Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
File: d1xabqkPXz0AfBDkROO5Y7bTDMU.mft (raw, json)
Hash identifier: Gy9h+aY2UDkXzwWMUF7SdpGbGI8L7em1OO0d9xZ4QmE=
Subject key identifier: 98:8C:F8:56:96:0F:A5:65:81:AE:2D:0A:BC:D6:51:DF:52:F0:3E:CD
Authority key identifier: 77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5
Certificate issuer: /CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
Certificate serial: 0196BC6E438CF3AC826933F12B916D78DF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
Manifest number: 030D
Signing time: Sat 10 May 2025 23:01:04 +0000
Manifest this update: Sat 10 May 2025 23:01:04 +0000
Manifest next update: Sun 11 May 2025 23:01:04 +0000
Files and hashes: 1: d1xabqkPXz0AfBDkROO5Y7bTDMU.crl (hash: Q4Lcm9lIn4tg72jD412W4ZGftP3+DF00IMS5ULHg5cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:43:8c:f3:ac:82:69:33:f1:2b:91:6d:78:df:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
Validity
Not Before: May 10 23:01:04 2025 GMT
Not After : May 11 23:01:04 2025 GMT
Subject: CN=988cf856960fa56581ae2d0abcd651df52f03ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:6b:3d:3d:10:56:b6:4e:40:98:20:65:0c:
90:07:d7:e0:ce:80:ee:a3:39:7c:8e:8b:08:95:eb:
12:ad:73:bf:e1:d1:99:0b:a9:8f:04:4f:9c:52:d4:
fa:a5:70:ac:ba:b0:83:0c:46:b2:c3:aa:58:d8:97:
7a:29:e8:0a:68:b9:ef:4c:43:f1:b0:95:50:69:b1:
37:28:f3:24:86:18:1d:00:1d:73:80:32:b0:f6:12:
8f:cb:ed:3b:4e:38:ed:bc:ff:e3:30:77:7e:fb:dd:
7b:36:a6:c6:cd:0a:20:77:e3:62:e8:46:84:cd:4c:
38:ad:ea:33:f3:f8:df:b9:5b:45:a1:07:bc:5e:ca:
ef:41:4a:39:26:8f:60:c1:59:b1:0d:78:7b:89:43:
fe:d4:d6:c7:b4:d8:7f:8e:45:42:94:0b:9b:de:dc:
d0:60:16:36:3c:5d:bf:7e:36:c6:7a:1a:85:20:30:
83:92:af:ad:5f:65:a5:44:4c:8f:0a:a8:6f:fc:9a:
7c:a3:cc:c5:77:3c:7c:17:5a:85:a9:31:39:80:6d:
03:ac:33:63:7a:5e:a5:14:6b:61:db:e5:af:0c:c3:
f0:47:48:4a:04:fc:fa:09:b4:08:b3:b3:a0:61:02:
42:04:4c:ac:38:8f:d4:9c:bc:f9:ed:65:75:1c:06:
63:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8C:F8:56:96:0F:A5:65:81:AE:2D:0A:BC:D6:51:DF:52:F0:3E:CD
X509v3 Authority Key Identifier:
keyid:77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ba:80:80:05:c9:d6:44:8e:a5:99:41:26:7f:53:b5:90:c9:
ab:12:54:05:4f:31:da:8b:63:c9:5f:7d:dc:ae:1a:6b:d6:60:
e1:40:40:39:b7:ab:22:f8:b4:db:c2:d7:09:d5:f0:61:f0:e1:
55:2c:de:f1:44:9e:83:89:59:d4:66:b6:78:1a:aa:eb:d0:77:
b6:ff:83:1d:f3:0d:2b:6d:e6:d1:8c:43:e8:b9:2f:01:0a:11:
b7:24:fe:01:fb:df:0a:cf:b4:95:70:3e:69:8b:1f:0a:32:c9:
87:b0:6c:ea:f8:77:20:7d:f2:b9:70:3b:e2:85:f6:87:fa:f3:
8e:70:e1:24:ab:1b:53:b3:d3:70:9f:41:67:d0:e1:0c:95:5a:
73:0a:d9:93:13:4a:a0:49:8d:42:7a:bc:40:0e:8b:58:bf:2e:
73:09:86:23:bd:42:43:93:62:37:62:cc:28:05:68:17:8d:25:
e7:5f:56:5e:85:48:5d:45:d4:b1:ed:77:49:76:2f:52:66:ec:
1e:1c:56:58:41:bd:cf:2a:b2:5b:36:e8:86:f6:73:74:75:10:
9e:c0:74:27:6e:84:94:87:7a:7b:47:06:aa:92:02:c1:6d:61:
be:b0:95:1d:9e:c1:74:4e:25:93:9c:76:86:23:c8:83:90:05:
5d:34:11:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:27:44 2025 by rpki-client