Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
File: iD9pgz7Edx87C85PAJNleTVG9qg.mft (raw, json)
Hash identifier: 7eULTOhVeHWGiTNrbkzpzGUc35c0KEeL8Zi1Kzgqgfs=
Subject key identifier: A2:39:54:96:F6:94:B8:B8:DD:EE:F8:B1:25:05:75:83:6A:C5:1A:71
Authority key identifier: 88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
Certificate issuer: /CN=883f69833ec4771f3b0bce4f009365793546f6a8
Certificate serial: 0196C34C2EDA83DA39F23BDDA9A61E45BE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
Manifest number: 0573
Signing time: Mon 12 May 2025 07:01:11 +0000
Manifest this update: Mon 12 May 2025 07:01:11 +0000
Manifest next update: Tue 13 May 2025 07:01:11 +0000
Files and hashes: 1: iD9pgz7Edx87C85PAJNleTVG9qg.crl (hash: zvxc43SGI3LPsTQ0GgOr0Nnel5NahQavwdrl0UvLQpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:2e:da:83:da:39:f2:3b:dd:a9:a6:1e:45:be:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f69833ec4771f3b0bce4f009365793546f6a8
Validity
Not Before: May 12 07:01:11 2025 GMT
Not After : May 13 07:01:11 2025 GMT
Subject: CN=a2395496f694b8b8ddeef8b1250575836ac51a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e9:34:00:c9:12:1f:9c:fc:5f:98:53:46:80:
40:5c:ef:05:16:03:08:1d:69:3f:20:bb:6b:35:0b:
3f:35:9f:29:94:17:0f:59:9b:f2:5e:bd:83:14:7b:
d5:f4:f4:1c:83:a7:43:c9:9c:1f:e4:b7:ef:6d:87:
5b:be:6b:02:81:b8:0a:b9:a7:21:c2:5c:ad:d3:b0:
ea:a6:67:3e:ef:a8:83:cc:bb:fb:d1:72:c0:2b:d3:
fe:6d:11:84:3c:4b:19:b7:42:2f:ba:cc:be:44:9b:
63:64:6a:c0:46:e2:7e:ef:02:ff:97:20:21:8c:72:
de:50:91:30:01:fc:08:94:dc:08:a1:32:b4:b2:a8:
c3:79:bb:8d:75:6f:ef:a1:16:0f:9e:d9:1a:7f:a2:
63:25:cf:f2:c4:e0:ef:47:99:f8:56:81:d6:ab:0c:
cd:69:1b:2e:e5:13:3c:db:47:bc:37:b6:f4:9e:b1:
c1:8f:9a:3e:08:2c:48:c2:3f:05:e9:92:65:36:de:
bb:29:8d:ee:1a:b2:67:55:a9:b4:c2:b7:14:22:35:
45:c8:b7:67:08:8d:a6:44:45:1f:57:3a:1e:5c:5e:
0f:f6:91:c6:2d:ba:a4:de:65:39:94:49:f6:8a:72:
37:82:0e:9d:8d:53:ba:2f:53:11:33:30:12:50:4a:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:39:54:96:F6:94:B8:B8:DD:EE:F8:B1:25:05:75:83:6A:C5:1A:71
X509v3 Authority Key Identifier:
keyid:88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ae:aa:d0:60:20:e4:4f:a7:3c:5c:81:2d:b8:be:70:a4:23:
a9:aa:3b:eb:3a:85:a0:93:89:32:de:67:5f:73:b5:12:e5:f3:
23:fa:5a:6b:63:ff:fa:dc:6e:83:e4:c6:ce:69:7e:47:d2:de:
a2:0b:d2:d5:cb:1a:1b:7d:16:13:5f:1b:7c:be:1f:cc:4c:ed:
72:db:94:b7:cd:bf:9b:d6:97:5d:15:11:82:fd:34:61:47:9a:
5f:75:75:28:a0:e1:36:96:9f:61:2d:b9:13:34:b3:92:3e:ba:
44:60:2b:78:2d:a0:90:ec:7a:38:4d:1e:1b:c4:6d:8f:34:22:
d7:df:67:01:37:da:69:03:5d:d8:a3:fb:45:b4:87:b2:7f:eb:
89:ea:88:67:7f:3b:52:1c:84:38:f9:3e:5e:c5:64:79:ba:4d:
97:3c:fe:02:2e:76:4c:f6:0b:46:2d:c6:34:5d:39:08:42:08:
58:bd:0a:6f:cc:a4:38:c2:c1:27:0f:fa:a1:e9:c2:db:ba:e4:
e2:b2:52:1d:01:8b:bd:a5:85:3b:e7:1a:9b:72:37:33:a3:08:
f4:23:67:19:9f:fc:ad:ee:5c:9b:8e:33:b7:78:3a:60:49:d2:
5b:73:4f:0c:08:f3:7b:b4:c1:87:29:18:08:94:ab:25:df:f0:
8e:9b:36:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:47:50 2025 by rpki-client