Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File: r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier: Hf1Jk9RAoFbUliSWCQ9QLUQ4OZHtDw/by82wrVx6jLA=
Subject key identifier: F6:2A:3F:4C:63:E1:2E:36:7E:9C:B9:FB:7B:47:2D:54:B4:47:69:C5
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer: /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial: 0196C201F0762EAE3665C6F2560240F2A51E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number: 1532
Signing time: Mon 12 May 2025 01:00:29 +0000
Manifest this update: Mon 12 May 2025 01:00:29 +0000
Manifest next update: Tue 13 May 2025 01:00:29 +0000
Files and hashes: 1: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: NdOkrGZQDleQc9Jy70v9izrfPBuNdhsH+O6JUzUNcRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:01:f0:76:2e:ae:36:65:c6:f2:56:02:40:f2:a5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
Validity
Not Before: May 12 01:00:29 2025 GMT
Not After : May 13 01:00:29 2025 GMT
Subject: CN=f62a3f4c63e12e367e9cb9fb7b472d54b44769c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8c:02:f9:0e:c8:88:0f:71:17:3a:9f:cf:58:
0a:02:0f:f7:ce:ef:c8:c4:1b:2e:ad:d5:b6:16:33:
7c:33:e0:77:ab:5a:b4:b6:31:4a:99:b5:31:47:b7:
c7:b5:0c:f1:2d:84:02:78:fe:74:88:63:ac:d0:b8:
73:45:e7:db:54:a0:39:d8:ab:6c:9b:d3:d3:4e:92:
bc:d8:24:af:8d:63:11:7b:e7:b3:ef:22:3c:53:dc:
d5:a6:a6:2d:5a:08:d6:7c:ab:25:39:10:a8:0e:6e:
42:f2:16:49:e8:ab:31:79:49:cb:5d:6c:1a:aa:c6:
5d:c9:67:31:fe:5e:7a:18:22:46:b4:78:2d:ba:18:
91:61:d8:16:85:8a:7b:41:e7:d2:8c:8c:f4:3c:41:
87:61:b2:44:6a:fd:86:87:78:75:dd:00:d3:8f:06:
e9:92:c2:fc:de:10:80:89:9a:da:ec:21:75:ea:5d:
70:91:73:08:0a:ed:ca:bd:06:87:67:5d:3c:ab:f1:
77:ca:14:35:2d:51:1f:1e:c1:7f:e6:d4:95:f7:a9:
16:fc:5e:a8:b3:7b:32:27:2b:f4:29:2c:50:3b:33:
b6:37:4c:3b:71:b8:7b:a2:ee:a0:5d:a9:6d:91:f7:
25:32:be:2b:5c:ee:99:93:35:f9:11:45:36:2f:99:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2A:3F:4C:63:E1:2E:36:7E:9C:B9:FB:7B:47:2D:54:B4:47:69:C5
X509v3 Authority Key Identifier:
keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bb:08:8a:49:6c:17:1c:fe:1a:14:1e:00:64:81:fa:83:2b:
22:4c:32:ee:a7:aa:92:b8:22:a0:b3:de:39:72:e5:9f:f0:8b:
a2:76:15:eb:91:b7:a1:42:cd:82:cb:ff:82:8a:a9:3b:33:7c:
c7:bb:58:7f:eb:22:5a:a9:74:fa:6c:0a:f9:ea:c7:e2:23:8f:
c4:77:91:32:72:f0:d3:9c:9b:2d:ad:de:70:2b:98:1b:11:58:
38:48:94:99:c9:3e:92:7c:47:60:c4:a5:6b:79:c8:2e:36:4e:
20:26:a6:3a:37:3b:a8:f2:9c:b1:e1:f6:7c:ad:2a:8d:b6:d1:
83:c4:bc:c4:74:11:72:7d:dd:ce:c8:98:a7:27:2d:4d:4e:44:
6a:6f:69:2b:65:7b:01:12:8f:10:b2:74:18:df:7c:45:6e:79:
85:38:ff:66:04:c6:5b:53:02:c9:41:fe:55:4f:83:a9:f7:f4:
85:2a:4b:d0:e7:1c:bb:34:fe:99:89:e0:26:9b:14:14:ed:eb:
8c:b3:39:f6:9d:ad:d8:89:e0:db:5d:74:04:0b:40:dc:5f:94:
80:69:5d:9b:05:59:64:a1:83:1a:6b:e0:1b:29:7c:af:1d:39:
b5:dd:f5:1d:77:5f:86:fc:3c:6e:31:7a:f7:b3:0a:99:e2:93:
70:2d:46:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:17:17 2025 by rpki-client