Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
File: rSzoJufkLt3WnfrTpZqbmqTigYM.mft (raw, json)
Hash identifier: p3oH5h1UtDI8irpJkdNgG8C3QZ9oJZOTZ1uOU1huTyw=
Subject key identifier: B2:9D:82:B8:9E:7F:6D:5B:29:DC:6A:75:73:70:AA:B5:FE:1A:28:FA
Authority key identifier: AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
Certificate issuer: /CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Certificate serial: 0196BAB65C5136A39536410103C512AA6AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
Manifest number: 142E
Signing time: Sat 10 May 2025 15:00:35 +0000
Manifest this update: Sat 10 May 2025 15:00:35 +0000
Manifest next update: Sun 11 May 2025 15:00:35 +0000
Files and hashes: 1: rSzoJufkLt3WnfrTpZqbmqTigYM.crl (hash: WYwYvV5NovVQ3t/yGGVPmDQs0+YtBJWlQ621KD7ey+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:5c:51:36:a3:95:36:41:01:03:c5:12:aa:6a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Validity
Not Before: May 10 15:00:35 2025 GMT
Not After : May 11 15:00:35 2025 GMT
Subject: CN=b29d82b89e7f6d5b29dc6a757370aab5fe1a28fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f2:14:7d:29:0f:86:c1:fa:bb:b1:65:eb:97:
90:0d:0d:9d:54:6a:a5:e3:f8:54:f7:62:5a:b6:7e:
6f:db:a6:c0:d0:d4:e7:08:07:fe:c7:ca:77:30:af:
5f:88:3f:75:74:90:01:ff:68:cc:fc:ba:09:33:36:
ba:fd:03:52:40:e1:66:34:7c:8c:b8:6e:14:9e:7d:
9a:a0:6f:5b:7c:dc:d8:a0:0c:a7:4b:3a:1f:cb:07:
19:54:72:6e:54:db:ec:33:70:bf:28:18:cc:3e:bb:
b1:2a:f0:60:1a:3b:6f:fc:31:88:66:43:c4:a0:a5:
d8:b3:ce:1b:51:ba:b5:5a:41:25:e0:17:68:8f:06:
be:47:f3:1b:84:bb:e2:7f:22:d1:11:20:58:6b:af:
78:ac:54:f0:3a:8f:c1:41:00:87:04:cd:e1:96:b8:
3e:13:23:c1:53:1c:ef:b6:e2:54:11:e4:73:ad:89:
57:cb:1d:d3:91:1b:d7:20:9b:12:35:c1:fb:38:96:
ca:91:e4:e4:d4:f1:05:15:b1:73:04:65:3f:d0:0c:
d0:69:b9:a9:0c:1d:08:57:5f:fa:2d:28:c6:b9:17:
d3:b2:f3:c9:94:51:79:8f:6f:b5:29:1a:18:31:1b:
7c:c9:44:0a:ab:cf:14:bd:a1:f8:88:be:6c:18:89:
43:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9D:82:B8:9E:7F:6D:5B:29:DC:6A:75:73:70:AA:B5:FE:1A:28:FA
X509v3 Authority Key Identifier:
keyid:AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:90:76:8d:0b:9f:66:e8:1a:a4:55:00:53:e9:e5:33:bd:1b:
89:a1:a8:43:41:41:a7:b0:52:49:e7:84:53:47:33:a6:46:ad:
fe:87:4d:da:d3:6b:08:92:cb:1d:ed:d0:62:34:64:86:02:57:
a8:b4:50:6e:97:ff:6a:83:c2:74:4b:40:e3:51:50:fb:e3:28:
02:3a:44:94:20:5c:ec:3b:c9:e2:ec:26:69:88:d4:cf:80:f5:
40:91:44:19:ee:90:75:40:57:eb:02:48:1b:9b:34:c5:c9:d4:
c7:f2:11:4e:f0:d8:18:b6:eb:5e:66:59:21:c3:d5:bf:7f:a7:
34:f2:8a:34:a0:ba:45:b8:ff:cf:1b:4e:9f:94:5c:c2:35:89:
f7:36:d8:64:ed:23:73:26:4a:5d:a0:ba:7f:ae:3e:cd:f8:7f:
0d:26:bd:99:73:f2:da:73:1a:ea:a7:cf:83:e5:26:ed:59:ca:
ee:b1:55:2f:82:d3:40:e1:92:1d:47:94:3c:f2:64:e7:bc:bc:
bd:f6:e2:58:98:c1:53:f2:bc:fe:77:3d:26:b2:bf:b0:b1:6f:
b4:6a:ed:e2:76:7d:4a:0d:97:d9:9f:ef:9b:d3:96:47:42:f2:
a9:83:9c:ed:ed:0f:8d:cb:57:7f:ec:be:a9:22:a9:48:5a:09:
7b:bb:92:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:17:30 2025 by rpki-client