Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
File: sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft (raw, json)
Hash identifier: 2v+Y3Ze9Fb3cjA5qWgXwJhq4qIJnpH64++r3yddRRmY=
Subject key identifier: 2D:0E:FE:60:93:74:44:FE:36:2A:4F:A6:B9:0C:5D:E8:B0:9E:FB:92
Authority key identifier: B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78
Certificate issuer: /CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878
Certificate serial: 019653128884B5E52BC20FA8F6047846C2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 12:00:45 +0000
Manifest this update: Sun 20 Apr 2025 12:00:45 +0000
Manifest next update: Mon 21 Apr 2025 12:00:45 +0000
Files and hashes: 1: sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl (hash: eGIEp/HRZ+rPRULr00n9Tms2pTAZ+daJQF5qz1zXlhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:88:84:b5:e5:2b:c2:0f:a8:f6:04:78:46:c2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878
Validity
Not Before: Apr 20 12:00:45 2025 GMT
Not After : Apr 21 12:00:45 2025 GMT
Subject: CN=2d0efe60937444fe362a4fa6b90c5de8b09efb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d1:91:d5:b2:17:05:fd:57:92:c0:23:f1:de:
e2:dc:7f:32:f5:f2:3c:a1:28:58:b9:33:f1:ac:97:
ca:18:a1:0c:d9:4a:b2:5a:ed:94:ce:4c:cd:7a:be:
45:4e:bc:5b:ea:4e:a9:05:12:77:cd:f8:64:f9:16:
20:31:62:2f:f2:d1:6b:2d:e9:c3:76:71:4b:9f:b6:
10:03:96:c6:3e:66:0e:76:33:e9:23:fa:07:78:e6:
4d:a9:0f:49:ab:be:82:0a:f4:c1:74:d9:c1:76:56:
62:cb:7f:65:fa:2b:90:eb:bc:96:16:14:1a:dd:0a:
69:1d:f3:b6:86:a8:50:b2:2e:96:ff:0c:94:1c:d4:
c1:8d:1f:12:7d:d9:ec:25:59:f9:6a:03:98:1b:a9:
95:65:25:5f:c9:6a:bd:29:53:ed:50:b2:87:5b:87:
37:f6:ae:16:97:40:fd:25:d7:7e:e9:a2:06:8f:33:
b6:46:88:fd:a4:68:20:80:02:fe:c3:46:14:af:1b:
f3:b3:de:5f:f4:4a:1f:eb:e1:f4:76:06:46:40:75:
9e:aa:a1:ee:e3:40:9b:52:48:b9:29:7e:de:d7:07:
85:44:0e:f5:9f:bd:27:00:db:fc:cf:14:12:3f:05:
f7:0f:45:fe:0f:e7:1b:77:f3:db:e0:e4:be:a3:f0:
34:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0E:FE:60:93:74:44:FE:36:2A:4F:A6:B9:0C:5D:E8:B0:9E:FB:92
X509v3 Authority Key Identifier:
keyid:B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:3b:90:9d:1f:80:ab:0d:2f:d6:fb:8d:db:2f:89:b6:a6:85:
1d:5f:0c:ad:88:7e:8e:c6:75:e3:5d:b5:5f:9b:88:85:93:7d:
7b:5f:52:f2:6f:05:3c:70:79:39:88:0a:3d:e9:c8:49:08:98:
30:05:54:ba:4b:f2:13:3b:b5:5b:c2:77:bf:ae:1b:89:e1:ef:
3e:9a:71:c6:49:20:ee:5d:b5:8d:b7:90:2c:69:4e:65:85:26:
ab:26:06:c9:72:12:52:7b:f5:e4:39:2a:46:ec:10:ac:14:29:
34:d3:16:01:cb:ba:e7:e7:45:b1:36:69:ab:ae:cd:f4:8e:76:
dd:23:75:c3:50:4f:6d:15:c6:37:89:d4:6a:d0:9a:c4:c8:fa:
3d:29:b3:da:cc:01:b4:e8:aa:c9:cc:2c:f3:8c:7d:20:d2:16:
78:16:7f:12:64:12:4d:ab:9a:4d:32:b0:1b:f1:bf:65:d2:cd:
d7:44:47:32:de:1e:44:5a:62:86:c6:d8:8f:35:62:2c:40:1a:
d1:4a:0f:65:b0:23:25:a0:2c:fa:40:70:77:72:e9:60:d1:6a:
f3:22:10:8a:d5:d6:03:af:7a:2e:2a:91:3c:e1:40:b6:6e:e3:
53:d1:3d:bb:5e:63:43:f9:d5:50:58:a1:7f:34:79:2a:7d:bb:
6e:a7:fe:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:28 2025 by rpki-client