Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
File: mupW9uHBw1kAHsImfvD-4bRW3f0.mft (raw, json)
Hash identifier: G2PGHopEmKoroKGo2Mq2n26DClXrz+XnAGjnyaX9s6s=
Subject key identifier: F9:F5:ED:A6:B9:F2:73:6B:1B:A0:E4:6F:FB:01:DD:4D:1F:36:DE:C2
Authority key identifier: 9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
Certificate issuer: /CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Certificate serial: 019655375CD5264D35E1725CC913BBF325EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 22:00:13 +0000
Manifest this update: Sun 20 Apr 2025 22:00:13 +0000
Manifest next update: Mon 21 Apr 2025 22:00:13 +0000
Files and hashes: 1: mupW9uHBw1kAHsImfvD-4bRW3f0.crl (hash: XdBIjxxE741sQ4hoDK9LfZWrjTYPkpa74f/roMHC0aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:5c:d5:26:4d:35:e1:72:5c:c9:13:bb:f3:25:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Validity
Not Before: Apr 20 22:00:13 2025 GMT
Not After : Apr 21 22:00:13 2025 GMT
Subject: CN=f9f5eda6b9f2736b1ba0e46ffb01dd4d1f36dec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:8f:49:b8:a6:94:91:b1:2b:bf:fd:fa:c7:
20:fc:c4:75:8b:d5:c5:cb:0a:e4:e3:9e:74:71:71:
15:64:cc:9b:2d:08:5c:c8:7d:ae:a4:a1:a0:23:99:
34:e1:e6:60:2a:07:52:51:12:bf:28:02:3e:ac:a1:
43:26:48:68:60:fe:c7:7c:ec:40:3b:02:8e:d5:d5:
3f:ec:37:1c:d9:48:09:08:2b:18:c7:53:f3:84:58:
e8:6d:15:55:26:c3:10:db:09:4d:58:d7:87:0d:58:
c9:e2:5c:9c:c3:3b:22:25:1f:fa:00:c3:a3:b1:04:
d2:5e:a4:9f:39:ab:c3:54:7f:b3:9b:28:88:28:f6:
8b:b0:7a:89:b8:82:31:22:10:4a:d5:6a:72:67:53:
6b:65:99:a7:96:51:c5:2c:be:00:29:40:51:c9:b9:
ae:fc:a5:6a:15:92:7c:35:97:b3:62:3c:5b:67:b9:
43:d5:25:eb:d1:48:63:c9:cc:5e:f8:60:6f:f7:75:
55:12:45:61:22:2b:75:5a:55:42:58:23:7a:07:a1:
7e:83:e4:30:cd:e9:e2:04:8d:b6:90:4f:28:18:6c:
a4:c9:d2:e7:64:39:63:3c:b2:a5:2e:4b:ed:85:66:
f2:f5:ff:cd:f3:ec:08:26:3f:c8:76:5e:f2:74:ef:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F5:ED:A6:B9:F2:73:6B:1B:A0:E4:6F:FB:01:DD:4D:1F:36:DE:C2
X509v3 Authority Key Identifier:
keyid:9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d9:d9:da:a6:a7:89:ab:30:91:36:d7:6d:18:cf:7a:6e:4f:
3f:a5:35:64:e4:bc:3c:fc:6f:12:60:b5:e4:f3:cb:20:e3:3c:
ed:f2:7a:1c:f1:13:7d:6b:99:70:a5:bc:d8:e9:9f:67:f7:95:
1d:0c:86:a9:80:7c:ac:ab:06:09:f2:d1:74:5a:96:11:7f:e2:
cf:f6:4d:50:cd:b6:f9:0c:fb:60:3a:e7:a5:64:5c:97:5c:74:
61:7f:9b:b3:4f:bf:68:19:7c:49:a6:86:39:da:3a:ac:d0:31:
f8:68:94:92:86:6d:43:ae:34:ed:49:90:7e:43:8a:e0:ad:66:
ba:c3:4f:5a:19:9a:a8:29:9c:19:56:69:3e:f5:58:a8:6f:97:
56:ae:69:1f:7d:c9:3b:c4:45:74:a8:b6:22:99:f1:85:48:65:
33:82:ac:2e:36:6f:13:4d:da:18:41:60:f0:18:8a:9e:ab:54:
76:6f:43:1c:20:08:e1:09:de:09:23:09:02:90:4b:0e:63:69:
b0:c7:06:76:7d:9a:69:49:97:bf:42:70:5c:b8:fe:95:d9:b8:
dd:50:63:f1:a2:03:b7:f0:37:2f:e9:84:ac:95:5b:35:98:ec:
f6:ee:81:07:0b:c9:a4:c3:92:a5:22:61:e6:a6:d7:57:b8:19:
29:1f:bd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:42 2025 by rpki-client