Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
File: SXoXzvuUeLbK6PZdWfsepdB2LWg.mft (raw, json)
Hash identifier: kuwHVYSiuF66MGnr51lc7ANh+eK5dSVFkQ8SeR69qeY=
Subject key identifier: 81:DA:EA:BE:D3:5A:38:9D:A7:F4:C7:14:E3:D4:C3:6E:59:8E:A3:04
Authority key identifier: 49:7A:17:CE:FB:94:78:B6:CA:E8:F6:5D:59:FB:1E:A5:D0:76:2D:68
Certificate issuer: /CN=497a17cefb9478b6cae8f65d59fb1ea5d0762d68
Certificate serial: 0196AE0E21A68A38D63091C7329111BDFD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
Manifest number: 0967
Signing time: Thu 08 May 2025 04:01:23 +0000
Manifest this update: Thu 08 May 2025 04:01:23 +0000
Manifest next update: Fri 09 May 2025 04:01:23 +0000
Files and hashes: 1: SXoXzvuUeLbK6PZdWfsepdB2LWg.crl (hash: jAtM6KQlcdDBeFetwr8a+hvYVe21h4f3eBG0DtoDUjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0e:21:a6:8a:38:d6:30:91:c7:32:91:11:bd:fd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497a17cefb9478b6cae8f65d59fb1ea5d0762d68
Validity
Not Before: May 8 04:01:23 2025 GMT
Not After : May 9 04:01:23 2025 GMT
Subject: CN=81daeabed35a389da7f4c714e3d4c36e598ea304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:cf:20:98:6d:b8:f2:aa:be:07:f2:15:f0:
ab:35:c7:3b:46:8d:da:5c:06:a6:50:ea:39:8b:09:
4f:95:5d:50:b9:86:5a:65:51:d9:8e:ff:3f:46:1a:
23:90:b4:fd:b2:39:cb:70:37:45:59:82:6b:a6:20:
c1:f7:aa:b8:ea:88:12:e8:ba:5f:7e:a7:0a:e4:8a:
8d:d1:5e:0d:19:f2:82:91:1e:4a:8f:de:5b:7c:95:
fe:0d:ec:48:b0:e4:90:87:2d:a8:1e:09:d4:34:78:
7c:7e:28:83:db:aa:14:bb:22:52:8f:d3:b8:97:c5:
7c:68:3e:bd:a3:39:95:dd:8c:a1:4b:46:a2:dc:6b:
c3:d0:de:0b:b7:8c:09:53:1c:2b:48:0a:70:51:f8:
8a:cd:37:1a:64:17:aa:09:7b:ec:c4:35:5a:14:c5:
b1:28:a7:e2:b3:66:5f:ce:8d:31:1e:3e:ce:55:2c:
24:e8:01:e7:87:65:86:0b:b8:cb:17:5b:b2:8e:e6:
42:09:c7:eb:b9:6c:2b:55:61:ba:4a:7c:85:08:bd:
c9:8d:18:7f:1a:2f:1e:05:0f:6b:46:0e:cd:37:e4:
a3:d8:8f:73:f1:94:cc:21:56:48:ef:a6:78:05:a4:
68:a8:27:82:25:d6:d1:7d:a7:1c:c3:23:67:f0:3a:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DA:EA:BE:D3:5A:38:9D:A7:F4:C7:14:E3:D4:C3:6E:59:8E:A3:04
X509v3 Authority Key Identifier:
keyid:49:7A:17:CE:FB:94:78:B6:CA:E8:F6:5D:59:FB:1E:A5:D0:76:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1b:0e:c9:66:b2:2b:b6:f3:5f:f2:e0:1c:2d:f9:18:f2:87:
02:9a:4d:31:a7:dc:03:34:3e:4b:0f:c4:27:e6:5a:b1:f1:81:
6d:9c:03:a0:d3:1a:c8:01:98:39:aa:7e:1c:7f:65:3a:58:e1:
0c:8d:d1:ef:2f:09:5e:e5:ae:95:43:88:10:9e:1c:53:88:36:
88:55:c7:57:2d:d6:29:78:51:23:e0:45:2f:7a:8b:38:6d:38:
e6:67:19:79:21:46:81:81:b6:e5:a2:29:f7:97:c2:44:1d:95:
cd:90:71:03:df:d3:86:69:9c:08:bb:86:5f:6b:6c:45:d7:8a:
6d:e3:cc:84:67:a8:8a:ec:43:45:38:9f:b4:db:7a:8a:34:ab:
c4:a8:8b:73:44:cf:5d:3a:c2:de:61:21:22:24:b0:8b:ec:f5:
c7:2a:a0:ef:f7:65:8a:91:f9:95:c7:5c:70:64:1e:0b:43:c7:
74:1b:18:55:d6:f9:96:70:a5:8f:60:de:de:6e:18:42:3a:c5:
06:2d:96:8d:a4:9f:6b:f4:a1:5c:f8:d0:0a:44:a1:52:4a:f2:
10:2f:f9:8f:b7:db:55:f9:f3:25:15:9e:b1:e5:f8:3f:bc:8e:
99:46:76:22:bc:db:d8:24:ba:2b:57:32:67:2a:eb:4a:e4:fd:
a8:5b:16:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:24:14 2025 by rpki-client