Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
File: I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json)
Hash identifier: oxyvaQ6v/y68pPCquIqm7E/tuw+Ucv4DFVmNwVPQ0zA=
Subject key identifier: FD:B1:CE:88:85:76:0D:87:C8:DE:BE:2C:5A:5E:1B:22:85:0D:8F:2B
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 0196488ED693EAC1517C93907EE1F0B9C498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
Manifest number: 120E
Signing time: Fri 18 Apr 2025 11:00:42 +0000
Manifest this update: Fri 18 Apr 2025 11:00:42 +0000
Manifest next update: Sat 19 Apr 2025 11:00:42 +0000
Files and hashes: 1: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: x30xypCfpqEKqaq0nUfvfBAla3b4gv5OGmbLxRbWNAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8e:d6:93:ea:c1:51:7c:93:90:7e:e1:f0:b9:c4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Apr 18 11:00:42 2025 GMT
Not After : Apr 19 11:00:42 2025 GMT
Subject: CN=fdb1ce8885760d87c8debe2c5a5e1b22850d8f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:45:38:cb:1c:72:e0:66:9d:d7:d8:11:3a:
b1:82:90:77:ce:0f:e3:ef:37:40:7f:5d:74:a0:9f:
8d:29:76:e4:30:aa:70:8d:f0:a3:4a:6a:ce:ed:f0:
94:64:d8:01:0a:20:f8:d8:92:8e:65:e7:0f:6c:87:
97:bf:27:d9:77:ae:28:ba:e6:af:b8:d5:6e:1f:c4:
af:ca:f5:f2:9f:9c:46:ac:57:ae:0e:f3:fa:4a:11:
32:26:5e:b5:4c:d2:5b:1e:45:71:d5:a9:46:3c:06:
84:de:f2:05:4e:80:e0:ae:72:10:c5:d1:0f:b6:ad:
f4:1e:12:9d:00:2d:66:23:c2:24:a6:d2:78:7b:35:
62:d7:db:53:0e:50:3d:6c:9d:61:19:87:97:7a:4a:
de:d0:4b:a5:1b:1d:cf:94:7e:83:aa:e6:6a:ec:58:
21:bc:e5:4f:18:33:a6:65:2a:3b:fc:1a:11:18:8d:
3c:8b:1d:7d:27:98:5d:d3:01:9d:6a:60:a1:b1:48:
5c:64:29:2b:ff:9f:b4:ec:8d:7e:ae:33:96:4b:ab:
c1:30:e3:ad:4a:d6:1f:b8:0d:8e:fd:25:28:fa:36:
c7:e1:2d:21:c6:05:a3:8d:68:76:9e:d4:ab:9a:5e:
bb:30:07:49:a0:5c:88:09:3d:c1:93:48:ea:17:cf:
98:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B1:CE:88:85:76:0D:87:C8:DE:BE:2C:5A:5E:1B:22:85:0D:8F:2B
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:70:3e:ee:93:cd:71:93:04:08:76:f7:14:f7:d0:2b:eb:8a:
ef:f7:51:36:2b:70:72:ad:aa:41:eb:e7:da:4a:1c:cd:f2:cf:
bc:91:dd:c4:b9:39:ef:b2:ff:2f:9c:40:76:87:bc:1a:62:27:
b6:d2:a4:53:45:e4:8e:40:6a:85:6b:af:c1:fc:f8:72:58:20:
79:20:67:57:76:c5:eb:d9:14:2c:39:b1:f9:4b:c4:8e:a4:47:
b8:2c:15:3f:c4:fa:96:db:11:55:c3:23:fb:3e:df:7c:39:17:
83:df:40:6d:13:16:b8:9b:d8:42:f5:cf:3e:74:6a:fb:06:33:
38:df:bd:21:1c:10:50:72:c6:9b:62:e4:bb:ee:6f:02:b9:62:
f8:90:46:75:80:5b:8c:8d:a1:e4:aa:b8:cc:37:97:52:56:46:
b9:07:06:88:b1:1b:fd:bb:ae:34:bb:db:a4:ea:fa:ee:dc:19:
49:14:3f:b8:44:d6:43:57:b9:24:7e:a0:d4:b5:b2:55:49:11:
65:bb:7d:bd:64:6e:28:29:70:56:ef:0a:be:2f:a5:d2:62:77:
08:c1:34:bd:68:25:95:13:b1:a9:5c:73:b0:39:1a:2b:0c:bb:
db:89:26:e1:25:44:92:2b:d4:44:2b:12:dc:56:f0:25:48:1d:
83:ea:10:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:11:13 2025 by rpki-client