Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
File: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft (raw, json)
Hash identifier: gFjmOAt9r+tguO+OznhxDQLW3ENRZuJ0nPO+yamAuVc=
Subject key identifier: DE:8B:FC:FA:03:6E:89:FA:A0:AA:B8:F6:ED:E1:A0:42:A7:B4:CB:CD
Authority key identifier: F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
Certificate issuer: /CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Certificate serial: 019657944D4C2744B14440F78055734B7B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
Manifest number: 148D
Signing time: Mon 21 Apr 2025 09:00:58 +0000
Manifest this update: Mon 21 Apr 2025 09:00:58 +0000
Manifest next update: Tue 22 Apr 2025 09:00:58 +0000
Files and hashes: 1: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl (hash: G/qcIxk485H31nArxN3gp6LpVU8rKp/pwYda7EbGUoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:4d:4c:27:44:b1:44:40:f7:80:55:73:4b:7b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Validity
Not Before: Apr 21 09:00:58 2025 GMT
Not After : Apr 22 09:00:58 2025 GMT
Subject: CN=de8bfcfa036e89faa0aab8f6ede1a042a7b4cbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9b:6e:4c:22:05:76:d5:64:80:d3:ec:8f:61:
86:dd:65:66:8a:4d:7e:5e:a5:80:76:cc:f5:bc:2f:
bb:27:60:30:cd:1f:75:d4:0a:4f:4a:43:b6:eb:67:
8a:87:f5:7c:49:c1:8e:e2:19:8b:3b:76:35:f7:6c:
ee:d7:98:70:4e:42:77:63:61:cc:a4:61:22:f6:77:
3e:96:e6:13:17:8c:39:12:d2:43:13:fa:eb:ca:9f:
1a:78:95:80:2d:bb:42:98:b0:73:ce:39:b1:c7:b4:
7e:f6:9a:9c:25:d5:f5:59:47:90:94:5a:28:05:b6:
1c:fb:1d:88:76:e0:c8:0c:7e:6e:f3:0f:8e:99:34:
61:64:fe:bc:0f:d7:0b:8f:67:ed:4b:e3:c4:88:d3:
cc:66:f1:10:6c:e9:9f:ab:72:e0:c5:c3:49:bb:04:
36:af:bc:c9:c9:b5:c5:1c:21:4b:c2:48:99:26:6b:
9d:d6:d2:c6:f0:9c:2e:11:f4:0c:16:3c:a6:07:0b:
bd:94:4e:42:4d:99:c5:8a:71:c8:e3:d7:df:8d:9e:
9d:fd:00:09:7f:33:a5:62:e5:f4:82:d3:79:5f:19:
d7:e5:df:32:0d:d8:6f:b7:49:55:66:d2:99:51:b3:
45:a7:22:07:3f:c1:d0:c7:13:cc:47:ba:f3:76:c0:
a0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8B:FC:FA:03:6E:89:FA:A0:AA:B8:F6:ED:E1:A0:42:A7:B4:CB:CD
X509v3 Authority Key Identifier:
keyid:F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0e:26:d0:f6:23:a6:69:8a:e9:ac:a7:89:05:2b:02:c3:f7:
0d:82:c1:92:bd:4d:1c:6d:13:0b:d5:05:d8:0e:76:0a:4c:d6:
f9:88:52:ca:64:6c:f3:59:fe:9a:b9:4c:a1:4f:14:fd:88:c9:
57:5d:66:06:a3:1c:7f:1a:c3:80:1a:15:bc:e0:72:f9:81:62:
a3:08:a2:ea:9c:7e:f0:68:13:f4:54:80:77:d0:3a:b1:ce:9e:
d1:ea:9c:8c:8f:bf:b8:e8:3d:21:03:4e:c8:cc:47:00:e6:88:
e0:8b:86:4c:12:f4:c0:f2:b9:b8:80:3b:77:f9:cc:a5:b0:0a:
b6:67:c1:f4:15:09:7c:d3:e6:c6:fd:03:59:e5:0a:42:68:84:
68:38:af:4b:34:5a:b7:18:26:79:ad:52:43:ed:15:c2:08:7f:
a1:cc:7e:2e:41:9f:e7:c7:55:18:60:cc:01:dc:c8:1c:1f:aa:
6e:5c:04:fe:ba:2e:96:37:21:b4:43:eb:05:ee:8f:85:d7:9b:
82:42:8a:f6:f1:af:40:20:fe:f0:e2:fe:95:49:28:5c:8c:99:
92:c3:7c:bf:f1:ff:bf:54:06:4d:f9:05:7c:0d:02:e3:a2:6b:
ef:49:a9:9e:cf:5e:29:ad:55:13:7e:04:30:64:db:d3:64:c2:
60:aa:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:13:16 2025 by rpki-client