Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File: 18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier: 03HoC3plFvenlmoRPAEhr5W/cDq8Xoui06aLpWzgOhs=
Subject key identifier: DB:05:69:4E:87:08:6B:90:35:EA:E1:3F:68:7F:DD:37:41:B9:3A:1C
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer: /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial: 01964BFD4E58151433E61BFB92787A5C86AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 03:00:13 +0000
Manifest this update: Sat 19 Apr 2025 03:00:13 +0000
Manifest next update: Sun 20 Apr 2025 03:00:13 +0000
Files and hashes: 1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: 1UCLTioXuYPNQzA5S1ENWpAkUjNG856CuovIYVSLUwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:4e:58:15:14:33:e6:1b:fb:92:78:7a:5c:86:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Validity
Not Before: Apr 19 03:00:13 2025 GMT
Not After : Apr 20 03:00:13 2025 GMT
Subject: CN=db05694e87086b9035eae13f687fdd3741b93a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:6d:14:1e:40:ad:7e:e1:73:ed:c4:dd:52:
5f:29:be:49:98:b1:b2:6b:3d:d2:bc:b4:84:3b:25:
de:83:97:59:4e:34:9d:c7:be:89:94:fe:87:45:98:
51:ed:95:51:27:7e:b1:04:30:86:4e:90:0d:3a:1f:
a7:d3:b0:07:bd:e8:f8:3f:58:d8:f2:8c:b7:d9:23:
5d:73:a0:0e:58:8a:29:ea:df:e5:6a:2b:81:58:c3:
f6:02:d0:72:0b:92:29:ec:00:7a:71:7e:c9:97:bf:
91:57:b1:a8:44:7b:11:c8:52:d4:4a:ad:65:7b:1e:
d5:a7:e5:fe:8e:d3:d2:b8:36:12:cf:65:91:f3:64:
b3:ed:c1:c0:43:d6:6e:9e:ee:20:d9:6b:b4:5a:52:
dd:6d:1b:5b:0b:75:02:fe:8b:60:ef:72:7e:f3:8e:
4a:50:d9:35:5f:f6:67:d6:39:48:8d:16:fe:88:9d:
53:a4:10:d7:09:78:d7:d6:cb:d8:de:36:d0:28:20:
c4:66:ab:86:3c:de:6d:ff:9e:cc:f7:13:d5:9f:3f:
d4:9c:62:9b:4d:74:05:1a:e2:13:99:56:61:0a:ea:
d9:28:70:21:6e:94:3a:5d:1e:28:14:50:4c:5c:40:
75:53:5c:c9:36:77:da:2e:6d:ac:1b:c3:a4:5d:5f:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:05:69:4E:87:08:6B:90:35:EA:E1:3F:68:7F:DD:37:41:B9:3A:1C
X509v3 Authority Key Identifier:
keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:49:d7:44:47:54:f4:43:26:55:de:6e:ee:71:2d:29:39:f2:
7d:6c:97:f1:1f:7a:7d:e0:7c:d2:00:cd:46:1f:76:4a:4f:e1:
fc:5a:e4:1b:4b:ac:7d:27:22:99:47:12:f9:56:4c:c8:49:5f:
f5:e7:d9:f3:81:8f:85:84:43:85:b0:cf:9f:ca:32:cf:fb:cd:
ab:40:ce:03:a0:f2:8c:0d:83:3c:50:bd:6a:7a:68:08:0c:29:
ea:5f:9d:ec:52:56:78:8e:75:40:68:88:b3:87:08:05:ae:f6:
f5:18:6f:6d:0a:ed:a7:e8:a9:ba:4d:bf:2b:6d:95:ca:42:84:
26:5f:f8:7c:ad:df:60:ac:ba:a4:8b:04:a0:e0:a8:dd:9e:da:
15:31:d3:2d:f0:72:d2:ea:84:97:7c:68:af:e7:a0:9b:13:20:
e2:7a:ad:58:ee:14:6e:5b:b4:c1:55:96:bb:6f:cc:22:77:c4:
ec:e8:75:37:cb:5c:21:ab:d1:1b:10:e4:60:2b:94:2c:23:65:
35:c5:7b:f3:f4:f7:40:90:b9:c6:3a:f9:3f:9a:e2:e6:f0:3e:
40:9b:73:3f:3a:bd:17:31:f6:5e:ea:ac:2a:b6:eb:61:47:d0:
7b:44:f9:77:99:e0:6d:28:d6:17:3c:af:db:c7:1f:b6:a3:3f:
f2:7e:9a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:48:03 2025 by rpki-client