Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier: i5UwFolkNK9ArvRhxatgo/2itr2KAAc+uCk2RtmC3sM=
Subject key identifier: 9E:A9:84:24:3A:EE:95:41:2E:78:13:B8:F8:45:5C:C0:3B:6C:F8:5B
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial: 0195903D22551BA58F30898F231D4C713282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number: 09C8
Signing time: Thu 13 Mar 2025 16:01:20 +0000
Manifest this update: Thu 13 Mar 2025 16:01:20 +0000
Manifest next update: Fri 14 Mar 2025 16:01:20 +0000
Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: kLhDGRyq3HyfOxIEq2iRcGrg8kOPmL0qy6kF7+lU1dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:22:55:1b:a5:8f:30:89:8f:23:1d:4c:71:32:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Validity
Not Before: Mar 13 16:01:20 2025 GMT
Not After : Mar 14 16:01:20 2025 GMT
Subject: CN=9ea984243aee95412e7813b8f8455cc03b6cf85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:17:ba:14:bd:d8:8c:5f:cc:5f:83:45:61:
74:02:28:25:c7:34:c1:25:c7:ee:9a:35:2b:b1:95:
4d:18:45:37:34:9d:54:a4:96:e1:93:18:da:c0:59:
3c:f9:8b:63:1d:f4:fa:9c:62:a6:e9:9f:f1:4a:0a:
6b:9a:b1:01:bc:ff:54:5f:36:09:55:6d:d5:c1:b4:
a1:f2:e1:cf:f4:f5:87:b2:7c:fd:14:8d:11:2a:3d:
e1:a5:1d:08:58:0b:ca:2e:f2:e0:26:98:0d:87:0e:
88:0e:14:be:57:ff:f1:39:f8:17:97:52:62:04:e8:
03:64:0a:30:7d:ad:fc:86:e1:79:a1:cd:2a:0f:83:
2c:18:8f:d7:3c:de:51:5a:68:43:a0:e7:b7:2a:b1:
ed:d3:1b:80:d8:4f:ed:66:64:ea:1c:94:a2:77:e8:
18:cf:77:94:39:8f:63:03:b1:d4:aa:f6:48:2a:60:
94:b3:cd:a8:8e:10:6c:d2:04:44:69:3c:0e:0e:62:
42:85:99:3e:82:93:c6:f8:d8:2d:df:c6:f3:58:33:
fb:77:88:c5:c3:57:2a:67:ea:bc:59:ef:3b:c8:98:
9b:46:83:28:6e:65:30:1f:44:c5:59:5d:48:cb:cd:
95:94:43:6d:84:d1:f2:1e:99:f5:2f:8d:ec:85:f3:
28:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A9:84:24:3A:EE:95:41:2E:78:13:B8:F8:45:5C:C0:3B:6C:F8:5B
X509v3 Authority Key Identifier:
keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:19:64:69:1a:97:e6:e0:6b:36:5c:bb:6b:36:18:3a:1e:01:
6a:13:24:e8:39:e2:53:e4:d9:e5:7d:cb:0a:75:d1:08:57:d2:
d6:85:b4:b6:ad:01:4a:e3:ea:f2:8b:1b:e9:74:d4:48:d1:09:
6b:9a:58:6d:99:98:b2:4b:7b:53:f8:df:89:e6:f7:1d:9f:05:
58:d9:ee:d1:71:1a:3f:34:b7:cc:0f:fa:ac:1e:32:06:a8:71:
c0:b7:c2:00:be:24:22:07:bf:11:34:15:6d:14:88:8c:0c:69:
50:7d:92:9a:ea:66:2a:58:59:4d:d7:ac:05:1a:b9:e3:9a:3a:
bc:c7:26:43:29:bb:3f:a5:b3:0d:1b:09:9f:b2:45:27:87:b7:
09:79:35:c2:81:9f:57:be:ec:02:3b:7d:4e:51:ee:d8:8d:df:
96:61:fb:29:64:f0:df:ac:f1:7b:2f:dc:12:53:18:77:c3:c4:
9b:95:5b:85:06:d4:fa:69:6e:c4:c1:7b:c7:78:6c:6e:53:b0:
64:0a:66:1b:37:db:10:ed:57:ff:de:07:a6:2b:55:ae:33:0c:
69:7c:48:56:35:f5:ff:1b:b8:ca:47:25:92:7d:65:2f:cf:46:
9e:19:dc:f9:65:1f:94:44:d8:ac:10:6f:ea:cd:b7:d4:fa:94:
c3:cb:c0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:16 2025 by rpki-client