Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File: 52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier: qEd0A4Dc5pzFeHYoN82nZ5xXiEfQeh+S9Q1aYa4skrs=
Subject key identifier: AF:16:1F:2F:10:82:92:75:7E:51:8A:3D:E3:A4:6D:DD:3C:52:98:C2
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer: /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial: 01962CAB3C0C8F1ED36E2837BB1CF028048F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number: 08F5
Signing time: Sun 13 Apr 2025 01:02:21 +0000
Manifest this update: Sun 13 Apr 2025 01:02:21 +0000
Manifest next update: Mon 14 Apr 2025 01:02:21 +0000
Files and hashes: 1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: Ehjsb3vdfUB6fE71Q8G+DTMjXDk6csm4IUCnko1UlfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:ab:3c:0c:8f:1e:d3:6e:28:37:bb:1c:f0:28:04:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Validity
Not Before: Apr 13 01:02:21 2025 GMT
Not After : Apr 14 01:02:21 2025 GMT
Subject: CN=af161f2f108292757e518a3de3a46ddd3c5298c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:c6:d0:a3:9a:6b:17:98:2f:c8:df:13:a2:
c2:34:98:fd:a0:a2:a3:bd:09:6e:52:f8:d2:91:f2:
e3:93:aa:01:bd:a8:ef:39:0d:3e:ea:bc:29:5a:ac:
de:54:f5:5a:dc:25:ae:fe:ba:ad:b2:df:58:1b:2f:
5a:22:df:5a:36:b9:49:a6:f2:a2:63:7f:75:7a:f7:
62:70:10:cf:ae:5e:72:81:df:98:47:96:81:95:3c:
05:82:95:e3:cd:f9:de:96:2a:29:fc:98:22:f3:00:
64:a8:17:f2:2e:b2:32:48:74:20:ea:40:2e:2c:5a:
aa:3a:6c:34:a4:1f:0e:cf:f3:e9:3f:92:45:47:fe:
a1:55:db:d4:4c:40:c2:e8:1d:47:21:94:b4:7b:9c:
86:8d:e5:ba:5e:91:de:5b:63:75:69:5d:51:49:08:
9a:d6:a2:74:c0:24:be:ca:96:3e:bb:12:93:27:9e:
6f:c5:4a:b9:b8:9a:0b:a2:f5:7d:9a:13:2b:ba:b5:
75:06:4b:0b:62:5d:16:e0:9a:0d:34:2e:c1:f2:10:
e9:85:9e:09:aa:0c:ba:43:22:ea:d9:98:27:e4:c2:
ca:9a:82:83:37:6b:1f:d0:38:5a:f9:32:58:43:19:
98:e7:a1:33:50:75:16:e5:22:65:cc:05:c4:36:6e:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:16:1F:2F:10:82:92:75:7E:51:8A:3D:E3:A4:6D:DD:3C:52:98:C2
X509v3 Authority Key Identifier:
keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3f:16:b5:4f:ee:4f:7e:06:cf:07:b2:c1:4d:ab:5d:a8:09:
10:77:19:8f:b2:17:36:7f:48:76:69:c2:e1:d1:a2:c2:33:d2:
f5:7a:35:5f:8e:7d:80:da:58:dd:ae:d7:0e:cc:a6:a0:50:97:
99:56:1b:fe:83:23:9a:e2:95:dc:46:a4:6f:a3:0d:53:b8:1f:
2e:fa:d5:79:34:3c:6b:9c:af:41:44:66:87:a0:f5:14:4c:c5:
29:3d:23:60:16:d3:aa:e9:dc:1e:c4:75:44:bf:55:54:91:91:
17:b3:77:2d:cf:e9:6b:55:cf:cc:b1:98:0f:14:95:33:fe:9a:
34:99:45:63:2d:3b:5e:94:18:47:82:69:39:e8:28:dc:e6:08:
cb:60:38:c5:d4:f0:ca:49:db:87:17:11:be:13:9e:02:3c:65:
d1:a4:1b:f1:f9:92:38:93:b1:43:b7:d1:3d:57:9e:60:4a:f3:
98:07:37:18:e8:3e:96:dc:90:91:dc:3b:43:fe:b8:a9:6c:c4:
1c:1f:05:87:4f:0d:16:a5:6d:25:66:e3:66:3b:97:91:dd:b1:
c1:be:a8:3d:08:10:28:45:75:f7:16:c8:33:0d:f1:9d:1c:9b:
48:be:93:79:82:b0:c5:a9:00:ee:5c:7b:c1:a7:65:67:77:fb:
0e:57:08:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:22:18 2025 by rpki-client