Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
File: _C71HmsUo-6_tImOD6gTq2eIUTY.mft (raw, json)
Hash identifier: m6/yw+VgtqVweWp7g/lcfoKtP3x0I/2EIp790FLGRAU=
Subject key identifier: 1D:FA:E9:14:86:E1:A1:E7:66:21:57:95:E6:2A:4B:0B:A5:E8:D5:BD
Authority key identifier: FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
Certificate issuer: /CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Certificate serial: 0196AE0DD9F54450A3E0CAB41E437EAA17A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
Manifest number: 0C8C
Signing time: Thu 08 May 2025 04:01:05 +0000
Manifest this update: Thu 08 May 2025 04:01:05 +0000
Manifest next update: Fri 09 May 2025 04:01:05 +0000
Files and hashes: 1: _C71HmsUo-6_tImOD6gTq2eIUTY.crl (hash: W0LCRL+jtsKBOnQOpoFz9owS+AKT1w7txoUgznydv4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:d9:f5:44:50:a3:e0:ca:b4:1e:43:7e:aa:17:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Validity
Not Before: May 8 04:01:05 2025 GMT
Not After : May 9 04:01:05 2025 GMT
Subject: CN=1dfae91486e1a1e766215795e62a4b0ba5e8d5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f2:b4:b9:da:af:55:2b:c8:c1:2c:9f:7b:c7:
6a:4b:81:cf:2c:e0:f8:0f:32:ad:04:16:12:0c:bb:
b9:6c:82:3e:97:8c:61:ce:00:bd:5b:99:ef:ff:02:
fa:81:1a:89:d5:0a:ed:70:84:54:dc:fa:57:0a:b9:
04:9b:5a:c6:dc:6d:b7:0d:25:18:e0:f2:2a:4b:76:
09:a5:5c:e9:59:5f:69:e6:84:77:b8:c7:8e:89:1d:
ff:e6:8b:fc:8b:74:74:25:da:fc:49:b6:c0:e6:66:
fe:dd:00:77:f3:b5:40:da:6d:bf:88:eb:8d:bc:32:
c1:e2:65:55:b3:8e:d7:b8:4c:b4:c3:93:f2:18:a7:
56:2c:98:15:dc:a5:fd:76:54:21:12:d2:a7:c9:d5:
0c:7e:a8:e3:57:09:e4:a5:02:8a:ee:a1:c9:d8:74:
b4:25:68:2c:11:a8:32:84:6a:0a:5c:aa:bc:3e:91:
c1:f2:30:40:43:14:bb:e4:f5:cf:eb:ab:5a:33:96:
34:57:c9:23:b9:8d:5b:13:1b:61:d6:57:81:cd:c0:
45:67:a7:11:75:2f:25:8c:46:9d:59:0e:bf:91:cb:
de:d4:48:e9:43:d5:29:a6:d9:c1:b0:43:4a:b6:64:
3f:63:7e:0f:f4:cf:ef:d7:a3:6a:2c:17:9e:9c:c9:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FA:E9:14:86:E1:A1:E7:66:21:57:95:E6:2A:4B:0B:A5:E8:D5:BD
X509v3 Authority Key Identifier:
keyid:FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:84:4a:63:98:7a:16:a7:ea:d9:9f:bd:65:6e:ac:75:69:42:
72:7c:1a:24:61:60:01:32:3f:a4:45:1a:97:ea:21:39:11:b2:
ff:66:0f:d1:e0:3a:0c:48:d1:3f:17:d3:80:4d:58:25:1f:ca:
60:4b:ad:33:63:85:b3:a3:7f:a5:df:aa:79:c2:2a:6a:02:8d:
9b:71:12:bf:f2:cb:35:b1:f8:e3:63:0c:a4:1e:39:a7:e5:19:
e7:1d:23:51:a3:2e:a0:2c:25:ad:2f:f2:12:ca:eb:ea:f6:eb:
3a:d4:57:e0:3b:ae:41:bc:8b:ea:cc:af:42:d5:e5:3e:57:39:
fb:cf:fa:40:27:46:63:50:83:10:e1:d1:ac:f1:c7:12:09:cd:
3d:79:73:a1:0e:b0:39:80:55:0d:89:9a:53:a8:b8:73:40:66:
33:ff:b3:0a:25:c6:f1:da:89:06:28:6a:85:f6:da:4e:05:52:
23:14:38:4e:20:20:3d:21:70:84:d3:f6:2e:77:d0:ea:be:5c:
8d:f3:0a:4d:b7:ae:a3:61:2a:97:3c:7f:0b:a7:8b:d8:a7:6c:
18:39:c4:fe:1b:e4:ea:40:2e:df:52:f2:38:21:c6:15:b6:6d:
bc:bf:c2:30:7c:9b:de:d0:2e:cd:11:ed:75:dc:82:7c:86:0d:
12:e1:52:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:12:53 2025 by rpki-client