:f2:5c:d2:e0:c1:7b:25:
e8:4e:5a:5b:de:5f:e7:9a:9f:6e:b9:86:81:72:c4:
06:45:ad:9b:08:6b:e8:80:18:b8:0c:70:c3:3f:88:
62:1f:d1:c3:c1:91:c4:89:85:5a:ae:3c:1d:a9:ac:
4a:9c:45:91:bf:93:2f:8f:34:76:7c:16:e5:9c:41:
1f:19:21:a3:f0:a4:1c:8c:44:d6:c5:84:ca:c5:58:
ee:bb:86:6d:db:60:82:b9:3a:6e:f6:1f:d0:89:02:
c3:47:97:59:f0:b8:17:7c:f8:50:9f:3d:59:9b:e9:
8e:37:29:f9:cd:cb:97:db:cf:71:64:bd:5f:a6:37:
55:8f:79:f4:d5:fb:3d:f7:69:bb:d0:db:53:37:d9:
72:f3:db:69:3c:b3:25:71:7e:39:cc:a7:8f:50:ee:
b6:5f:1d:a5:1f:91:f1:c0:1c:50:22:dd:be:e1:64:
dd:aa:5b:11:33:17:e2:17:98:34:ba:91:75:0f:db:
3d:5b:95:d9:35:3a:c8:95:1f:87:6a:12:2c:fd:fe:
85:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:14:CB:DA:60:2A:58:A3:60:5D:B4:C4:65:B5:4B:62:0B:93:5B:38
X509v3 Authority Key Identifier:
keyid:0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:23:4c:8b:75:0b:84:30:75:0c:3c:7a:e5:67:72:99:91:21:
0b:bc:8b:d0:6b:12:0c:2f:cb:3c:39:87:ac:5b:fa:25:a8:47:
94:95:d6:bc:3e:04:3b:f4:97:e4:64:31:20:b2:01:6f:77:8c:
bf:c6:02:5b:71:22:dc:e5:a6:76:57:43:15:e6:a6:06:c6:8a:
e8:24:0e:83:df:eb:40:16:23:1f:57:a4:f4:e5:1a:17:cd:0a:
ca:3b:60:6b:c3:d8:49:08:3b:ec:6c:c8:4c:72:67:73:ec:a4:
5f:6a:a5:2e:d2:63:cd:bb:fd:42:53:80:65:eb:46:01:08:3b:
3b:1d:55:50:6f:9f:c3:9d:43:7c:60:e9:45:2a:67:05:78:01:
69:5b:b9:5c:51:f1:a4:99:08:ab:54:c0:0f:62:ea:ff:75:aa:
11:a1:5b:49:7a:45:e3:35:f4:3d:e0:4e:d9:b8:b1:66:ee:d5:
4f:ba:65:e6:ae:01:d2:44:c5:b5:90:6c:8a:96:78:d1:28:87:
66:83:d1:e3:78:a2:5d:94:51:12:67:51:6b:c1:ca:0c:ed:4f:
df:0c:f8:7e:a1:f4:63:0e:db:ca:e9:74:5e:a9:0e:80:3e:77:
df:f2:fe:99:a3:c3:55:23:0c:cb:0e:3e:c2:40:f7:11:93:c5:
2d:f7:f2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:56 2025 by rpki-client