Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File: 9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier: 5NYcsK6aK6yYa4tFvqv7I6xl4zREC5c2mZxUygqGh90=
Subject key identifier: A8:02:4E:4D:E0:E2:30:42:8C:80:6F:09:92:F6:FC:BA:5B:B8:65:80
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer: /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial: 0196DCD4C95646D0088B46971D9927DD4504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number: 1541
Signing time: Sat 17 May 2025 06:00:54 +0000
Manifest this update: Sat 17 May 2025 06:00:54 +0000
Manifest next update: Sun 18 May 2025 06:00:54 +0000
Files and hashes: 1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: G4rGYoOsOFK47sAMIpEkLKwa3HU4eeJjH6X38GQoO5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:d4:c9:56:46:d0:08:8b:46:97:1d:99:27:dd:45:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
Validity
Not Before: May 17 06:00:54 2025 GMT
Not After : May 18 06:00:54 2025 GMT
Subject: CN=a8024e4de0e230428c806f0992f6fcba5bb86580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:20:b9:9f:96:b9:6d:92:22:4f:2f:19:de:
a7:90:ae:93:ea:78:1e:46:f1:fa:6f:a2:d1:b5:08:
f3:f2:23:d3:41:d7:45:63:1b:eb:1b:a8:2d:e1:0a:
12:73:77:ea:96:8c:7c:45:2e:af:fd:9b:be:8e:2f:
e5:60:7c:65:ff:1f:76:3e:bf:e9:64:37:4a:56:6d:
58:7e:a2:84:93:fd:fc:b0:26:2b:fa:ad:21:de:bf:
03:bc:16:7d:bb:6d:9b:72:af:c4:98:ee:8c:be:3b:
1f:2c:03:7b:17:b2:7b:10:c5:ad:d4:b8:0e:95:4a:
c2:c0:00:04:7a:c4:f8:d7:20:7d:96:5b:07:71:b4:
9f:4a:27:83:37:ff:63:6a:35:cc:35:73:8b:4d:10:
b4:22:a2:14:49:41:50:18:71:e9:69:4a:0c:33:8e:
10:9d:c3:c6:72:f8:8b:2f:ce:c0:6f:0f:b9:6c:6c:
cb:aa:a1:59:09:f8:de:14:4a:9f:e8:92:c5:81:ac:
c8:86:28:ee:4e:2a:a1:08:8e:cb:8c:ab:ed:ac:58:
de:de:0e:4b:65:ad:17:d3:9d:a2:2d:5b:0d:33:d9:
2f:79:f0:a5:9e:b9:f5:bd:3f:e5:98:29:a9:d8:94:
6d:30:b0:5d:e4:c2:52:3b:4b:3b:f1:b8:78:19:c1:
a7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:02:4E:4D:E0:E2:30:42:8C:80:6F:09:92:F6:FC:BA:5B:B8:65:80
X509v3 Authority Key Identifier:
keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ac:51:e6:53:8f:b6:a6:02:bf:f1:98:5b:f9:0a:99:1b:73:
c3:7c:c5:20:6d:a6:ba:d4:f2:2b:d9:a6:0d:af:a5:17:f3:57:
18:f5:98:cd:d2:60:b7:25:37:7b:a6:b5:7f:ab:d7:ef:38:e6:
56:fd:01:20:de:40:5e:09:51:11:14:cb:88:43:5e:16:b6:08:
69:c3:b2:96:0d:25:b8:c1:6f:66:88:af:1c:f4:06:28:ec:83:
ac:45:47:40:0f:f5:44:82:36:7d:8a:61:08:81:52:a9:a9:e3:
ef:ba:f3:67:91:9e:22:df:51:09:e7:4c:65:db:f2:17:c9:ae:
07:17:b9:25:7b:5a:d1:8b:98:09:f7:6f:21:a2:bb:e4:b8:7c:
35:26:aa:b9:fa:67:45:7a:7a:33:eb:7f:95:73:70:69:75:b4:
4e:2d:12:44:b2:d4:4a:59:2a:cd:93:f3:c3:67:8f:90:93:52:
67:87:78:7f:c7:62:15:59:6a:bf:20:ca:88:18:52:bc:bd:77:
79:d5:bc:80:72:f1:1f:22:2c:05:df:22:ab:b4:42:64:b5:53:
e3:80:de:b0:e3:21:1e:21:33:32:a7:72:63:d3:2f:33:51:f0:
6d:63:79:00:2a:af:46:2b:1f:f7:42:52:5b:19:6c:af:a3:8b:
b9:eb:cc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 14:00:45 2025 by rpki-client