Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
File: 9GRgXq8UuLXSjujQdsHjc491glM.mft (raw, json)
Hash identifier: NVRbZtKXNlL1KiYoO7u9sIZE+/fuAvmiR/C74K7kjv0=
Subject key identifier: C5:E6:19:AD:AF:E1:A0:8F:BC:8A:E7:9E:2B:FB:CB:26:DD:6D:95:DF
Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
Certificate issuer: /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Certificate serial: 0196C53AAC04EF9C753B34FDDA7C7D54ED1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
Manifest number: 0FF6
Signing time: Mon 12 May 2025 16:01:18 +0000
Manifest this update: Mon 12 May 2025 16:01:18 +0000
Manifest next update: Tue 13 May 2025 16:01:18 +0000
Files and hashes: 1: 9GRgXq8UuLXSjujQdsHjc491glM.crl (hash: KahPqHD7GiFXW/x1LbsZ03wNB/lkjK4xiODdC8qo1HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:ac:04:ef:9c:75:3b:34:fd:da:7c:7d:54:ed:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Validity
Not Before: May 12 16:01:18 2025 GMT
Not After : May 13 16:01:18 2025 GMT
Subject: CN=c5e619adafe1a08fbc8ae79e2bfbcb26dd6d95df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:92:63:cc:10:da:51:23:d7:53:6d:34:45:
1e:b8:c1:e1:0b:50:b9:60:00:bc:95:a1:3b:bf:f4:
f7:cb:75:63:ea:7a:99:90:3e:d2:9c:99:e4:b3:7d:
0e:cf:84:5a:5b:c1:2c:95:ae:2f:5a:f1:1e:09:c5:
e1:22:65:30:0d:e1:a4:44:43:01:cc:5c:d1:68:9b:
53:4f:2b:24:5b:6f:24:d1:62:8b:2a:8a:85:28:85:
fa:9b:81:e0:73:37:bd:90:26:08:14:89:fc:b5:02:
58:c1:de:f7:dd:fb:58:0d:9f:74:e8:d5:8c:cb:3e:
cf:e8:d9:95:68:fd:7d:a9:83:5e:44:30:59:57:7f:
dd:5c:eb:78:04:2e:c3:94:c7:ab:3f:c4:38:1f:59:
74:4c:46:e6:97:f6:a8:f5:93:a5:de:0b:a3:73:55:
38:f5:fc:96:09:0a:a1:a3:5c:67:2c:45:88:89:b1:
73:5a:7d:be:1c:e2:63:6a:1e:84:f8:f5:45:e6:97:
b2:4f:08:b2:74:5b:da:0e:b5:ea:ed:20:d7:f0:7c:
24:5a:02:6a:a0:38:9f:96:51:6e:03:0b:77:58:6c:
62:9f:65:63:9b:c7:6d:a3:6d:c5:d2:7c:57:6a:36:
4d:44:a8:d1:86:32:f1:43:b6:d9:ce:f9:ac:af:54:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E6:19:AD:AF:E1:A0:8F:BC:8A:E7:9E:2B:FB:CB:26:DD:6D:95:DF
X509v3 Authority Key Identifier:
keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:45:d7:89:9b:18:33:bf:86:43:92:62:cd:00:70:6c:67:ff:
e2:bb:4c:dc:be:ba:9f:23:84:83:fe:c0:74:c6:4a:5c:a2:67:
a1:d5:41:5f:27:ff:65:f5:cf:c2:75:18:24:82:71:95:16:1c:
36:aa:21:86:6c:93:f2:2b:9f:43:6c:e4:1e:56:f4:23:e1:b3:
73:6e:7a:f4:f7:63:c0:32:58:1d:24:f4:5c:34:05:6e:9e:72:
e9:79:35:27:e1:4e:0a:4d:e7:4d:98:1d:e7:ab:8e:d9:d4:d5:
d6:d3:8b:d5:d7:3b:17:c8:5e:c0:47:6b:84:53:da:d7:a2:8f:
af:20:a8:b7:19:fc:e4:ee:51:1e:23:64:5c:70:d7:a7:37:96:
6b:3c:fe:48:72:b9:f7:fc:ed:04:2e:74:8c:59:8a:a6:3c:03:
66:b6:52:2b:8f:d2:d7:9e:1a:50:8c:89:b9:2b:d9:46:84:f7:
bf:16:3e:47:48:5e:94:46:c4:2b:6d:d6:15:da:c2:e3:3f:73:
77:f0:5c:6a:24:0b:83:94:c2:d1:51:45:da:6e:bc:8e:a0:6b:
8d:66:2b:fa:84:60:40:f1:bb:6b:16:fd:23:06:2d:bb:69:5c:
51:ea:0b:c1:d6:88:40:7f:85:b8:4c:ef:f3:ac:0c:39:cd:54:
7a:d1:1b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:48:40 2025 by rpki-client