Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
File: t64i7alidO6Wl8qqy1PfkXNwngM.mft (raw, json)
Hash identifier: hgp+SWBYZxM1o6erJlw1Wata0QCi3fkyBQ1nQ4LIdxg=
Subject key identifier: 85:2B:34:67:A0:FA:39:F5:1F:5D:F4:7C:99:8C:3C:F7:8A:EE:4A:B9
Authority key identifier: B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
Certificate issuer: /CN=b7ae22eda96274ee9697caaacb53df9173709e03
Certificate serial: 01965982BE2D9321B5C9FA6F5D55FB0DA939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
Manifest number: 125F
Signing time: Mon 21 Apr 2025 18:01:02 +0000
Manifest this update: Mon 21 Apr 2025 18:01:02 +0000
Manifest next update: Tue 22 Apr 2025 18:01:02 +0000
Files and hashes: 1: t64i7alidO6Wl8qqy1PfkXNwngM.crl (hash: wEitd+K1y2Xo07dEPISM/ShMTbmuUdUp0rNfB0W1oT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:be:2d:93:21:b5:c9:fa:6f:5d:55:fb:0d:a9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ae22eda96274ee9697caaacb53df9173709e03
Validity
Not Before: Apr 21 18:01:02 2025 GMT
Not After : Apr 22 18:01:02 2025 GMT
Subject: CN=852b3467a0fa39f51f5df47c998c3cf78aee4ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:68:68:77:b4:94:d5:84:20:b9:8b:ae:97:
e1:6c:c1:4e:b8:e7:db:e0:b6:43:d1:31:00:45:26:
70:1b:4a:88:53:6a:50:90:af:eb:2b:05:c1:3b:05:
fb:74:a7:58:a0:87:bd:1b:22:ca:19:5d:be:02:d7:
33:71:97:08:ad:fa:28:94:85:a2:26:b0:36:97:78:
ac:02:28:af:a3:a0:c0:f7:13:97:47:a0:bd:2b:ff:
2b:fc:ac:83:88:00:40:19:b0:40:d3:6c:35:ea:6a:
03:65:92:05:f4:40:ad:bb:65:11:42:f8:ef:bc:a2:
cf:62:09:98:8e:19:19:65:b4:40:ca:10:35:d9:73:
ec:c2:d8:1d:0c:db:cb:ea:db:9d:43:99:41:47:bc:
25:0f:07:d0:5d:3a:88:a7:67:7b:1e:4c:9f:50:98:
8b:de:d2:2e:db:11:c2:da:48:e4:d1:4b:78:c7:76:
84:64:16:30:fa:e2:11:e2:a7:75:d0:d3:71:e0:13:
29:47:0f:88:4d:6f:b8:68:93:5f:8c:70:17:94:05:
d6:73:05:c0:07:b5:d4:a1:34:91:f2:37:48:84:b9:
30:79:41:17:4e:2c:af:5b:a8:d7:92:d3:64:3b:cd:
90:e3:0b:d4:e5:fa:52:3b:65:fb:f5:dc:dc:a7:61:
6c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2B:34:67:A0:FA:39:F5:1F:5D:F4:7C:99:8C:3C:F7:8A:EE:4A:B9
X509v3 Authority Key Identifier:
keyid:B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c7:93:ed:c1:9a:e4:ee:1d:fc:8f:fa:e8:5c:da:75:15:e4:
81:43:73:f9:ef:ad:09:e0:37:1b:98:ad:fe:82:9d:8d:ca:ba:
81:7d:53:98:c3:82:5b:1b:24:80:f6:3b:40:8b:6e:a9:04:c8:
f6:70:bc:34:38:fe:23:cf:d4:21:40:eb:41:ee:92:6b:34:80:
fa:e9:6d:a1:17:bf:90:31:24:b2:36:13:2c:f6:04:af:fd:03:
fa:11:f7:bd:2b:e5:29:ff:5b:8f:e9:34:8d:d8:9d:06:f3:9d:
13:02:5e:ad:8d:f3:1a:1c:46:fe:a5:bb:ba:76:ac:34:18:1c:
ce:68:67:56:ec:4c:aa:56:13:f6:1b:d4:16:61:39:c3:43:e8:
c1:c8:d1:4b:df:54:91:6b:51:7e:86:52:c0:5c:50:dd:09:f0:
00:13:17:89:18:21:1e:91:52:9b:ab:41:79:33:c8:01:1d:35:
81:0b:a3:a2:57:3f:33:bb:64:bb:dd:2f:9d:62:ea:5f:48:52:
fc:5e:7d:80:3d:e7:fc:e9:10:cd:9a:3e:c5:d6:82:e3:0a:e8:
e7:8a:b8:ac:39:8f:c9:52:46:7b:ee:91:36:75:f7:d6:be:31:
79:c3:f1:36:25:95:57:3b:d5:48:36:52:25:4c:83:ef:1c:0a:
e5:63:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:36:03 2025 by rpki-client