Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
File: s9nxe5jDqWQThWY7jNW3X-HwpJg.mft (raw, json)
Hash identifier: ellA3Y7KGSva+ODBWNeqJ5TussQuvNhQ4X4rh46PJ+M=
Subject key identifier: B4:3D:66:0F:E5:94:55:41:0F:4E:A5:57:D4:A8:4C:30:FF:F3:C3:0E
Authority key identifier: B3:D9:F1:7B:98:C3:A9:64:13:85:66:3B:8C:D5:B7:5F:E1:F0:A4:98
Certificate issuer: /CN=b3d9f17b98c3a9641385663b8cd5b75fe1f0a498
Certificate serial: 0196CB04D50E27042F29CFC50C38F70F8745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
Manifest number: 1536
Signing time: Tue 13 May 2025 19:00:13 +0000
Manifest this update: Tue 13 May 2025 19:00:13 +0000
Manifest next update: Wed 14 May 2025 19:00:13 +0000
Files and hashes: 1: s9nxe5jDqWQThWY7jNW3X-HwpJg.crl (hash: CxRvanwTJJ5C0Yjp+U2iNzSBXdFzxoDTrsF/G+gshws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 19:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:04:d5:0e:27:04:2f:29:cf:c5:0c:38:f7:0f:87:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d9f17b98c3a9641385663b8cd5b75fe1f0a498
Validity
Not Before: May 13 19:00:13 2025 GMT
Not After : May 14 19:00:13 2025 GMT
Subject: CN=b43d660fe59455410f4ea557d4a84c30fff3c30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:32:e8:87:23:fd:62:c0:78:c1:01:4b:3f:
7a:6b:09:ed:e4:fe:be:7d:1d:4d:9f:ce:b0:de:cb:
97:a3:a7:6c:cd:cb:80:fa:f6:d5:9a:ef:c7:db:47:
7e:c2:cd:5f:fb:d2:35:32:f1:25:d7:ff:16:b0:40:
c0:5d:fb:97:ff:07:08:a5:47:86:32:c0:2a:96:38:
2c:65:46:00:14:57:01:e4:8d:e3:17:2f:cc:e9:b2:
20:e5:3a:a7:02:72:54:5d:fe:8b:86:82:b1:97:4e:
b8:4d:6a:a0:8f:73:09:e8:b8:79:e6:e0:d3:2b:db:
c3:7f:41:bf:ba:12:ef:2c:3a:a9:ac:ac:6b:51:62:
8e:c9:f5:07:16:7f:2b:d0:10:3a:82:5e:d6:3c:6c:
50:5c:d2:15:62:98:46:4b:e7:52:ea:cc:0d:91:c2:
2e:8d:54:c3:ad:f0:e1:53:6b:c2:f6:e7:b6:82:96:
41:2a:ff:e8:97:b6:0b:50:98:9d:f2:52:52:1e:56:
c8:16:f7:86:42:63:5c:0c:e1:cc:37:61:51:db:14:
87:bc:2a:20:8c:f1:f6:fc:ad:6c:b0:fb:12:ac:96:
11:8d:c5:ed:03:9b:4b:81:b5:50:71:13:b4:aa:e9:
42:b6:75:b5:70:5e:c4:33:10:be:90:aa:c2:83:bb:
9e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3D:66:0F:E5:94:55:41:0F:4E:A5:57:D4:A8:4C:30:FF:F3:C3:0E
X509v3 Authority Key Identifier:
keyid:B3:D9:F1:7B:98:C3:A9:64:13:85:66:3B:8C:D5:B7:5F:E1:F0:A4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:84:5a:30:71:e7:b1:84:53:b1:2b:b2:91:59:58:23:1a:36:
1d:a4:1e:b2:fe:42:03:80:6f:99:df:57:67:a4:58:c1:9c:b0:
99:71:d7:1f:7f:5c:43:71:d0:6e:d7:e0:8a:5f:e4:d1:5b:c4:
7a:7c:62:04:0e:29:3b:60:6a:ff:cf:f7:2d:fa:57:ad:95:58:
cb:11:b0:f2:08:29:1e:20:ee:f8:ea:1f:1c:e8:5b:3b:a2:68:
a4:82:7c:b3:30:34:ba:67:33:03:d8:23:2f:a4:8f:bd:74:2e:
0d:cc:6f:1b:80:a4:0e:08:7e:3f:6b:1e:0c:0a:8c:99:da:69:
cb:d0:1c:49:d0:f1:28:77:6b:06:9f:54:20:eb:18:50:b9:1f:
94:df:0c:69:51:40:c6:c7:91:c3:a1:8c:b5:3f:40:1a:bf:89:
6e:3c:e1:03:e9:24:90:5f:6b:62:6a:93:f9:f7:26:08:e2:24:
17:25:9c:9f:cb:29:26:58:db:26:e8:04:eb:29:c1:7f:53:a1:
dc:a4:35:06:7a:73:c9:2d:fd:46:c5:a8:82:69:c7:12:0e:03:
d5:7c:4e:7e:b3:f8:be:d2:61:9a:f9:84:2e:35:d7:02:41:a9:
f4:f3:6c:82:c6:70:86:00:cb:44:16:2f:25:50:74:25:68:93:
06:c5:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:51:50 2025 by rpki-client