Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
File: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft (raw, json)
Hash identifier: 8hN4ppXGziUjsJ7f6Otdi5i8fGjgtW7MPIN3guiJwfU=
Subject key identifier: 8E:51:DD:00:52:10:02:31:7E:71:D5:B1:0B:EE:F4:F1:40:65:11:25
Authority key identifier: 9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69
Certificate issuer: /CN=9ab0240150ac0d9df3bb9c572e31c87585882069
Certificate serial: 0196B710B3BFB5ACE58A3CE25C1330E26650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
Manifest number: 0570
Signing time: Fri 09 May 2025 22:00:47 +0000
Manifest this update: Fri 09 May 2025 22:00:47 +0000
Manifest next update: Sat 10 May 2025 22:00:47 +0000
Files and hashes: 1: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl (hash: doPWxG/TNLhmje4jVPIlcDpRWP8P4Quwx8qDqd/bsRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:b3:bf:b5:ac:e5:8a:3c:e2:5c:13:30:e2:66:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab0240150ac0d9df3bb9c572e31c87585882069
Validity
Not Before: May 9 22:00:47 2025 GMT
Not After : May 10 22:00:47 2025 GMT
Subject: CN=8e51dd00521002317e71d5b10beef4f140651125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:54:50:97:ff:5f:e2:8e:7a:24:98:b7:96:
03:c6:95:6b:6f:48:98:3c:9c:29:bc:4c:25:3b:25:
38:cb:ed:c1:ac:ab:44:9b:41:78:2f:cb:ac:92:dd:
81:00:6a:b7:e3:9e:9b:de:13:ea:48:97:81:cb:41:
8c:e0:20:59:12:8f:f4:10:74:af:91:f3:fe:ad:c4:
fd:ad:70:c6:49:23:3b:27:b5:a8:61:b0:21:c8:6e:
7f:24:83:3d:d2:94:43:3f:f5:f0:df:94:21:2c:a8:
e0:e7:5b:31:2f:95:74:82:28:47:65:5d:e7:5c:21:
51:e0:96:7a:42:8a:52:2e:8f:c7:7f:de:da:14:1d:
c0:99:f3:eb:33:1d:1a:96:45:61:ec:83:a6:ca:34:
02:ee:a2:5b:e4:7b:da:64:e6:c1:c9:98:c8:d7:e3:
bb:6b:d1:5a:20:fd:cd:9f:c0:ca:90:61:4e:e7:18:
10:eb:46:67:99:ec:24:8d:b4:07:33:2b:31:dd:a5:
78:7f:53:65:21:76:9e:32:61:f2:89:83:a2:99:b7:
d2:81:b8:69:66:8d:ee:97:1a:25:a7:e9:51:05:a6:
f5:2b:4c:e5:7b:ea:44:ef:a4:66:4b:56:4b:51:f2:
0d:c0:46:af:53:0a:38:f8:bd:ca:9a:7c:19:42:61:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:51:DD:00:52:10:02:31:7E:71:D5:B1:0B:EE:F4:F1:40:65:11:25
X509v3 Authority Key Identifier:
keyid:9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d3:76:e5:3c:b9:84:74:e2:94:95:de:a0:6a:03:1b:b7:f1:
6b:9f:83:22:e8:c2:15:62:57:06:90:05:b8:00:fd:2a:52:a8:
70:ce:7d:19:c1:1a:97:ad:10:ef:bb:ea:12:ab:1a:35:c7:b0:
83:e7:5e:9e:90:51:bb:24:6e:0d:f8:34:ba:e3:bc:bc:1b:61:
5d:29:4d:40:9f:9f:99:af:af:4b:e5:9b:3b:12:5b:dd:9c:7d:
dd:10:00:e4:06:42:8f:ef:df:f7:e7:25:b3:55:2c:16:13:df:
d7:52:8a:bf:ee:cf:5a:40:63:16:29:bf:3b:de:41:f2:db:92:
9a:49:fe:c8:26:90:88:38:03:ca:27:24:f2:5b:e8:bd:fd:c7:
3a:9c:c8:c2:eb:0c:d1:0a:d3:ec:ee:70:57:98:0c:86:de:51:
42:07:8c:df:0a:3c:e3:af:ac:d5:af:bd:d5:89:a2:ff:7c:fa:
cd:07:fe:c1:3b:e2:24:ca:19:ba:67:b4:07:83:7a:30:29:13:
61:d9:49:71:09:76:19:79:c1:c2:76:16:c2:d5:27:03:e4:a9:
a2:1d:db:49:11:6b:fa:52:2b:c0:14:c3:42:64:37:8f:2a:b9:
38:bb:f8:b8:3d:68:00:7b:1a:7b:40:d6:71:5d:e1:7d:a5:75:
f4:8b:a6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:00:08 2025 by rpki-client