Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
File: dNUnZVf32kEAET2Fc5VmSBVA5hw.mft (raw, json)
Hash identifier: VQe4MYx1F5YAACy1z3A1w1VQkcLFyPpoONXYBaFjnd0=
Subject key identifier: 9D:FB:BC:15:05:42:3C:EF:AE:03:23:7C:16:20:2D:05:B4:A9:E8:E0
Authority key identifier: 74:D5:27:65:57:F7:DA:41:00:11:3D:85:73:95:66:48:15:40:E6:1C
Certificate issuer: /CN=74d5276557f7da4100113d85739566481540e61c
Certificate serial: 0196BA1158BC8BFEE2207DCEE8DE3DBED923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
Manifest number: 07E4
Signing time: Sat 10 May 2025 12:00:20 +0000
Manifest this update: Sat 10 May 2025 12:00:20 +0000
Manifest next update: Sun 11 May 2025 12:00:20 +0000
Files and hashes: 1: dNUnZVf32kEAET2Fc5VmSBVA5hw.crl (hash: b8M3GbXdoA61gFPSpVT3d57YMFSc0JDQCISHJ4Ve+J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:58:bc:8b:fe:e2:20:7d:ce:e8:de:3d:be:d9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d5276557f7da4100113d85739566481540e61c
Validity
Not Before: May 10 12:00:20 2025 GMT
Not After : May 11 12:00:20 2025 GMT
Subject: CN=9dfbbc1505423cefae03237c16202d05b4a9e8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ac:da:5f:68:88:c8:69:bf:55:e7:cc:a3:ab:
d3:e0:6f:33:4a:49:1c:2d:d8:52:96:b6:1a:ae:94:
25:28:b3:ed:7b:69:7a:aa:88:b3:f5:c6:90:19:c4:
7f:50:ce:4d:09:ef:cc:69:b6:3b:b5:5a:6b:93:19:
dd:df:71:16:0f:9b:1a:47:20:6f:4a:fa:b7:99:38:
68:fd:7a:17:55:b3:cc:54:e8:59:49:88:f8:47:ab:
3e:48:e3:c8:a0:6a:3d:ea:5f:6f:95:c6:af:bc:77:
2e:16:7b:62:55:b9:be:8d:ad:5d:59:81:53:99:99:
5a:32:81:69:ae:d8:dd:b9:64:1c:bb:53:e6:48:93:
49:62:cc:a3:a1:ff:a9:2a:c6:4d:4b:a0:c3:ce:13:
b2:b4:68:93:04:dc:63:11:f3:93:26:71:76:bb:c7:
c7:43:c9:02:4b:45:db:a7:fa:3b:12:f8:90:91:ad:
0f:d8:99:a7:e1:1f:66:e4:ee:83:3c:0a:8b:b3:84:
e9:39:2a:c6:84:54:7d:dc:27:cd:a0:2f:5b:03:78:
c4:0b:75:4a:6d:4c:e3:7a:ad:66:84:ce:59:dd:f9:
0e:56:f2:ac:3a:d9:92:04:73:e6:09:0b:af:70:5d:
ea:0b:41:95:b9:b5:68:5b:9a:22:c3:01:de:d4:fe:
b2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FB:BC:15:05:42:3C:EF:AE:03:23:7C:16:20:2D:05:B4:A9:E8:E0
X509v3 Authority Key Identifier:
keyid:74:D5:27:65:57:F7:DA:41:00:11:3D:85:73:95:66:48:15:40:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7a:fd:a1:e5:86:37:a9:99:04:61:25:21:31:e2:ee:38:53:
9e:eb:9e:db:29:0c:f8:56:90:7c:41:b9:5b:f5:9f:a5:dc:da:
c5:a0:9c:0a:5c:50:db:af:50:54:8c:a1:ee:95:6e:1d:74:02:
25:0f:03:7d:8a:88:37:b7:42:41:47:52:36:4d:ae:64:54:4f:
39:b4:f8:b1:7a:34:a5:72:51:06:03:c9:ca:74:27:c0:4d:3d:
4f:b2:b1:99:0c:db:d0:58:73:79:f2:a0:ff:de:eb:7a:0d:aa:
07:96:28:d5:73:69:0e:99:1c:44:f0:d7:47:ca:b4:24:a9:49:
fb:2c:43:54:a6:6f:d1:76:1e:41:31:58:aa:1c:55:d6:0e:ff:
1e:a5:c0:5a:87:76:ca:1d:d6:db:24:fd:9e:35:90:92:7b:37:
27:48:d5:4c:70:f9:ea:96:20:c9:27:27:c0:4d:03:d6:4b:75:
da:d4:76:7e:aa:37:59:18:f4:f8:e6:b1:bd:dc:36:21:82:17:
e6:d2:20:72:30:c6:23:ba:26:b7:c0:76:ad:39:75:2e:cb:17:
88:69:56:4c:3b:e9:1e:39:1c:1f:93:41:e1:83:0b:db:c8:7e:
3b:1c:22:52:cb:48:21:15:d7:2d:3f:6c:1c:88:59:59:1d:55:
8e:ff:d1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:29:31 2025 by rpki-client