Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
File: b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json)
Hash identifier: 2LojBHxzdJAFRUgOeuShz7LKPz2EYnOpVSc7/sdD0cY=
Subject key identifier: C7:ED:5A:A7:B6:42:2E:9C:21:9E:DC:F3:30:AF:FC:99:BA:87:B3:56
Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
Certificate issuer: /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Certificate serial: 01964FDA3A17F40A4328A4E02D81BD9F9E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 21:00:23 +0000
Manifest this update: Sat 19 Apr 2025 21:00:23 +0000
Manifest next update: Sun 20 Apr 2025 21:00:23 +0000
Files and hashes: 1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: fsvQ1EgOzn1z39OK2E6Nh/0Da7+XRjNj4CmpZhhVN4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:3a:17:f4:0a:43:28:a4:e0:2d:81:bd:9f:9e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Validity
Not Before: Apr 19 21:00:23 2025 GMT
Not After : Apr 20 21:00:23 2025 GMT
Subject: CN=c7ed5aa7b6422e9c219edcf330affc99ba87b356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:8c:45:04:49:85:da:76:5f:4f:84:3f:0d:
2c:05:46:5a:fe:a1:5a:ee:40:ce:c8:f8:c0:fc:0a:
67:68:c1:ca:cc:7f:35:59:09:60:2d:e4:fa:5c:b7:
18:3c:1e:67:d4:4b:37:47:6e:ac:99:e4:e3:70:32:
b9:e3:d1:b5:3b:3c:25:91:47:b5:da:42:98:a9:16:
a0:36:8a:45:0c:b9:de:db:31:53:62:89:57:d6:03:
a8:f2:ec:93:09:6f:83:06:b6:d0:7e:b1:47:1e:89:
93:fd:43:b2:b5:cd:99:7a:e0:3c:82:db:c8:c0:58:
df:77:0e:70:08:01:fb:72:1f:69:75:31:63:80:38:
ac:3f:a8:b2:c1:e4:ae:c8:d1:cd:67:b3:03:87:4b:
e3:a3:9b:a9:fb:09:6d:9b:c9:cc:00:9c:f3:3f:b8:
90:08:7a:76:dd:88:ca:5a:e4:06:fd:b6:56:d1:e5:
ae:10:98:65:59:ea:0b:b1:31:b8:e3:04:48:63:69:
f7:dd:71:25:75:e2:f1:99:85:95:2f:e9:75:e4:8d:
da:a0:59:79:e3:1a:3a:ea:8e:a6:18:cd:7a:3c:3b:
29:8d:f0:4f:31:a5:39:de:98:ab:3e:da:7c:08:f5:
75:38:c4:c9:2e:a3:7f:11:bc:c5:33:44:29:87:26:
ee:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:ED:5A:A7:B6:42:2E:9C:21:9E:DC:F3:30:AF:FC:99:BA:87:B3:56
X509v3 Authority Key Identifier:
keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:14:1f:77:c9:3b:09:59:d8:30:59:f8:61:d0:0d:e7:5e:38:
44:36:d3:b5:76:6c:6a:3a:13:57:4c:1b:7b:fc:57:cc:44:54:
89:85:d2:d7:dc:13:05:ae:80:6d:ed:7e:e4:07:77:79:62:30:
0a:e4:cc:cd:59:10:c0:91:b4:2b:61:1f:25:f5:ce:d4:64:d3:
9e:71:f8:4c:81:63:11:d0:cc:0a:a7:4f:13:e1:08:8f:72:a0:
9a:a3:70:5e:7b:46:ed:6c:4b:30:62:2d:c2:5b:c8:71:1f:15:
c1:7f:9e:d0:ec:67:e0:8c:f2:7f:6c:7f:4f:19:c3:15:96:97:
6c:6f:4b:72:f4:83:f4:f5:17:53:c2:48:5a:f8:4d:41:84:ca:
0f:af:ec:4b:5a:cf:2a:7a:3f:f5:5a:53:f3:c5:ae:0a:12:47:
c7:56:c7:e7:36:1b:7d:32:98:99:cf:28:c4:98:2f:d2:ff:d8:
23:a1:87:42:50:3e:85:93:77:9b:b9:53:59:eb:46:df:29:22:
08:0f:70:6c:25:60:f4:c5:3e:e0:63:b0:31:33:16:bd:12:b1:
3a:8c:eb:db:91:1e:5a:ac:12:41:8e:ca:15:f5:ad:36:38:f5:
4a:41:88:f0:a3:f7:2b:8e:3f:30:dd:59:e6:7d:85:db:b7:58:
87:95:74:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:33 2025 by rpki-client