Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.mft
File: iGueLpgWv6rZz8yAbo39KCT1A0Q.mft (raw, json)
Hash identifier: atMuclpcdyCubT5qLGs0yjxUmikNVzulr6uxl3jmGlc=
Subject key identifier: 5A:F0:F2:5E:24:77:B2:A1:52:F1:45:A5:1C:23:C8:1F:3A:DF:EA:8E
Authority key identifier: 88:6B:9E:2E:98:16:BF:AA:D9:CF:CC:80:6E:8D:FD:28:24:F5:03:44
Certificate issuer: /CN=886b9e2e9816bfaad9cfcc806e8dfd2824f50344
Certificate serial: 0196BDEE248987C4032F7F0CD6A347C46CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGueLpgWv6rZz8yAbo39KCT1A0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.mft
Manifest number: 0C91
Signing time: Sun 11 May 2025 06:00:22 +0000
Manifest this update: Sun 11 May 2025 06:00:22 +0000
Manifest next update: Mon 12 May 2025 06:00:22 +0000
Files and hashes: 1: iGueLpgWv6rZz8yAbo39KCT1A0Q.crl (hash: aYou5pLYTn5InZyjX7jt93sTo+J3/f7vinu+i57rjXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGueLpgWv6rZz8yAbo39KCT1A0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:24:89:87:c4:03:2f:7f:0c:d6:a3:47:c4:6c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886b9e2e9816bfaad9cfcc806e8dfd2824f50344
Validity
Not Before: May 11 06:00:22 2025 GMT
Not After : May 12 06:00:22 2025 GMT
Subject: CN=5af0f25e2477b2a152f145a51c23c81f3adfea8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:89:08:c1:96:00:2d:dc:af:ce:91:6c:3c:
41:e1:4d:d9:4a:a7:51:a9:d9:fe:7e:f2:06:c5:36:
b5:35:29:38:ba:b9:ff:13:b8:41:da:79:ab:43:74:
47:5e:49:3e:60:d5:bc:47:13:a0:35:b8:59:06:fc:
0d:6f:c2:31:b7:b3:29:83:ee:07:a6:1d:ab:7a:e1:
17:73:a1:39:2b:bd:43:3f:a7:5e:fe:08:64:d5:9c:
ca:d8:eb:52:5d:5f:29:07:2c:c9:2e:ee:7f:e0:38:
17:3f:1c:34:e8:2b:31:f8:9b:84:92:c5:94:71:a9:
8e:eb:e2:1b:b6:bc:2c:3d:33:17:c4:28:33:1f:63:
23:e4:6b:8e:2d:94:e8:04:19:01:17:24:9f:02:08:
f1:2c:fe:66:fd:b2:ed:d0:af:46:16:5e:99:33:12:
40:97:40:53:5e:d3:6a:44:fe:a4:02:51:10:90:36:
ce:01:08:fe:b6:cc:4b:6e:cd:43:f2:5c:2f:af:4e:
bc:31:f8:09:09:16:75:e1:a7:39:b5:2a:01:ab:ca:
d2:b5:7a:3d:7e:ac:8f:82:4f:f1:c1:84:08:30:f0:
8b:16:4c:95:6a:c0:5c:b4:7d:15:e5:27:3e:fd:6d:
5e:1c:95:ff:8f:61:e4:41:0b:83:39:de:a8:b3:0e:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F0:F2:5E:24:77:B2:A1:52:F1:45:A5:1C:23:C8:1F:3A:DF:EA:8E
X509v3 Authority Key Identifier:
keyid:88:6B:9E:2E:98:16:BF:AA:D9:CF:CC:80:6E:8D:FD:28:24:F5:03:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGueLpgWv6rZz8yAbo39KCT1A0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7900fd-84e2-4a7c-8d8e-e5afbb936c3a/1/iGueLpgWv6rZz8yAbo39KCT1A0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1e:bd:ed:e1:61:41:a5:55:cd:5c:f4:eb:13:3d:3c:1c:bf:
73:65:1f:f3:c0:a1:45:db:da:a6:d4:e8:9e:fc:97:53:b3:fa:
f7:ab:4f:da:0b:e4:dd:64:4a:eb:ce:5b:dd:97:ea:ff:2f:da:
33:87:b1:5f:51:5e:5c:11:b3:8f:a5:93:b7:16:9c:ee:b7:14:
6f:6d:1f:be:cb:6b:97:0b:e6:45:7a:cb:44:7b:f8:68:68:4f:
95:70:40:a7:a3:45:6c:d7:f9:88:34:ad:d7:2f:29:59:11:d1:
0d:74:86:7c:d8:d9:5e:98:ae:0e:77:44:45:41:56:de:87:da:
ac:59:da:19:24:35:94:53:2c:38:e1:eb:21:ce:81:a5:41:5f:
a9:3c:bf:19:da:ad:cd:fc:16:41:a8:80:b7:6a:da:86:84:f0:
51:0b:40:08:e1:27:4a:be:c7:14:e5:ab:1a:f8:26:3d:a3:b2:
3b:99:9a:d8:e8:e0:d7:11:c6:bc:5d:90:65:f0:e9:6b:5f:6e:
ef:63:e3:ce:34:ad:4b:da:7c:e5:29:3f:31:de:46:fe:90:44:
e2:68:0f:51:41:37:1f:68:70:9e:f8:bc:d3:2d:2b:f9:80:15:
bd:5b:8d:74:1e:4e:a4:6e:07:a5:7f:45:bf:bd:29:b5:08:38:
21:f1:fd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:32:15 2025 by rpki-client