Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
File: ClCzt81M47FFt1O_cXmpVczSkl0.mft (raw, json)
Hash identifier: ZdrmVTnJ7qSvce8mdPM21ddkZ9vhOEWy6dU+aeVOg9g=
Subject key identifier: 74:CE:AD:93:CD:47:82:7B:26:2E:84:7E:B8:FB:EF:53:42:1D:71:AF
Authority key identifier: 0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D
Certificate issuer: /CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
Certificate serial: 0196C83B0554C0979E4764FA2589EEAD1B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
Manifest number: 0588
Signing time: Tue 13 May 2025 06:00:33 +0000
Manifest this update: Tue 13 May 2025 06:00:33 +0000
Manifest next update: Wed 14 May 2025 06:00:33 +0000
Files and hashes: 1: ClCzt81M47FFt1O_cXmpVczSkl0.crl (hash: bF1/ajAJYPMDBcnzGqJgjlGi8CWcpwbf3ZbiFAdeZ0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3b:05:54:c0:97:9e:47:64:fa:25:89:ee:ad:1b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
Validity
Not Before: May 13 06:00:33 2025 GMT
Not After : May 14 06:00:33 2025 GMT
Subject: CN=74cead93cd47827b262e847eb8fbef53421d71af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:26:d1:93:b2:c1:85:e0:d3:82:cc:3f:2f:fc:
02:51:44:e6:aa:a9:7f:df:58:27:1c:d3:42:6d:46:
6f:a1:78:87:7e:f7:ac:22:f1:e8:78:23:4b:46:2a:
24:49:cf:58:4a:ae:67:e9:6b:01:87:58:ac:4a:76:
28:22:8d:bc:1a:02:f6:e0:ef:71:1a:f9:5a:b2:b5:
c3:ff:3f:07:b6:ad:b0:a3:b9:ca:e5:4b:0e:7c:32:
ad:95:ec:f4:39:5c:31:8f:5d:3b:1f:c5:81:d0:2e:
e0:1e:db:88:fb:de:f5:39:6b:37:25:31:2e:eb:c7:
40:ea:17:82:0a:1a:ef:67:68:d8:aa:df:d9:27:1f:
96:e3:84:09:3c:43:b3:d2:c5:9f:1b:d0:b9:c1:2b:
df:a6:91:b9:af:51:c9:0c:02:88:b6:9d:6a:99:a8:
e7:81:a4:30:36:cc:e2:21:2c:1c:f9:7b:3a:cc:9c:
54:bb:64:96:07:36:2b:a9:89:7f:dc:c2:4d:77:2f:
98:1b:71:5f:8b:0e:35:21:30:52:f0:9d:41:99:f0:
25:9e:d4:44:9a:8a:02:4b:c9:aa:fd:70:30:28:90:
a1:50:d6:4d:64:87:ac:99:4d:59:68:79:b8:10:d5:
51:72:9f:27:0b:93:fe:35:7c:5f:d9:8c:08:80:44:
d8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CE:AD:93:CD:47:82:7B:26:2E:84:7E:B8:FB:EF:53:42:1D:71:AF
X509v3 Authority Key Identifier:
keyid:0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:8c:5a:88:01:a1:f9:88:ef:7e:0b:94:59:91:ce:db:0e:48:
c5:1a:cb:aa:16:a1:43:ba:61:ed:16:5c:73:c3:d4:ea:d3:fd:
51:80:83:4f:9d:46:f8:14:3c:a0:89:0f:50:11:95:63:c5:18:
2d:ef:ca:b8:fd:b8:3f:9d:b0:8b:37:56:e8:f3:73:08:2a:b6:
6a:15:af:8e:e9:01:32:14:02:60:c1:e2:f4:d7:48:90:4a:79:
ac:83:f8:f6:9d:1b:43:31:e4:ca:18:bf:6d:ea:17:ea:72:89:
86:83:d6:c8:cf:a9:9a:e4:35:5c:a9:3a:00:f3:86:ed:26:25:
c7:10:0e:46:60:4c:8e:9f:a6:57:1b:a6:b3:a2:cd:18:48:89:
ee:30:84:01:3f:4c:95:df:f6:61:72:a7:1c:a1:5b:95:42:f2:
81:ce:5f:5a:c2:a0:bb:bd:7d:01:b8:dc:2a:7a:cc:7e:a9:fa:
0e:48:aa:b9:fe:2c:57:3c:c0:49:f6:6a:a1:c2:f0:5f:df:f5:
23:ee:bc:63:9a:23:5c:b1:14:18:19:96:19:c0:af:c8:f8:ef:
42:fd:b3:ac:bb:52:9f:d7:82:2e:de:f9:8d:45:3d:8d:0d:e0:
5d:06:2e:30:b6:35:dc:26:22:27:59:d3:9d:46:98:b8:d8:d1:
61:39:d5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:36:55 2025 by rpki-client