Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: hPTUtL3EDqYHADqotLFffMjNr1eysEbSTYpevkO5uDY=
Subject key identifier: 21:96:91:FD:4F:56:42:2D:44:3A:8D:52:54:BF:A9:D6:5F:CC:76:F7
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 019650116CDCB03D8B69E571F583CBFAAC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 14C3
Signing time: Sat 19 Apr 2025 22:00:41 +0000
Manifest this update: Sat 19 Apr 2025 22:00:41 +0000
Manifest next update: Sun 20 Apr 2025 22:00:41 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: jNfUTipEcvWdSW0hWlP533tjGvgnj6UwmfAyYxmAI1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:6c:dc:b0:3d:8b:69:e5:71:f5:83:cb:fa:ac:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Apr 19 22:00:41 2025 GMT
Not After : Apr 20 22:00:41 2025 GMT
Subject: CN=219691fd4f56422d443a8d5254bfa9d65fcc76f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:89:45:4c:a2:59:cb:33:aa:d4:93:f3:5d:
50:80:d4:6a:40:20:df:d8:01:ae:e5:80:cd:28:4e:
7a:ec:85:05:1f:30:ef:b0:4f:76:4c:a7:70:84:28:
5f:c1:18:99:3f:fa:24:90:d5:4c:f6:2c:2f:6c:c7:
f1:9b:c0:a7:c6:80:02:6c:9a:37:93:37:29:32:b4:
17:66:d1:94:57:54:dc:ec:7c:78:31:8d:24:05:1d:
a9:eb:02:93:50:5c:02:76:3c:72:92:e4:14:5a:41:
7f:e2:e0:ac:93:b8:76:0a:38:64:bf:72:71:d3:5e:
45:1a:ae:83:af:58:51:6f:b2:ae:eb:69:7a:d9:84:
bf:fd:df:ed:c2:72:0f:9c:26:fd:ec:cb:9b:c1:ca:
d2:98:54:48:57:9e:a9:37:3c:9e:6e:25:9d:e1:1e:
cf:ed:08:55:00:f1:dc:fb:57:f6:5f:98:46:d9:be:
53:a9:dc:f0:36:18:c5:41:88:00:55:6c:c8:08:1a:
00:fb:ca:a8:7f:e3:d1:d7:f3:a8:95:4d:04:cc:fd:
83:f3:81:be:d5:b6:9d:a8:b8:0f:dd:f3:e9:35:5e:
cd:18:07:c1:28:55:57:ef:e2:d4:41:3c:d9:73:6c:
97:25:ac:d2:ab:b3:24:49:a2:92:52:c8:0e:e3:95:
1b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:96:91:FD:4F:56:42:2D:44:3A:8D:52:54:BF:A9:D6:5F:CC:76:F7
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:25:68:6f:1a:1a:ef:86:55:f4:96:c4:96:f0:47:e2:ce:f8:
41:d7:7e:60:91:a9:e5:c7:35:79:0e:af:c3:1b:fa:bc:60:b7:
61:7b:87:6f:58:ee:55:a3:3a:59:8b:87:cb:36:e1:d4:b4:06:
07:9f:23:de:ee:20:a5:5b:28:50:9f:29:49:e4:72:82:e9:fc:
c2:df:ad:b9:28:5b:ef:6c:f7:fb:af:58:54:69:ec:c2:13:00:
89:45:2f:5d:a3:a7:32:00:1a:b2:d8:11:86:33:87:5e:c1:4e:
e1:8d:bf:fd:09:c9:2a:75:0f:8c:f8:38:ce:8b:50:dd:88:74:
0a:a3:74:c7:db:14:20:28:e5:2a:26:fe:20:22:60:68:c2:fa:
da:29:eb:73:56:03:76:5f:ca:92:d2:2d:d2:33:15:5a:db:24:
9f:0b:0c:f2:0a:97:88:01:af:b4:91:7b:45:ae:c9:f2:c9:cf:
70:dc:83:27:6b:4c:a1:31:88:53:1e:9b:a1:65:3d:8a:72:d7:
db:7f:d1:6a:3d:ca:cc:32:be:a1:a7:b7:b2:f2:80:81:46:20:
30:b2:6d:30:7f:7c:22:fd:9b:ae:a7:05:98:32:17:bb:36:a6:
0b:e1:b9:0c:fb:8c:4d:a6:ac:1a:0e:71:11:09:1a:5d:f9:54:
9d:10:22:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:37:58 2025 by rpki-client