Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
File: Rii90MjhtQTSlPijkEyNV65jg_Q.mft (raw, json)
Hash identifier: sr2Z4/BIlpPaFJZMG2UJ6MLQEckjzdquxCNywD8m54Q=
Subject key identifier: FF:F9:40:66:F6:6D:05:D2:FC:CC:8D:E4:9A:68:BC:E3:BD:E9:52:CA
Authority key identifier: 46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
Certificate issuer: /CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Certificate serial: 0196C15D3AE6CF8728E12A94992A60990CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 22:00:34 +0000
Manifest this update: Sun 11 May 2025 22:00:34 +0000
Manifest next update: Mon 12 May 2025 22:00:34 +0000
Files and hashes: 1: Rii90MjhtQTSlPijkEyNV65jg_Q.crl (hash: Q1veM3gg8VAnasLdcEY+E3lmXlUAg+4uN8/UsZy3eiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:3a:e6:cf:87:28:e1:2a:94:99:2a:60:99:0c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Validity
Not Before: May 11 22:00:34 2025 GMT
Not After : May 12 22:00:34 2025 GMT
Subject: CN=fff94066f66d05d2fccc8de49a68bce3bde952ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:ab:ef:c7:0a:46:00:1b:a3:ba:63:43:1d:
dc:8d:48:ce:11:73:ee:d6:20:44:74:a5:b0:10:f0:
1a:2e:98:67:6e:c0:84:04:0c:da:71:2d:f0:33:77:
06:17:f2:ec:52:9e:41:8b:2c:d2:e7:b2:68:9c:ee:
20:2e:65:45:37:94:33:1f:69:45:7a:95:14:1f:83:
f1:73:d2:7f:5e:07:15:59:49:05:66:6d:8d:0a:02:
99:0d:e7:24:03:bb:7b:4f:62:a6:84:5d:c0:1c:16:
ae:2a:63:34:e2:1a:59:14:9d:f1:4e:d0:ad:c3:98:
ea:e5:b1:40:22:9b:0b:66:93:d3:75:e6:e3:07:ed:
4b:02:35:c7:9b:99:91:1f:7e:58:e9:aa:b7:56:45:
0c:a9:b7:a6:53:ad:68:3e:4d:c2:89:5d:55:e9:7d:
bf:5e:eb:31:a7:e0:ba:a4:f6:fa:13:ea:69:19:9f:
97:22:d2:ee:14:02:29:96:fa:ef:3d:e1:0a:f8:d3:
86:92:5d:26:1e:c3:bb:25:d4:1a:7e:73:23:d7:61:
6e:81:ae:52:8b:78:85:74:b9:dc:f0:c5:b7:f3:18:
49:32:48:81:3c:43:bd:3b:b1:ca:b4:37:47:16:1c:
e4:ea:41:47:28:5f:61:76:cc:2f:1b:3a:88:b2:e4:
69:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F9:40:66:F6:6D:05:D2:FC:CC:8D:E4:9A:68:BC:E3:BD:E9:52:CA
X509v3 Authority Key Identifier:
keyid:46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:27:73:34:95:bc:71:59:0d:9a:52:be:55:18:fd:bf:0d:7d:
72:43:0e:1f:4a:4d:80:86:83:52:ca:2c:db:81:fb:83:fe:09:
62:a3:60:d3:0e:84:a1:f9:76:49:29:14:cb:8c:04:b7:9a:eb:
c3:4c:f2:58:8a:49:54:4c:8e:63:dd:f6:8f:2c:55:89:59:6c:
30:4a:fb:1b:04:c3:41:09:67:da:dc:27:b1:30:3c:b1:46:33:
f8:48:31:9b:1a:fc:b9:f3:e3:46:0f:87:17:ab:f2:92:0f:c6:
51:0f:d2:e0:8b:9c:f6:fd:c2:a1:3a:20:e1:8f:30:04:21:67:
74:d9:e8:7f:a0:f7:d4:44:8e:03:5f:14:f9:b3:28:d6:6e:ae:
fc:00:56:0e:8a:2d:0e:3d:b4:81:4c:53:c7:af:c3:51:80:99:
74:94:b4:8f:09:9f:f5:c0:52:ab:f8:d4:b1:ba:26:4e:a7:96:
de:0a:69:e7:74:06:da:24:ff:09:fb:98:9b:1a:d3:94:5f:e8:
a4:64:38:a9:53:6b:e5:2b:11:1b:a0:45:69:72:40:14:a2:1f:
8f:c7:aa:94:63:5b:c1:df:53:c1:32:c5:a4:a3:01:9b:dd:6d:
db:63:09:06:5a:25:05:7b:40:9d:6a:c2:45:42:c3:35:08:df:
ff:37:20:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:32:44 2025 by rpki-client