Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
File: 94hH4ENTVu5e8IbBIEhAigQZG3g.mft (raw, json)
Hash identifier: ytmWP9iR+t962TSx1IE8qurU5GrNzpuza16OfJ6NTD4=
Subject key identifier: 97:72:D6:B6:EE:21:2D:FE:D0:5E:A5:E1:90:DD:2E:76:FC:44:DC:0D
Authority key identifier: F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
Certificate issuer: /CN=f78847e0435356ee5ef086c12048408a04191b78
Certificate serial: 01964BFD5E2045F2EAFC79C41372FF302092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 03:00:17 +0000
Manifest this update: Sat 19 Apr 2025 03:00:17 +0000
Manifest next update: Sun 20 Apr 2025 03:00:17 +0000
Files and hashes: 1: 94hH4ENTVu5e8IbBIEhAigQZG3g.crl (hash: 290iZ+s+J1zUPiiBnDl95OJRhz0piB4KOvN2ZGSHilQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:5e:20:45:f2:ea:fc:79:c4:13:72:ff:30:20:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78847e0435356ee5ef086c12048408a04191b78
Validity
Not Before: Apr 19 03:00:17 2025 GMT
Not After : Apr 20 03:00:17 2025 GMT
Subject: CN=9772d6b6ee212dfed05ea5e190dd2e76fc44dc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:26:ca:05:a8:f8:1b:39:0f:ab:2b:09:df:69:
5c:8d:12:71:25:45:a9:6d:f5:70:a6:ac:29:65:3e:
d3:86:be:71:99:17:38:37:b6:d2:60:0b:49:be:be:
25:65:e3:68:24:10:59:61:80:9f:e4:34:cb:0f:68:
ec:6c:12:f5:ef:ef:26:45:43:68:e3:0b:cb:b2:8f:
7c:49:24:85:6c:e7:3d:b8:a7:9f:ea:2d:a8:6b:53:
24:c9:eb:23:15:ae:00:bf:81:46:3f:94:bb:6a:b4:
5c:5c:6d:cb:f0:5a:11:6f:5f:5d:de:36:f9:50:d0:
07:01:da:68:2f:02:69:a0:11:09:58:21:c6:20:0d:
d8:d7:0e:8c:26:10:12:0c:49:dc:b8:d3:91:ab:77:
de:38:68:72:22:fd:10:2d:ce:ec:82:bf:64:89:96:
47:e5:99:6e:2d:6e:45:01:39:02:15:fa:a2:b3:61:
49:35:42:7f:ef:e9:a2:62:b7:dc:a9:c9:67:ff:30:
3a:14:83:f4:3f:e5:eb:0d:ce:2e:66:dc:d2:76:a1:
73:d1:6e:7b:9b:27:67:ff:24:8b:59:5d:82:21:f7:
85:c7:3f:10:bb:77:52:2c:95:49:73:4d:13:2f:4c:
83:44:93:4f:9a:05:d7:09:93:11:fd:e9:87:27:9e:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:72:D6:B6:EE:21:2D:FE:D0:5E:A5:E1:90:DD:2E:76:FC:44:DC:0D
X509v3 Authority Key Identifier:
keyid:F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6f:1b:fe:f4:ba:f8:eb:3b:9c:08:f0:50:17:ca:6e:1f:65:
b4:a1:d9:70:15:98:41:0e:5a:9f:37:eb:e5:33:1c:df:cc:81:
73:3a:57:0d:ad:a6:3e:2e:43:fb:f8:55:6b:34:84:5d:13:5c:
b1:b7:f6:cf:68:40:70:aa:4d:ae:a2:81:78:20:d5:22:b6:a0:
c5:6f:47:7b:14:aa:c2:d9:e9:68:65:f6:88:41:6a:94:70:71:
e7:22:66:80:83:48:a2:c3:db:86:13:58:ee:22:9b:e0:1d:7f:
a8:35:db:86:e4:2b:a5:f3:53:b1:9e:aa:38:50:27:74:b8:e9:
de:43:ec:98:3b:cd:67:40:47:8c:bb:b0:ac:7c:94:f8:81:c1:
fd:3a:ae:38:52:e4:ae:26:c7:4e:49:a0:f1:99:f1:50:0e:29:
19:08:7e:ca:27:98:28:01:d2:75:ea:98:4a:c0:2e:51:f7:a9:
86:bf:2e:04:34:c8:63:65:30:a9:1e:5e:1a:23:44:69:2a:83:
71:64:63:21:a7:f2:a2:94:53:e0:db:5c:9d:c3:c6:8d:69:89:
6a:d9:21:9e:df:c2:46:f2:e5:cb:5d:73:1f:62:73:09:38:9b:
0e:93:81:ba:f7:35:aa:d1:94:aa:12:04:11:f5:c3:4d:6b:14:
30:2f:b9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 13:58:33 2025 by rpki-client