Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier: jtrWtR4c4O+fPSZACPtW7dUi88c2F0ffslPYMUIzLdw=
Subject key identifier: 5A:DF:14:DC:4C:B3:6B:13:CA:45:59:C4:10:34:99:15:F7:6B:70:8E
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial: 0196D1E2E8BF43E3FC0B48237A5792B61653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number: 04C0
Signing time: Thu 15 May 2025 03:00:30 +0000
Manifest this update: Thu 15 May 2025 03:00:30 +0000
Manifest next update: Fri 16 May 2025 03:00:30 +0000
Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: efKbdZF6WGx8wp4aSubY5NsI4bkzwvV1vwHSwGPQQRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:e2:e8:bf:43:e3:fc:0b:48:23:7a:57:92:b6:16:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Validity
Not Before: May 15 03:00:30 2025 GMT
Not After : May 16 03:00:30 2025 GMT
Subject: CN=5adf14dc4cb36b13ca4559c410349915f76b708e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:a8:f9:e7:12:b2:df:4f:72:4a:49:57:9c:
b4:d1:87:4c:37:4b:e3:6e:c6:61:ee:fd:ce:c5:de:
ad:e3:62:92:2b:5c:24:32:b9:e6:d0:d8:21:b2:31:
ec:cf:c6:13:ec:32:3b:bd:d0:0d:13:ff:fa:22:12:
56:c0:f8:c8:65:aa:12:ac:c0:65:26:48:2d:89:b6:
2e:1d:e9:98:66:c9:2a:9a:29:92:70:43:1d:0c:16:
63:f0:5c:b8:10:c6:e2:9d:5c:6c:5b:15:9a:8e:8a:
f8:32:b6:fe:b4:b0:64:a2:9f:d2:e2:f8:a3:5c:76:
88:08:39:3b:14:b3:cf:bc:e7:27:b0:dd:92:1b:e6:
fe:46:0f:7a:45:cb:e7:52:db:08:02:dd:4e:a2:da:
ec:34:2b:c4:41:9a:b6:60:07:b5:dd:18:23:f6:b3:
79:70:56:3c:59:08:5e:4d:90:06:35:e5:b6:f5:b3:
22:f8:88:8b:40:4d:c0:46:1a:c2:0f:94:2a:3b:5f:
d4:61:f3:2a:77:aa:bc:f1:a3:26:47:40:f7:be:cc:
b7:6e:ef:83:24:8b:49:32:05:44:39:80:96:47:64:
f2:3b:61:e4:d7:46:d9:1d:07:09:96:a4:13:0d:97:
7a:1a:cf:c4:07:3c:bb:da:a0:db:5b:a1:92:86:2d:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DF:14:DC:4C:B3:6B:13:CA:45:59:C4:10:34:99:15:F7:6B:70:8E
X509v3 Authority Key Identifier:
keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:81:4e:a6:af:5f:88:e0:85:dd:48:a0:42:2f:a1:4d:f9:54:
6b:ca:d6:67:b5:e8:8e:d3:d2:24:5a:97:60:dc:ca:b7:e8:ae:
7d:82:0e:b1:05:fe:aa:21:28:15:06:15:7f:39:c0:d6:e2:37:
2b:4d:90:39:bf:09:e6:16:ef:bb:4a:08:69:7d:1f:d4:c0:4b:
64:84:8e:89:27:0f:08:22:e6:70:d8:52:8b:c5:82:ef:12:09:
c9:6b:42:31:26:05:c7:1c:d1:67:8c:1c:63:82:c0:fd:fa:42:
89:09:c4:8f:9c:81:37:fc:20:5f:39:c2:d9:83:ab:80:9d:e4:
3b:51:a0:3e:73:7a:1b:c8:be:34:51:40:6e:79:e0:35:c2:25:
d8:71:9c:11:31:07:cb:5b:ed:bf:f8:2c:74:57:cb:22:df:fa:
16:5a:46:6c:4d:42:64:57:18:f4:cf:67:a0:9a:b7:89:01:3a:
39:18:93:ae:25:3e:e0:2b:77:94:bc:7c:fe:52:92:fb:26:ca:
25:7c:b1:16:98:f7:12:a9:6b:f4:e4:f8:54:52:26:3e:7d:ac:
c1:a1:22:7a:e8:7f:ab:95:f7:79:fd:2f:10:0d:a4:fd:61:d5:
f4:8b:93:0c:60:ef:84:c9:e8:0a:76:0f:98:79:43:3a:91:ef:
92:56:c9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:54:53 2025 by rpki-client