Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
File: I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json)
Hash identifier: uGs4w0OY06trQi11ex7wr3ztlPpwc9pofHZQZdbyjSM=
Subject key identifier: 60:45:E9:66:D7:A9:07:09:44:8F:FA:69:CD:4E:D9:CD:00:35:5B:A8
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Certificate issuer: /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial: 0196CB3BE090779A57CCB3301E9350CDCB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
Manifest number: 125A
Signing time: Tue 13 May 2025 20:00:21 +0000
Manifest this update: Tue 13 May 2025 20:00:21 +0000
Manifest next update: Wed 14 May 2025 20:00:21 +0000
Files and hashes: 1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: r8lVnL81kldf8Vmus4jH0JgnEIRy8R8vDldv+y3MBJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3b:e0:90:77:9a:57:cc:b3:30:1e:93:50:cd:cb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Validity
Not Before: May 13 20:00:21 2025 GMT
Not After : May 14 20:00:21 2025 GMT
Subject: CN=6045e966d7a90709448ffa69cd4ed9cd00355ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:bd:b7:d6:7c:80:4e:5b:c8:17:87:3c:c6:
b6:1a:6a:88:56:4e:a5:81:37:03:7c:f4:85:d2:29:
e0:e5:ef:60:a5:7a:03:d2:58:49:18:b4:92:f0:7e:
0c:88:80:59:41:3b:ca:a7:78:e3:23:b3:7e:28:1b:
2a:1e:ac:66:d2:ce:df:bd:cc:5c:29:4e:84:53:bc:
76:0f:b9:d7:d7:7e:82:60:2a:81:d0:59:4e:9f:12:
3f:40:e5:f7:b0:71:79:20:33:e9:2c:95:66:62:a9:
ec:e8:46:fd:70:1c:3c:2c:a5:cd:54:f0:de:6e:fe:
a0:be:85:17:bd:ad:b6:88:6f:ce:16:a7:c2:2e:02:
55:3a:fa:9f:e1:46:7c:19:01:e6:41:ec:8f:31:13:
8e:2b:cc:ed:20:68:4a:3a:0f:e3:cc:9a:ef:6f:c8:
14:28:90:e9:e3:d4:da:a5:eb:82:be:c4:76:2c:84:
db:f8:a6:10:db:60:22:85:79:76:23:59:37:e0:4c:
2c:65:7a:70:6d:1f:9b:e1:90:1b:2d:01:f9:d7:2a:
01:bb:29:7b:1b:37:55:60:0a:f9:3b:be:02:33:0e:
91:94:c4:2d:3f:e5:da:2b:c0:70:0a:48:57:99:78:
7d:31:3f:6b:ce:ab:b5:4f:db:75:0d:a2:a1:a7:fa:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:45:E9:66:D7:A9:07:09:44:8F:FA:69:CD:4E:D9:CD:00:35:5B:A8
X509v3 Authority Key Identifier:
keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7c:f0:e1:ab:93:7d:d6:82:54:91:de:ee:7f:ab:c9:db:60:
45:cf:02:b6:84:b0:8a:0b:76:5a:ed:f0:03:cb:66:f6:cc:0b:
38:e1:47:2c:0c:ca:9a:42:09:cd:85:0a:8e:70:f0:4f:47:d3:
1b:aa:89:cc:83:0e:2d:54:0f:c9:17:96:c1:f9:75:79:32:84:
af:fa:1c:95:41:59:cc:23:e1:85:60:1b:64:9a:6d:18:fe:aa:
52:a8:b8:45:9f:46:60:37:22:c7:b3:11:7f:79:d6:8c:b6:52:
17:ff:58:c1:b6:99:78:c1:e7:49:20:70:0f:67:57:b8:5c:de:
56:91:65:3c:e0:34:12:0c:c8:f0:c4:d5:85:69:00:3c:c2:53:
cf:3c:69:b9:c0:5b:f5:f8:b0:77:cd:6e:6d:dd:64:8b:66:73:
3a:eb:cc:4d:62:d5:cb:97:a9:2c:96:dd:1c:e1:9f:89:ef:a5:
0b:42:5a:1b:99:8e:d9:07:51:75:55:95:3d:ef:cd:a3:0b:a0:
43:35:64:51:a3:fd:2c:11:9d:1a:45:af:df:c5:6a:2c:71:b2:
99:95:8f:50:9b:c8:a4:00:95:8f:1d:26:31:ed:d0:7b:e7:52:
49:22:19:9b:66:9b:97:fe:2c:1f:da:b1:ac:2c:0f:eb:0a:6a:
9b:4f:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:53:54 2025 by rpki-client