Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
File: idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft (raw, json)
Hash identifier: 5j7dbCI2hY1C/x1jlIBLHXSXqzyHMc33u3c1c+g5quA=
Subject key identifier: A0:54:E8:5D:C1:3B:76:66:1A:69:28:01:F6:53:91:DA:C0:D2:1F:0D
Authority key identifier: 89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
Certificate issuer: /CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Certificate serial: 0196C72947F8556253D30DDB4158F05DF9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
Manifest number: 0E58
Signing time: Tue 13 May 2025 01:01:33 +0000
Manifest this update: Tue 13 May 2025 01:01:33 +0000
Manifest next update: Wed 14 May 2025 01:01:33 +0000
Files and hashes: 1: idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl (hash: s2T/1WSpC9+uE53b3sXLLrl5iH1EhuGn2ngZjlhfxKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:29:47:f8:55:62:53:d3:0d:db:41:58:f0:5d:f9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Validity
Not Before: May 13 01:01:33 2025 GMT
Not After : May 14 01:01:33 2025 GMT
Subject: CN=a054e85dc13b76661a692801f65391dac0d21f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:55:09:c1:87:b5:00:87:c8:67:c0:99:e9:
c0:af:cf:dd:e0:ea:dc:8f:3e:fb:81:4b:2c:62:21:
61:fb:0a:c6:32:37:da:e7:66:7e:51:0b:e2:6c:0c:
9d:f7:83:5c:46:fe:cb:c7:1a:b8:93:44:a0:72:d3:
71:94:c0:d5:02:f6:9c:72:18:7d:c3:7d:ef:b7:f1:
06:33:67:ad:60:74:cd:29:95:ed:f3:0e:79:e2:e7:
89:93:27:df:8f:ed:8e:f7:1d:e9:4e:b8:66:31:04:
bf:64:8c:c1:8b:f6:13:88:6b:bd:12:42:53:9e:a6:
7e:a3:2f:3c:6e:e8:6a:12:74:a4:88:51:14:66:36:
91:c8:0a:f9:d7:c9:69:90:41:2a:15:4d:4e:0b:ac:
a4:2e:5a:cd:0e:2f:c6:c8:a1:b4:92:ce:90:3d:b7:
aa:5d:d7:e8:2d:1c:b7:47:fa:d2:a8:94:3d:c6:96:
fb:91:33:c5:d7:dd:8f:20:a5:4f:9a:fe:23:c7:2a:
b5:ca:40:0a:e0:1f:4d:8b:c3:55:d7:7b:f5:d6:4c:
97:50:88:e1:91:83:ad:0b:55:09:64:98:9a:f2:99:
d7:82:3f:5c:ee:72:09:df:fc:b8:3a:b2:2f:84:97:
26:50:a8:bc:f6:2e:5d:b8:3d:7b:f1:b1:14:58:be:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:54:E8:5D:C1:3B:76:66:1A:69:28:01:F6:53:91:DA:C0:D2:1F:0D
X509v3 Authority Key Identifier:
keyid:89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7b:e8:37:ef:4f:79:f7:74:3e:db:fa:e7:5c:3c:8f:41:76:
a4:c7:2b:31:71:70:b0:64:3f:c1:a9:e6:99:df:92:42:8d:2c:
d6:e3:5f:12:6c:b5:03:ca:7e:48:14:58:da:10:d5:fd:0b:b0:
11:f7:5f:be:7d:11:ed:03:8b:b2:5f:0c:71:f5:8a:66:aa:c3:
9b:ab:82:87:70:95:ad:d9:57:99:45:5c:96:70:d4:69:5e:3a:
ce:9e:51:d3:5d:de:b6:cb:be:82:c8:3e:bc:4f:a0:70:da:bf:
da:27:72:b0:76:a8:96:fa:8e:cc:3b:d4:ae:dc:c3:ce:10:84:
a3:ef:57:ea:99:9d:c8:16:46:fb:94:42:18:dc:9c:0c:68:3d:
50:1b:a3:c1:c4:31:43:5d:e5:39:04:a3:e3:f8:8d:68:a4:94:
42:8a:e8:92:5b:8b:d3:8e:a2:7e:7c:11:a4:97:31:f6:e9:a0:
62:db:b9:f6:60:0e:9f:8e:25:43:10:87:58:4d:95:ad:4a:be:
d3:51:92:77:75:7b:e5:fb:47:e2:fe:8b:52:ea:03:b1:b9:39:
c9:64:46:97:25:bb:61:a5:c7:20:1b:ae:0f:2c:ec:e3:e2:47:
b7:21:b1:03:c2:2e:53:0a:c3:06:40:d4:b8:34:d9:28:ca:37:
bc:a6:66:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:29:30 2025 by rpki-client