Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
File: Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft (raw, json)
Hash identifier: 3vRroVHUmsNni/j9qb0NatinjqMX3MCD656z8pCvFHM=
Subject key identifier: 13:93:37:BE:58:91:D9:8C:1F:BD:AD:17:3C:E0:1C:26:0B:FD:25:4F
Authority key identifier: 46:7A:38:81:12:E6:8F:4C:7D:4D:80:C3:2D:37:CF:CD:6C:D2:3A:45
Certificate issuer: /CN=467a388112e68f4c7d4d80c32d37cfcd6cd23a45
Certificate serial: 0196BA485DF4B3D61A8EC7DE873486A25D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
Manifest number: 11EF
Signing time: Sat 10 May 2025 13:00:26 +0000
Manifest this update: Sat 10 May 2025 13:00:26 +0000
Manifest next update: Sun 11 May 2025 13:00:26 +0000
Files and hashes: 1: Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl (hash: Cyc30rHgNdU10WBMI7ijOrPBwX0p2ivy4tg643mh7Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:5d:f4:b3:d6:1a:8e:c7:de:87:34:86:a2:5d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467a388112e68f4c7d4d80c32d37cfcd6cd23a45
Validity
Not Before: May 10 13:00:26 2025 GMT
Not After : May 11 13:00:26 2025 GMT
Subject: CN=139337be5891d98c1fbdad173ce01c260bfd254f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:e4:db:9a:29:08:67:ca:d3:4b:e8:7a:54:
a6:68:9d:33:59:a7:9c:64:75:d7:96:ec:c1:c6:a6:
09:62:ce:bf:97:bc:a7:36:d8:c4:e4:37:de:de:ef:
70:0a:8a:c4:a4:70:da:d6:fa:a1:b7:d3:f2:ed:f4:
df:32:aa:36:34:86:db:14:34:af:45:18:32:21:16:
c0:0b:ad:41:95:24:35:45:6f:4d:fa:94:ac:28:23:
e1:bf:40:ff:e0:90:5b:12:6b:4b:e8:e7:1b:9a:fd:
91:30:5d:ca:e7:4b:8e:41:63:b9:dd:c1:36:05:42:
94:40:6f:0b:91:dd:b4:6a:69:0f:a4:f8:10:29:98:
01:db:24:ae:2c:54:e7:5e:e7:c5:3b:cc:88:6f:3a:
56:ef:55:05:c1:ec:0c:a0:93:9b:4a:a9:58:ce:98:
64:0d:5d:6a:17:be:55:ca:c0:f2:58:85:3f:13:85:
79:f1:86:76:83:b1:e0:52:b6:32:5c:a5:d0:b3:b2:
45:9f:69:5a:70:b9:96:d2:dc:05:d1:56:43:9f:04:
be:af:de:0e:ef:21:cf:fd:a0:9e:62:22:d3:f5:1e:
ae:e5:9c:7d:82:52:78:0e:0d:c5:c8:af:0e:63:d9:
65:c9:30:9f:3d:d5:d9:85:bb:c7:64:75:b8:51:fa:
73:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:93:37:BE:58:91:D9:8C:1F:BD:AD:17:3C:E0:1C:26:0B:FD:25:4F
X509v3 Authority Key Identifier:
keyid:46:7A:38:81:12:E6:8F:4C:7D:4D:80:C3:2D:37:CF:CD:6C:D2:3A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d7:36:93:6e:55:14:b0:ed:d3:13:93:c4:8a:09:80:c8:6b:
a5:44:89:1f:80:a3:19:92:21:82:05:8d:a7:a8:d5:6d:ec:b8:
0f:b7:5b:9e:54:48:9a:b1:86:0f:7a:16:53:bd:9b:1b:58:17:
c1:3e:30:9d:44:52:97:2c:60:0c:a3:4e:cd:a0:85:35:76:1e:
65:cb:a3:53:03:17:92:e4:8c:e8:5c:17:10:51:7b:83:9c:c5:
4c:3b:1f:f4:8f:e9:9c:97:64:7d:9c:93:d1:de:e1:7e:84:2a:
9a:8c:fa:7f:f5:87:f3:b8:17:2e:c4:aa:d1:a7:32:d8:52:55:
24:0f:07:f5:d5:98:c6:fc:7f:cd:20:60:ac:1b:85:b1:53:ad:
54:9c:a5:9d:40:aa:43:35:2b:75:a5:1c:94:fd:5b:e9:f1:94:
4b:46:0c:b2:d9:2a:b3:6c:b5:9a:a1:61:55:f1:b4:a2:1f:92:
56:f9:12:e1:13:32:90:fc:fc:01:98:36:0a:8d:e0:02:e7:a7:
91:3e:c5:30:66:c9:f3:42:b0:8e:b9:db:4a:9f:ec:db:24:93:
e2:3b:1e:c1:56:e5:18:2c:f5:7d:a8:2b:b8:d8:40:52:ca:6a:
45:eb:39:f1:e3:86:97:6a:82:49:cb:b8:95:cf:b6:15:5d:75:
c2:cf:57:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:02:22 2025 by rpki-client