Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: FUP75DAjbO3O6EVQesvAi313pbIdmEIjuUfxCSCUoRo=
Subject key identifier: 1F:A3:3A:22:E9:34:04:2F:2A:E1:63:DF:AB:E9:C0:C2:FE:64:37:DD
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 0196B521CE0FC780082F2F831FACA8F3B63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 147F
Signing time: Fri 09 May 2025 13:00:13 +0000
Manifest this update: Fri 09 May 2025 13:00:13 +0000
Manifest next update: Sat 10 May 2025 13:00:13 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: a1PbJYzSkD9tA91A/1q/vJmwUcKKUXTHXrrgWIrWMlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:21:ce:0f:c7:80:08:2f:2f:83:1f:ac:a8:f3:b6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: May 9 13:00:13 2025 GMT
Not After : May 10 13:00:13 2025 GMT
Subject: CN=1fa33a22e934042f2ae163dfabe9c0c2fe6437dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:b7:a7:c0:5e:2a:b6:b6:81:8a:15:3d:1b:
c1:c3:93:26:e2:f1:56:e0:4e:25:39:cb:2d:50:58:
db:4c:77:d4:76:d3:aa:32:d4:3f:9c:5b:f1:1e:4a:
d6:fb:84:0d:11:cc:bd:fb:cb:fd:6d:b4:1a:e4:57:
a7:e6:d0:a9:e3:e0:ce:69:79:30:c0:ba:b6:d1:73:
e7:f3:66:9a:15:32:2d:19:91:6a:96:77:d7:d8:af:
84:4e:66:0b:52:ce:45:c4:f3:07:44:6e:87:54:ee:
d1:54:f1:a8:88:8f:4c:98:1e:30:2e:48:e6:05:e3:
bc:17:69:df:45:db:bb:a1:b8:7e:fc:54:f0:5c:c5:
cb:a1:79:9e:e8:43:b6:0b:4e:2f:5f:c7:73:d7:21:
87:65:43:ee:04:75:f5:23:e6:2a:ad:23:21:69:6a:
14:4e:64:a0:36:9e:37:6b:2a:0c:e9:8d:7c:19:3e:
cf:a6:d5:43:d2:13:1d:f4:8f:33:44:af:66:89:ee:
9c:09:f5:46:75:23:0b:4a:50:ee:17:96:37:b8:74:
5a:28:dd:29:f9:2f:90:e7:6c:f9:a2:cb:17:3d:cb:
f1:e4:52:24:4f:94:10:81:82:cb:54:c9:fd:2e:81:
99:cd:14:78:62:bf:74:ad:b0:5d:d9:8d:fb:cc:5e:
6f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A3:3A:22:E9:34:04:2F:2A:E1:63:DF:AB:E9:C0:C2:FE:64:37:DD
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:19:58:2b:83:88:87:e1:92:6f:f4:4a:22:8b:93:1e:76:5b:
ab:7b:ad:67:49:70:a7:38:c4:4b:e5:0c:7e:95:5e:1a:34:b3:
3f:90:41:e7:0d:b3:8c:72:50:82:23:f7:f4:ac:f5:85:16:04:
04:c9:ee:ff:3d:9f:85:8d:b3:5f:bf:0f:33:30:77:b9:8c:53:
48:87:4f:32:57:c4:40:64:73:52:51:79:68:e8:7e:65:e1:97:
f4:b0:04:15:78:55:70:c2:dc:29:e6:01:85:86:d4:70:5f:49:
02:2b:90:53:6c:55:3a:cd:e9:10:64:1c:14:99:0f:f9:a5:26:
79:42:be:00:d4:11:39:fb:8b:1f:28:b5:55:fb:bc:43:36:c9:
ff:d6:ef:82:9a:64:d4:ab:1f:1a:2a:30:e6:e2:1b:38:98:9f:
a5:51:c0:45:b1:95:d7:54:96:65:38:f6:08:04:ec:95:9f:4f:
14:28:03:5f:e9:74:a9:1a:62:b6:10:e0:25:58:c1:d7:b5:aa:
b0:55:c3:17:cd:13:df:2e:24:5c:7c:3a:19:45:8b:d3:3e:99:
1a:b0:ed:dc:89:b6:ae:15:f1:b2:83:9f:78:47:7c:88:81:f9:
d2:04:fb:40:53:8d:1c:32:d5:4a:07:f9:e5:73:6f:95:ba:3c:
2a:f3:b0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:28:09 2025 by rpki-client