Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
File: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json)
Hash identifier: y1evjs3sIUmP8f9vYL5WPqr/EC0RsQy75DHMkiQvwMo=
Subject key identifier: 5F:A5:F1:92:59:AA:96:1D:1F:69:C5:DE:F5:EA:D8:F2:3C:4F:85:C8
Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
Certificate issuer: /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Certificate serial: 0196B3D95A65E5A9B763713B6C8BAD808D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
Manifest number: 01CE
Signing time: Fri 09 May 2025 07:01:28 +0000
Manifest this update: Fri 09 May 2025 07:01:28 +0000
Manifest next update: Sat 10 May 2025 07:01:28 +0000
Files and hashes: 1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: Lij7RBqaTtxo7xuKKfAlCnyf8jZKxu5Wv/he5RFpt8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d9:5a:65:e5:a9:b7:63:71:3b:6c:8b:ad:80:8d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Validity
Not Before: May 9 07:01:28 2025 GMT
Not After : May 10 07:01:28 2025 GMT
Subject: CN=5fa5f19259aa961d1f69c5def5ead8f23c4f85c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:58:8c:4d:2b:de:ce:f9:f1:e8:1b:7f:03:
01:60:7d:50:19:d2:7a:3e:78:e1:82:91:6b:f9:a4:
86:b5:93:d8:e5:9e:81:d3:63:4e:0c:c8:13:1e:4b:
da:7e:a0:f7:39:14:97:84:6a:f9:a5:61:ba:bd:ed:
fc:48:4a:ad:ab:aa:c4:a9:15:88:86:42:0d:02:d9:
b2:71:6c:11:bc:83:dc:17:ed:dd:17:c6:b4:69:4f:
d2:13:c1:67:ef:b1:7d:13:93:54:a4:f3:8f:b7:9a:
99:17:d8:1b:9a:d9:0b:b7:3e:c9:17:49:2b:a3:26:
cb:e4:10:4a:c6:14:90:e4:fd:14:77:e1:b2:03:07:
83:a1:e1:e5:60:cc:9c:77:8b:11:b1:45:45:b0:6e:
92:d8:5a:a5:cd:44:29:1c:8f:3f:24:0e:2e:4b:59:
c9:4e:2f:f6:f9:67:f7:12:fb:a0:57:43:ae:80:cc:
6a:a7:1a:fa:8c:bf:cd:f1:a0:dd:e0:f0:56:aa:f4:
a2:6a:ae:1f:47:7d:9f:4f:44:a5:3e:7b:7d:b7:c2:
98:a3:ff:f4:35:90:d3:17:58:29:15:17:6c:18:d5:
29:c3:14:32:68:14:09:a3:90:28:81:56:d3:a8:79:
f4:6f:09:4a:96:bb:ff:98:15:e6:79:9e:5b:22:75:
3f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A5:F1:92:59:AA:96:1D:1F:69:C5:DE:F5:EA:D8:F2:3C:4F:85:C8
X509v3 Authority Key Identifier:
keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b6:27:c8:eb:0d:94:49:20:c3:64:ba:de:97:0d:63:61:8f:
e1:e3:ef:f8:b9:79:a6:91:89:4a:e4:54:2f:59:1a:07:81:b5:
b7:f8:db:fa:85:32:cf:68:55:0e:07:5b:e7:9f:75:06:ff:00:
0e:70:33:7a:f8:79:77:c0:74:c7:6b:2f:e7:2f:2e:db:f7:63:
69:8b:0b:32:22:63:72:48:14:74:34:59:e4:63:c6:0d:b6:4d:
49:43:82:4b:3b:cc:f0:b4:67:3d:cd:21:4b:4a:08:8d:68:eb:
41:09:98:4b:a1:29:b6:15:6d:19:e7:e7:03:dc:ff:e9:e6:b8:
61:f8:45:9d:60:80:69:00:aa:78:6c:d2:56:f9:a5:43:06:90:
63:4f:a9:8b:74:99:c9:b7:51:69:f4:ee:2a:a1:92:d0:dd:c5:
80:22:dc:9d:3b:d8:ba:b6:aa:58:b9:9e:c8:32:9e:c1:5c:59:
57:62:d5:ac:51:b6:c5:47:f2:88:9f:b9:95:2c:94:99:a4:6a:
58:77:f6:7b:d9:3c:a2:0c:77:6a:98:f7:5d:db:10:c1:31:a6:
d3:83:06:fc:b3:f7:ed:69:1b:71:04:36:8f:a8:34:8a:d4:8c:
82:b7:ca:4c:1f:d2:a1:03:84:a1:ed:13:67:d6:95:ab:06:b0:
57:b0:78:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:20:09 2025 by rpki-client