Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
File: cSsCxFx16_ctVtM8KAKXwq6H6y0.mft (raw, json)
Hash identifier: jv1cW88kYElXIhCfIdxaak6frl84YhMTTtllk4snZFw=
Subject key identifier: E7:7B:AA:A5:36:71:DF:52:C2:19:10:44:1D:60:8E:63:80:FA:EE:66
Authority key identifier: 71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
Certificate issuer: /CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Certificate serial: 019579EB5454F180C3CB71984C3E953453D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
Manifest number: DB
Signing time: Sun 09 Mar 2025 08:00:20 +0000
Manifest this update: Sun 09 Mar 2025 08:00:20 +0000
Manifest next update: Mon 10 Mar 2025 08:00:20 +0000
Files and hashes: 1: cSsCxFx16_ctVtM8KAKXwq6H6y0.crl (hash: Bk0M3hUmbzxN0FJJJ5nQ0drtzNmuPHeinIv7x83rNxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:eb:54:54:f1:80:c3:cb:71:98:4c:3e:95:34:53:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Validity
Not Before: Mar 9 08:00:20 2025 GMT
Not After : Mar 10 08:00:20 2025 GMT
Subject: CN=e77baaa53671df52c21910441d608e6380faee66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a3:38:53:61:8c:7a:97:04:c5:d7:e4:4e:7d:
9f:fb:4e:7a:2e:09:89:25:c4:79:94:87:df:12:20:
6a:b6:45:ec:59:95:00:39:1d:16:5e:f8:f4:e2:67:
f5:06:65:5c:7f:65:61:11:25:78:7b:65:ec:30:e9:
63:5d:0c:f3:37:3f:dd:00:94:1e:d4:34:3e:9c:b7:
83:1a:e7:94:6d:2e:af:88:e3:35:a3:8c:86:53:00:
be:1d:68:3f:44:80:b4:01:04:82:65:e3:a3:c9:da:
26:c1:f4:7d:5b:7c:82:0c:ad:c5:44:dd:c5:b7:7f:
bd:eb:e8:f9:99:00:46:41:63:15:d7:96:bd:2f:2e:
79:21:3a:c5:fe:56:a2:ef:aa:99:ce:11:82:2f:ea:
f3:6e:19:cc:34:46:27:80:0e:36:76:c5:10:c9:b7:
14:ee:71:f8:58:80:3a:3e:22:6e:74:30:50:06:f6:
af:37:07:0a:98:1f:eb:69:4d:be:bf:a1:f0:75:df:
8c:99:7d:b2:6e:30:b9:e1:fc:95:3a:e3:4d:32:cf:
c6:68:90:e8:cb:7d:66:d1:6c:41:3a:e8:1c:93:e4:
60:64:f4:e9:0f:f2:e0:e7:7f:4c:b4:c1:f6:eb:0f:
7d:ea:29:2f:9e:43:9b:11:f2:1a:b5:f2:db:2e:25:
ef:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7B:AA:A5:36:71:DF:52:C2:19:10:44:1D:60:8E:63:80:FA:EE:66
X509v3 Authority Key Identifier:
keyid:71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:71:16:27:1d:1e:c4:2f:5a:6d:fc:5e:ed:4c:e6:d4:05:7b:
9c:3e:db:5b:c4:93:97:e0:8c:c6:40:e1:61:9e:23:24:e8:92:
f8:37:70:52:0d:b5:7d:f3:09:bd:43:3f:94:6a:fa:ef:ed:6c:
99:f0:83:16:9d:f3:1d:59:bd:88:d6:4e:11:e9:54:59:c2:bf:
b7:76:59:af:c1:1b:17:ec:81:f7:83:e2:49:8e:14:04:88:1f:
6a:4a:0f:6c:fc:63:3b:1d:70:67:68:73:64:26:80:b1:c4:31:
41:3d:37:73:d5:0e:82:fe:b5:2a:66:ab:32:ed:61:bd:8e:08:
6f:16:65:ac:64:a5:98:4e:c6:8c:8c:6e:7d:e7:5c:79:4a:82:
85:55:c4:33:54:9c:1b:a0:ab:f4:f1:e0:10:44:01:2d:f3:94:
84:15:b3:19:f3:fd:6f:5b:5a:c2:90:b6:36:08:2d:13:2d:1f:
f3:f3:f4:49:9b:72:c1:02:58:c1:b3:f7:01:7f:0c:f8:16:59:
8d:8c:cb:56:d2:3c:29:e0:16:cf:58:f5:40:26:53:c2:fb:48:
f9:ae:1d:f2:0b:1c:c3:ac:1b:04:d5:d8:9c:bb:6b:7a:c5:c4:
3c:b2:3d:ef:41:bd:dc:e5:44:65:2f:88:1a:44:a5:05:1a:34:
1b:2c:6d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:44:42 2025 by rpki-client