Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
File: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json)
Hash identifier: YDcABmt+MGZdqoFL3mVxFI/RzXyxMOrIWDFp6NFsPMY=
Subject key identifier: 64:03:12:A1:9B:ED:DF:40:DC:95:28:64:C3:29:89:67:45:FC:5E:81
Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
Certificate issuer: /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Certificate serial: 0196D2BE557707048719EF8281D1214382AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
Manifest number: 120E
Signing time: Thu 15 May 2025 07:00:11 +0000
Manifest this update: Thu 15 May 2025 07:00:11 +0000
Manifest next update: Fri 16 May 2025 07:00:11 +0000
Files and hashes: 1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: VnYyBz4tFzakKspwFMVkGmDHjTrZdaw1segkNyB4IQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:be:55:77:07:04:87:19:ef:82:81:d1:21:43:82:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Validity
Not Before: May 15 07:00:11 2025 GMT
Not After : May 16 07:00:11 2025 GMT
Subject: CN=640312a19beddf40dc952864c329896745fc5e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:67:88:e1:32:b4:e5:fc:c5:fc:f6:05:c8:
4d:8b:60:cc:a3:38:3c:bb:92:2c:aa:80:f8:3d:d6:
11:11:6e:44:65:28:ef:c0:f8:5e:ed:45:e5:79:87:
81:f0:fc:51:d9:b1:79:a0:35:88:4d:d1:64:ad:2f:
79:9f:90:8b:e0:d5:52:bf:c5:e9:e1:0b:ed:22:b4:
5d:9d:1b:7d:4e:4b:94:2b:1f:24:bb:bd:e9:89:4b:
f5:4b:bd:13:7a:3c:08:be:4c:77:5e:7e:a1:d9:0c:
78:26:de:a3:81:b7:d4:09:8d:0a:ff:13:0b:27:8a:
15:25:b2:7b:ce:c4:35:ec:65:d2:22:26:a6:f8:25:
1d:b7:88:e6:d5:4c:b7:fb:62:2e:00:02:37:4e:e8:
7f:51:84:8b:44:ea:f2:39:e4:8d:47:eb:e3:63:9f:
1c:ef:5e:39:c0:ad:90:dc:e3:6b:97:85:2c:87:e4:
a8:5e:86:91:46:32:dd:c3:84:61:bd:21:01:04:a2:
29:f9:ef:5f:4d:0f:e2:07:18:77:d6:05:f2:c6:1b:
92:e6:a3:88:09:7d:ed:35:3f:28:82:ad:23:2f:c2:
c8:4b:33:05:f9:18:f8:d4:8c:a1:c1:f1:da:7c:de:
df:6b:b9:e7:07:ea:13:36:61:0a:cf:7b:cc:35:8c:
2d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:03:12:A1:9B:ED:DF:40:DC:95:28:64:C3:29:89:67:45:FC:5E:81
X509v3 Authority Key Identifier:
keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9b:30:11:3a:31:f1:b9:55:b7:17:15:df:83:7a:b3:e3:94:
f8:87:ca:55:e7:8d:d6:43:7c:67:a9:56:85:65:2e:73:02:54:
c3:18:94:94:d2:20:88:55:a2:e0:c2:a8:a4:16:c3:c3:ba:08:
0d:7d:5b:a1:78:1f:f2:29:ee:a2:6e:69:78:ed:81:68:95:a2:
86:75:42:93:36:6f:e5:fe:c0:9d:0e:b1:c2:3d:46:a8:96:d3:
48:b6:ea:b8:df:e1:7a:4d:3a:54:f8:6f:a7:41:cd:87:d6:fd:
06:aa:dc:e9:b6:f2:3c:2f:cc:43:70:fe:2d:c6:9b:f8:0f:89:
b1:8a:cd:89:09:1f:e9:4f:f8:db:df:bc:92:40:5e:4d:9e:0a:
57:0d:fb:44:89:01:6e:7d:2f:b8:9c:2c:29:f0:c1:61:eb:33:
3a:17:be:bb:3d:d8:d6:a4:d3:d4:a4:0a:a3:0c:7a:53:ba:cd:
d9:6e:12:b0:74:c2:30:61:d2:1f:03:90:72:fa:3c:c7:9a:8c:
f0:f8:fe:cf:3e:c5:1f:4d:cb:a6:8b:c1:c9:b0:bc:1c:f7:3a:
c2:a9:e3:0a:5e:24:26:5f:de:a6:43:f2:67:42:5d:46:37:15:
fa:7a:53:ea:ae:c7:b4:d0:e1:6b:ef:00:bc:cf:85:4c:32:02:
30:64:20:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:05:51 2025 by rpki-client