Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier: cw4Xp/FFabLaiVpf7w2zUK6/ajrH/5qDS2xK+0GSLSs=
Subject key identifier: 04:D7:91:6C:FD:C2:60:6A:5F:25:1D:E1:AA:0E:42:E9:56:8D:8C:61
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer: /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial: 0196DD425758D903543CA8CF55B708FCA9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number: 0C16
Signing time: Sat 17 May 2025 08:00:34 +0000
Manifest this update: Sat 17 May 2025 08:00:34 +0000
Manifest next update: Sun 18 May 2025 08:00:34 +0000
Files and hashes: 1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: SKwe+iw3DdtWCenpW4HYddLD3y7n0B2V4yhOAEGo/bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:42:57:58:d9:03:54:3c:a8:cf:55:b7:08:fc:a9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
Validity
Not Before: May 17 08:00:34 2025 GMT
Not After : May 18 08:00:34 2025 GMT
Subject: CN=04d7916cfdc2606a5f251de1aa0e42e9568d8c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8f:ef:cd:70:cf:bc:96:af:07:b8:1b:0e:a1:
f5:2d:7d:f4:03:5e:9a:d5:57:8d:3c:7d:3d:8f:fb:
57:82:10:e9:a6:06:8d:8b:5a:ce:8b:a5:1b:06:86:
d7:1e:c4:41:29:c0:5c:d4:c1:40:df:bb:ac:28:d5:
7f:bf:bc:94:42:10:07:5c:1c:ef:9e:ec:dc:64:da:
07:af:3f:cf:b3:b8:1b:63:19:d0:26:cd:77:a9:ec:
13:13:24:8d:12:5d:ef:11:fa:c4:eb:95:a0:93:68:
ce:18:0a:e4:1f:a7:d5:50:de:cd:82:fb:16:ef:95:
cd:0b:a5:fb:cb:fe:f7:19:93:95:9c:1b:31:c6:d9:
c7:bd:89:47:ca:65:38:52:55:20:5c:c5:43:63:bc:
86:f4:f2:06:d5:db:5d:41:81:ce:80:2b:36:42:93:
74:d5:9f:73:8f:42:87:6b:72:e6:0a:dd:20:d5:75:
98:a9:ea:83:32:fb:46:2f:e1:05:1c:e2:be:cc:5d:
15:af:df:5f:bd:28:b4:ed:4a:98:8b:f6:55:be:47:
b7:62:d0:b1:1b:10:f5:3b:0e:8d:ff:88:7e:03:5e:
e3:b7:3d:d7:b4:e6:58:b7:64:1a:4b:99:0e:ad:bd:
77:ec:a5:6e:9a:12:e6:23:1c:81:2f:93:40:c5:42:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D7:91:6C:FD:C2:60:6A:5F:25:1D:E1:AA:0E:42:E9:56:8D:8C:61
X509v3 Authority Key Identifier:
keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b6:47:7f:a7:87:f4:c9:3b:69:83:95:9a:66:cb:25:83:cb:
75:16:9d:77:10:46:99:a4:5e:8a:5d:06:f1:31:1f:70:b3:12:
c7:8a:0d:cf:c8:6a:6c:78:d5:c7:be:47:d4:6e:27:85:d7:5a:
6b:0d:2a:5e:33:af:85:8b:2b:4e:95:aa:f1:a7:98:7d:d8:ef:
a4:4a:74:2b:d8:18:ee:98:99:e8:af:d8:1c:d2:0f:8b:f3:3b:
19:d9:c3:81:5b:d3:34:a9:79:cf:51:53:da:63:68:6c:85:7c:
90:99:78:fe:c5:0b:9e:32:00:51:bf:fe:09:df:da:ee:7a:18:
cd:f3:9c:31:e2:68:9d:74:33:1e:03:5a:d5:5e:62:d3:70:c9:
79:39:2a:96:79:00:e7:b1:9c:1c:a4:83:9c:41:40:0a:30:ab:
26:0c:a4:ca:d3:1c:91:2f:bf:3e:e8:82:62:d8:46:4a:7b:3a:
12:b8:44:58:71:82:c4:f5:2d:b7:e8:e8:43:22:be:01:59:c6:
5c:22:69:72:f5:ff:9a:88:a0:74:83:28:be:44:76:54:9d:23:
21:29:2d:47:02:77:35:0c:00:00:54:0a:e0:97:9c:9d:42:ee:
38:9c:30:20:3f:1d:69:ed:2b:85:9a:11:0f:55:a1:5a:e5:58:
8d:df:24:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 11:44:58 2025 by rpki-client