Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: JKRyvNJkQ8/WHNukJtO0w0hxt1071ml4tG3/OSZIVks=
Subject key identifier: 79:7A:A0:11:6A:95:51:AF:39:78:74:43:77:4B:B7:6A:32:6A:B3:DD
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 019611A1B36A6398223EA87F3DE2D4F23FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 14D6
Signing time: Mon 07 Apr 2025 19:02:11 +0000
Manifest this update: Mon 07 Apr 2025 19:02:11 +0000
Manifest next update: Tue 08 Apr 2025 19:02:11 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: HiQUGieqRJCWKstcvpqpF/t8TAHjARCggAdm+yp3rnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a1:b3:6a:63:98:22:3e:a8:7f:3d:e2:d4:f2:3f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Apr 7 19:02:11 2025 GMT
Not After : Apr 8 19:02:11 2025 GMT
Subject: CN=797aa0116a9551af39787443774bb76a326ab3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:06:9d:02:87:88:4b:78:11:39:52:a0:bc:88:
44:f0:29:f7:f1:59:69:52:93:a4:49:53:4d:d4:08:
0a:1f:e5:89:ac:b6:af:62:c9:26:19:30:e3:54:47:
00:fb:65:e7:7e:f9:88:0b:7b:ea:4b:31:df:6f:c1:
30:bc:1e:28:95:0c:9d:93:4a:ba:df:e0:cb:47:7f:
94:37:e8:59:7e:37:39:ac:0b:a6:54:a3:36:1d:c4:
4b:d0:bc:38:a9:8d:a6:ac:a4:02:5b:73:5b:08:de:
3f:9d:92:25:ad:f6:3e:61:16:99:67:89:2b:f6:a8:
9e:16:a2:58:18:af:08:1e:b8:a3:80:a3:42:a3:39:
c4:5e:6a:81:7d:5a:d5:c3:8b:a6:5c:89:b4:aa:85:
8e:19:4b:ef:c9:33:ae:59:9b:39:85:3f:13:4e:4a:
0f:33:ae:fc:78:2d:a2:0a:7c:a1:7d:34:84:06:f3:
3b:2a:2d:ba:5f:86:c4:ba:a5:3e:95:50:ce:09:b8:
b2:5c:cf:7b:5e:6c:27:cf:1f:2d:2e:b6:0d:57:bd:
c0:77:27:10:9a:ee:d0:dd:29:1a:a4:fe:ab:e5:8b:
ab:ec:d9:52:76:b7:1a:29:72:de:32:78:28:c8:8f:
d4:ac:ad:fb:77:16:af:ff:4e:0a:97:83:ee:d6:43:
ce:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7A:A0:11:6A:95:51:AF:39:78:74:43:77:4B:B7:6A:32:6A:B3:DD
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:45:0e:d8:d7:c1:9e:c0:fd:16:ff:c5:b7:aa:ba:07:96:bd:
9e:b9:af:0f:45:da:1e:6d:69:05:47:f7:42:67:a7:a5:79:61:
f1:56:80:f3:1d:b5:c8:f0:cf:fd:4c:03:b0:60:11:d6:3c:4d:
8f:13:27:88:23:2b:74:b1:84:74:cd:fa:dc:70:71:74:bb:c3:
5b:ca:14:f5:db:3f:3c:9c:82:53:84:93:68:28:a6:82:0e:b9:
d4:ce:6c:66:18:00:7a:67:19:a6:7e:be:98:7c:2a:7a:e0:15:
6f:7e:13:d4:7e:2f:fe:a3:ff:41:e9:c1:21:07:3d:5a:97:ca:
f3:d1:12:33:35:ed:26:7a:89:da:31:9c:f9:15:9a:7a:2f:6b:
28:07:12:0e:da:8c:70:7b:bf:0e:55:7b:c5:a6:4f:7b:88:6a:
8c:88:eb:f6:e5:19:da:ea:45:d7:d0:34:ca:06:28:30:0b:e0:
26:db:13:ec:f9:7b:3c:b8:75:6c:91:e1:71:c9:d4:06:c0:19:
70:2a:d5:29:c1:8e:eb:24:b5:4b:c7:33:f5:ee:a4:be:8f:21:
a7:80:ff:31:23:da:1e:f0:a7:d7:fa:3f:75:18:73:66:16:de:
bb:07:ec:5e:af:6d:72:ad:47:d7:a2:15:cc:6e:57:ee:1e:92:
60:2c:de:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:51 2025 by rpki-client