Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
File: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json)
Hash identifier: hrvJg5yuBrkjvUKXAZEud1QpOBihr1BOCQSPCVE2VLs=
Subject key identifier: 30:C8:CB:D6:7C:0A:F6:D6:AC:01:10:72:92:48:DD:29:E3:46:4F:DC
Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
Certificate issuer: /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Certificate serial: 0196545C14C92BFFC0E777DCE049EAAA3E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
Manifest number: 0BDD
Signing time: Sun 20 Apr 2025 18:00:42 +0000
Manifest this update: Sun 20 Apr 2025 18:00:42 +0000
Manifest next update: Mon 21 Apr 2025 18:00:42 +0000
Files and hashes: 1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: kzin18iNqgKl93KE4CgfgZ6G37TA4jWJPexjlgL3O+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:14:c9:2b:ff:c0:e7:77:dc:e0:49:ea:aa:3e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Validity
Not Before: Apr 20 18:00:42 2025 GMT
Not After : Apr 21 18:00:42 2025 GMT
Subject: CN=30c8cbd67c0af6d6ac0110729248dd29e3464fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:76:cc:60:1b:f1:55:cc:69:e3:38:95:82:41:
54:80:d4:f4:f5:2d:b0:35:e0:b1:6c:cd:b9:6d:7f:
a9:09:1e:5a:11:f9:21:fe:83:3f:fb:22:8f:ae:58:
1b:59:c1:13:19:59:77:41:61:3d:67:4b:f3:38:60:
05:6e:e2:03:13:d0:f2:b2:da:bb:fe:20:06:f8:52:
68:a6:9d:fb:ad:d6:86:a2:05:bc:b8:1c:d7:76:85:
a7:3d:4d:00:f8:ca:40:fa:e2:71:76:a9:fd:b9:24:
da:5b:c6:4a:05:69:86:06:96:05:4a:63:a8:5e:60:
8b:ae:26:ef:73:e0:8d:b2:97:bf:d0:c5:38:a4:51:
b0:24:30:78:bd:18:6e:5b:4e:c3:03:34:a9:c3:97:
c8:e2:95:8f:c8:f2:20:1f:49:72:39:6f:93:93:f6:
4e:ae:10:9f:f5:cf:33:67:f8:7b:04:d1:6e:26:f3:
22:41:69:6e:63:0d:b5:e1:71:2f:fe:e0:c7:c9:b6:
7f:2b:4b:d4:92:7c:43:9c:79:0b:5e:69:01:fc:d5:
39:54:89:3a:01:e5:91:e4:00:0a:d1:83:a9:7b:2f:
e6:e1:6e:7c:23:4c:f0:2c:59:d7:3c:16:4f:ba:24:
a9:62:66:e4:8b:cb:88:5d:d2:41:4d:85:d6:ae:ce:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C8:CB:D6:7C:0A:F6:D6:AC:01:10:72:92:48:DD:29:E3:46:4F:DC
X509v3 Authority Key Identifier:
keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1f:7d:0f:da:c8:29:e4:9b:3b:ec:d3:8f:ac:06:14:69:8f:
47:bf:1c:31:3f:41:9b:a8:a7:39:94:5b:f2:2d:59:b4:10:cf:
44:00:c0:ed:f5:2a:a8:dd:ba:d5:3a:9d:ef:d3:e6:73:f3:74:
5c:79:98:3a:d8:46:88:4d:54:59:a9:45:72:aa:aa:a1:09:7d:
d5:f9:85:9a:ad:d0:80:69:17:b6:ef:29:0f:21:40:64:ed:01:
fe:08:fa:fb:71:90:c6:6f:77:3d:3e:71:98:33:2d:10:ca:39:
ab:26:68:fe:53:30:a3:4b:38:56:42:4b:8c:01:3a:56:2e:2c:
61:93:96:39:de:fa:b4:c2:a7:1c:e9:38:3e:57:e0:86:5d:a7:
0c:d0:74:68:85:ed:bf:b3:75:f4:1d:51:2f:97:7c:44:9c:b4:
e7:81:cc:9e:88:db:2d:16:72:35:3f:04:9a:a6:26:69:70:54:
ec:a8:39:2d:48:77:ad:18:ee:71:29:53:3f:18:1f:7b:26:2a:
c8:4d:01:eb:9a:5f:93:f5:bb:1b:5f:0d:a8:04:ea:78:e8:25:
4f:1b:27:3f:a8:aa:58:d4:da:6e:05:95:52:40:65:67:aa:fc:
79:36:6e:b1:01:66:7a:68:b4:03:78:0a:d9:d0:4f:80:b2:68:
30:c4:b3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:44:17 2025 by rpki-client