Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json)
Hash identifier: wDKW3n+zgBIF6FN69lGcOERz3dg77o0nPJtAFfJFuII=
Subject key identifier: 5C:FC:52:F8:B2:CF:F0:38:68:3E:D1:1D:D9:FB:27:FB:45:B4:C9:1E
Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Certificate serial: 0196A98BE1805D13FDA814C67FBE0424CFCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
Manifest number: 1527
Signing time: Wed 07 May 2025 07:00:38 +0000
Manifest this update: Wed 07 May 2025 07:00:38 +0000
Manifest next update: Thu 08 May 2025 07:00:38 +0000
Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: 3o/+2G/b5aDyPHJX3/mFJ2LP8fr5wsJUEgKC7DmMWqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8b:e1:80:5d:13:fd:a8:14:c6:7f:be:04:24:cf:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Validity
Not Before: May 7 07:00:38 2025 GMT
Not After : May 8 07:00:38 2025 GMT
Subject: CN=5cfc52f8b2cff038683ed11dd9fb27fb45b4c91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:cf:56:79:0e:27:c5:a3:72:90:fa:62:7f:
e5:f3:9d:0c:9f:28:57:62:03:7b:86:a9:9d:7c:1b:
69:28:47:c7:de:9e:be:fa:f3:6e:01:e9:ca:81:55:
91:43:fc:e6:3d:02:65:80:60:e4:1c:7e:86:ff:69:
51:3a:7d:f0:10:4e:74:78:21:2d:4e:ea:cf:08:c9:
bd:f4:c0:ee:ed:11:68:44:b6:c5:b5:43:e8:5d:80:
ca:e2:8a:43:b3:e3:57:cb:79:29:ce:e9:e4:6e:db:
6f:f3:cb:82:40:e7:45:40:af:a3:44:4e:e6:4a:7a:
59:b3:84:e9:76:8e:a5:ee:2f:d0:d1:e4:07:ad:99:
34:37:fd:13:90:62:29:6c:ab:89:89:10:30:61:b3:
e0:3c:3c:2b:0b:f1:3b:ce:9b:32:0a:bc:47:d8:ca:
62:4b:77:bf:47:55:82:c8:e9:f1:9b:e7:ab:e0:93:
77:57:92:17:d2:d9:d7:38:97:0d:2a:81:f7:98:5c:
ee:0b:e1:6f:08:e6:c4:6e:3f:33:df:13:e9:aa:ff:
c0:bb:6e:b2:23:11:9b:61:33:6f:ad:5d:73:18:60:
d4:1f:70:db:5d:d1:98:ac:32:f6:68:81:d1:ac:4f:
a2:90:bc:b0:65:b4:7d:26:9f:58:86:db:fb:ad:e8:
15:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FC:52:F8:B2:CF:F0:38:68:3E:D1:1D:D9:FB:27:FB:45:B4:C9:1E
X509v3 Authority Key Identifier:
keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c9:60:14:32:63:90:a1:ea:9c:f7:2f:d7:8e:c6:23:08:5b:
c1:2f:40:2f:43:d9:a1:59:c4:77:dc:ee:96:1c:f5:03:ba:74:
93:4b:ab:99:89:64:b8:bf:57:c9:5f:5a:11:4c:b3:59:e6:0c:
c5:46:32:a1:99:7a:95:39:c3:14:e7:25:e1:93:11:07:35:aa:
82:9b:71:25:24:02:4c:8d:55:ea:98:0b:4d:a1:71:d3:e3:54:
d7:c6:52:d0:0e:e3:f7:7a:42:fa:4a:9e:97:43:b1:62:29:d5:
21:6e:83:b2:57:ba:46:3e:73:51:1c:c8:ec:d5:99:73:f5:c8:
fa:a1:0d:a5:f4:c3:25:7a:66:20:bc:00:83:4a:4f:92:51:86:
0c:50:ef:0a:4a:a9:13:b2:17:fd:00:c9:cd:55:33:c7:ef:75:
17:9f:51:0f:90:5a:f4:51:90:c9:f5:19:a2:e5:75:5a:8b:4f:
c3:37:dc:5a:ba:73:68:2a:90:07:94:54:ca:42:7b:40:9e:5c:
9a:bc:fc:bc:f6:78:f8:28:95:2a:5f:d4:6d:13:d5:08:11:4b:
1c:29:33:60:a1:d3:d0:6f:c9:4c:c0:0a:64:a5:a9:05:c2:b4:
97:fa:fa:32:4f:f5:18:77:2a:97:1a:aa:73:07:bb:10:46:12:
11:63:8a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:50:30 2025 by rpki-client