Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
File: cRcdWnbTurk3KszJJz66ffHFnPI.mft (raw, json)
Hash identifier: kJo2WsaePvYfpzRl9JKbmQemrZUgWM5nVTe+1K2je4w=
Subject key identifier: 01:66:FF:A9:DD:3D:39:A6:09:4D:10:56:79:A7:6D:EA:51:73:AD:E8
Authority key identifier: 71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
Certificate issuer: /CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Certificate serial: 0196B7B53463042FDE73C42165F179279A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
Manifest number: 152E
Signing time: Sat 10 May 2025 01:00:28 +0000
Manifest this update: Sat 10 May 2025 01:00:28 +0000
Manifest next update: Sun 11 May 2025 01:00:28 +0000
Files and hashes: 1: cRcdWnbTurk3KszJJz66ffHFnPI.crl (hash: 4WYmldYzn/ggfMDa3uxnKdq6nu41GE3drdWlH82K1cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:34:63:04:2f:de:73:c4:21:65:f1:79:27:9a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Validity
Not Before: May 10 01:00:28 2025 GMT
Not After : May 11 01:00:28 2025 GMT
Subject: CN=0166ffa9dd3d39a6094d105679a76dea5173ade8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:7c:2b:60:aa:5d:d0:0f:2b:00:12:50:6b:
bf:05:f8:c2:77:0e:ac:1e:b6:89:db:11:72:3a:bf:
0e:50:32:0d:36:7d:4e:02:f2:0c:cb:f9:77:24:3d:
91:d0:65:5c:77:62:e2:53:bd:e5:f5:73:29:7b:71:
90:36:2f:b2:91:11:97:dd:a6:74:ef:c6:8a:30:a2:
62:bf:25:43:f7:22:93:78:f1:68:7f:1a:8b:99:74:
7f:a6:37:13:3a:ae:e9:36:f5:39:f9:f4:eb:82:87:
4b:68:0b:fc:4c:de:21:49:04:df:75:bf:d9:7d:8c:
df:88:d0:ed:d9:99:27:9c:fb:e8:7b:4f:87:f3:e3:
91:a4:52:43:f6:7f:82:92:c7:5e:68:9e:e7:1a:ec:
ac:a9:03:4f:ed:58:f2:37:68:9c:39:8b:69:97:3a:
bb:5a:c4:2b:9d:fd:36:29:9e:53:82:1c:60:79:10:
cc:4b:fe:fe:42:51:e5:1f:17:77:2b:fb:96:94:1c:
49:b6:4f:0d:ce:59:79:59:75:ec:84:e6:fc:28:78:
a8:72:b7:2a:88:f7:ec:51:21:74:ee:86:ce:67:f1:
60:cb:3b:0d:2e:c3:50:91:2c:1c:ec:39:27:58:6c:
d5:67:00:e0:cb:da:ab:f6:99:7e:15:a4:c5:3a:f5:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:66:FF:A9:DD:3D:39:A6:09:4D:10:56:79:A7:6D:EA:51:73:AD:E8
X509v3 Authority Key Identifier:
keyid:71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:31:2f:35:12:8e:0f:59:4f:36:c8:6b:02:fd:31:77:53:c1:
43:ee:81:f6:58:00:8e:ec:51:54:a5:64:1d:ab:35:c9:4f:72:
b7:6f:8f:7a:85:50:86:61:a7:38:dc:5f:df:2b:fb:70:58:8c:
cc:ca:2f:9a:22:77:55:8b:4c:0c:ed:1d:fb:d7:4f:b1:78:32:
9f:bc:f2:93:90:95:8b:58:e0:01:c0:0a:40:38:54:f4:e4:90:
3f:5f:74:06:6d:a7:f5:47:7e:68:1c:40:ce:c7:ec:7f:05:8b:
9d:ca:f9:2a:5e:9b:24:2a:7f:ca:42:bf:2d:cc:f1:d7:0b:a7:
92:9c:77:3f:9a:e8:ff:4c:1f:c6:49:31:1b:c4:4d:81:f6:b8:
ea:ef:68:4d:6b:a5:cf:97:2b:af:1f:1c:7d:88:85:b2:d8:02:
c3:4b:41:f1:26:50:4a:d7:69:64:0b:bf:15:90:51:3a:52:e9:
e1:ef:5d:d5:8d:76:34:d2:15:f6:3a:02:cf:bf:10:98:10:86:
d2:8b:02:00:bd:18:e3:03:45:c9:2d:56:79:f1:9c:21:ec:01:
f3:6b:7e:5e:20:53:b4:09:83:cf:59:d0:95:0c:74:51:ef:90:
c1:76:95:df:da:35:1f:92:07:7d:fd:a9:02:df:e6:3a:9b:f4:
a1:0f:93:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:58:25 2025 by rpki-client