Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
File: v5r7gj8fivhy55Pye2St74zU3Bs.mft (raw, json)
Hash identifier: Ughp4COuzHxp+AFjHob3NYpgVmEGY7vIiLSn+rrxAHo=
Subject key identifier: B4:82:89:31:A5:6A:A6:D0:2F:C7:C4:AE:17:63:A8:C9:98:09:D0:89
Authority key identifier: BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
Certificate issuer: /CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Certificate serial: 0196C081459F9A6D013EEE787086EC590296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
Manifest number: 02F2
Signing time: Sun 11 May 2025 18:00:19 +0000
Manifest this update: Sun 11 May 2025 18:00:19 +0000
Manifest next update: Mon 12 May 2025 18:00:19 +0000
Files and hashes: 1: v5r7gj8fivhy55Pye2St74zU3Bs.crl (hash: zJV49Qq/IPhWRr63Tg10KDHbTFkRiKwp2sqBXddUCv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:45:9f:9a:6d:01:3e:ee:78:70:86:ec:59:02:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Validity
Not Before: May 11 18:00:19 2025 GMT
Not After : May 12 18:00:19 2025 GMT
Subject: CN=b4828931a56aa6d02fc7c4ae1763a8c99809d089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:d1:91:45:04:a4:8a:36:83:5b:a2:c6:a3:
dc:4d:44:33:c9:40:f4:8f:17:21:9e:e4:dd:9a:5b:
cb:bb:17:fc:ca:ab:d1:98:49:34:d0:b7:0e:53:a6:
9d:a7:40:25:2b:66:c1:2f:46:6d:ce:9f:b0:fd:5d:
9b:4d:6a:db:ec:23:67:a1:3c:2b:b6:01:b9:6e:e6:
c0:b4:1a:a6:ce:9f:76:90:7e:bb:ad:5b:8b:46:79:
f6:58:50:a6:f6:69:c3:7d:ba:ce:4d:e5:f1:a8:b8:
af:dd:55:db:f9:db:54:1b:ff:0f:93:0f:37:3a:2a:
1e:9b:44:8c:2e:43:86:5a:64:0f:f3:46:dd:35:68:
8b:8e:b2:1d:ac:4b:e8:c7:c6:2f:60:20:f4:72:ae:
ce:3e:7e:29:70:d6:0f:c3:2e:a3:09:34:e0:f2:e2:
24:93:48:23:d5:84:34:3f:40:7e:13:03:40:73:83:
15:8a:ad:9b:20:47:10:30:72:20:1f:12:b8:7a:4f:
52:77:d9:93:df:6a:e4:b4:50:d8:39:31:64:c3:99:
80:dc:76:72:9e:3c:a2:c7:1b:bb:2c:a2:41:ad:a4:
5d:5e:08:0d:eb:0e:d3:07:84:84:3a:30:de:c0:6e:
95:d3:2c:f7:f7:a1:98:70:e2:1f:33:f8:95:22:bb:
f5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:82:89:31:A5:6A:A6:D0:2F:C7:C4:AE:17:63:A8:C9:98:09:D0:89
X509v3 Authority Key Identifier:
keyid:BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:34:b8:1e:b2:1b:bd:17:40:59:0f:cb:d3:01:92:0f:68:a7:
5a:e7:50:aa:69:31:50:36:d4:09:c5:3b:1f:ad:b0:ac:a5:f7:
9c:44:8c:e8:6c:4f:e1:96:90:86:26:a1:ae:d1:c6:04:19:f7:
39:dc:99:13:76:ac:87:1e:b0:fa:86:a1:b3:cb:95:ce:dc:b0:
a6:d9:26:18:82:09:bb:66:64:f8:0f:95:3f:db:eb:f5:d9:65:
bb:b1:11:91:5d:b6:ff:cf:82:18:f8:0c:9d:87:5e:ab:b3:29:
d0:80:ee:b6:5a:8a:38:fa:2d:4a:89:a5:34:58:b8:e6:73:94:
bd:49:fb:51:7c:4d:a9:45:69:eb:93:68:6b:d5:0b:ed:60:9c:
76:3b:0a:d5:d3:0e:a5:bd:0f:de:b9:13:3e:34:79:7a:88:ac:
3e:39:28:f4:b7:1b:fc:1c:ef:18:30:09:52:c5:fa:ab:20:f0:
53:99:84:e6:17:1c:ef:00:a2:c0:52:49:bc:5b:76:05:d9:ae:
91:20:08:b2:f7:57:ff:86:1a:ed:08:29:0d:fc:45:bf:7f:ea:
3e:69:c1:4a:27:1e:3c:39:e8:61:1e:3c:16:a9:24:e5:9e:62:
e0:cd:72:34:04:71:24:ea:2f:92:0c:70:e0:42:e8:54:05:bc:
13:8f:1e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:00:30 2025 by rpki-client