Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: xTovUkisAUODCOB3PLJV7htElDsdwookW/6XWIxy1HI=
Subject key identifier: 50:11:1B:FA:E5:3C:8D:1B:7C:2F:A6:49:66:F2:CE:81:AA:4E:7E:33
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 019579EB6B33857BCF051E9405326DB3D1BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 049E
Signing time: Sun 09 Mar 2025 08:00:26 +0000
Manifest this update: Sun 09 Mar 2025 08:00:26 +0000
Manifest next update: Mon 10 Mar 2025 08:00:26 +0000
Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: IqhPw8QW0wtXiJaXhgxs8AOQjcsGCR+zk099fwv/7c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:eb:6b:33:85:7b:cf:05:1e:94:05:32:6d:b3:d1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Mar 9 08:00:26 2025 GMT
Not After : Mar 10 08:00:26 2025 GMT
Subject: CN=50111bfae53c8d1b7c2fa64966f2ce81aa4e7e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:3f:1f:c2:93:68:a9:5d:f8:52:2c:de:73:
4b:c3:43:6e:df:b3:cc:6c:21:47:af:b0:0c:9d:a8:
72:48:59:bd:08:7b:8e:d3:e1:4b:dd:91:08:b5:7f:
2f:92:b2:c4:11:51:61:24:1e:9a:a8:1d:5e:89:56:
61:34:a6:55:3d:d8:65:ae:57:07:fb:d1:8a:28:3a:
ed:0e:f8:91:b7:69:17:32:7d:fb:3e:82:ed:4b:b5:
f1:10:a1:e8:b4:42:20:04:d2:b9:68:13:8e:b5:2f:
f6:4b:0c:40:9b:32:b3:38:dc:28:6e:97:17:03:7a:
9d:50:52:77:d8:c9:e4:ff:f7:8c:34:30:92:fa:f1:
75:e1:c0:21:fd:c9:82:de:03:73:f7:a6:8b:18:c9:
df:ee:56:7b:47:93:43:82:da:07:b3:ba:13:83:7e:
39:85:a2:3a:28:b9:de:a3:08:f6:2b:34:04:5e:03:
c1:c8:e8:34:88:83:87:7a:20:f4:63:6b:c1:9c:10:
fe:f5:dc:e6:ac:6a:bb:b8:4a:2e:40:6b:68:43:3a:
ed:6d:be:54:09:27:39:a9:52:9b:56:82:55:a8:c2:
5e:20:3f:fa:d9:c5:3c:d0:86:50:2a:cb:96:cd:32:
e3:de:3f:28:20:ea:d7:0f:6f:09:f1:37:da:d6:94:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:11:1B:FA:E5:3C:8D:1B:7C:2F:A6:49:66:F2:CE:81:AA:4E:7E:33
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:62:f5:18:c1:ed:97:cf:50:c4:66:c3:6c:20:12:aa:f3:9a:
b1:37:19:86:88:8e:8c:cf:be:2f:e9:33:1a:79:5f:ad:94:aa:
fd:1d:58:9f:95:19:db:7c:c0:81:9f:70:84:05:a3:77:bf:b3:
1a:98:33:93:d5:c7:6f:0e:4f:41:a6:c1:69:96:00:24:60:54:
80:d6:f9:42:87:35:6b:4a:e2:3b:49:6e:c8:d3:a4:ea:93:56:
71:a5:01:a6:61:28:c3:3e:20:f0:26:3a:0a:65:b4:25:cf:6f:
f0:a5:34:55:11:dd:48:ab:34:ab:a6:f6:c1:a3:3f:72:12:c8:
74:6f:ea:27:43:fb:5f:19:71:b7:ef:38:b3:1c:78:a0:9b:e6:
df:76:d6:63:c9:cc:e8:f7:e7:83:b0:4d:4e:08:a1:6e:6c:4a:
10:54:bf:e7:ca:93:d8:cd:38:d3:f9:aa:b7:b1:de:3c:31:91:
cd:b4:ff:9f:81:8d:b0:72:a1:cd:21:82:ab:ad:8d:30:18:5c:
69:b7:c7:f3:ac:3d:b1:93:8c:b8:b8:a9:bd:46:1c:68:f1:b2:
a2:7f:53:52:ba:eb:53:6c:99:da:1c:67:bc:8a:0c:86:a0:6e:
d0:08:53:8d:55:fb:48:db:73:96:92:7f:01:e0:5e:87:89:e4:
f0:13:da:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:40:53 2025 by rpki-client