Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
File: cdV4WLGdypZzvB9nIZ71Ab873Oo.mft (raw, json)
Hash identifier: kysxAInz3XiF4PkE+n1f4zY+ZNBmueNOsUB2LGiAwpM=
Subject key identifier: 86:73:7A:68:89:88:E8:C8:C8:BE:8B:9C:64:F6:00:D6:89:E3:0F:F0
Authority key identifier: 71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
Certificate issuer: /CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Certificate serial: 0196B9A3BF4A67C98D71A39FEFCF0650E986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
Manifest number: 0410
Signing time: Sat 10 May 2025 10:00:38 +0000
Manifest this update: Sat 10 May 2025 10:00:38 +0000
Manifest next update: Sun 11 May 2025 10:00:38 +0000
Files and hashes: 1: cdV4WLGdypZzvB9nIZ71Ab873Oo.crl (hash: Fx2S9N770oON+cE8MUMc5YgDF6n81GlCGe9wARra2PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:bf:4a:67:c9:8d:71:a3:9f:ef:cf:06:50:e9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Validity
Not Before: May 10 10:00:38 2025 GMT
Not After : May 11 10:00:38 2025 GMT
Subject: CN=86737a688988e8c8c8be8b9c64f600d689e30ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:18:c0:9f:30:13:1c:a5:7e:34:7f:23:b4:
e3:9a:c5:4c:83:06:dd:c2:71:23:37:ab:e4:98:26:
a8:89:f3:02:54:06:29:15:25:73:16:1a:de:bc:0f:
59:c0:10:d2:fc:40:c0:9d:63:7c:d6:74:a4:0c:1e:
cf:91:99:c4:5c:b1:ff:7a:b3:94:06:df:70:ec:b9:
d6:eb:41:9c:c3:60:9b:a5:c9:69:07:1f:9a:35:9e:
e8:fe:41:10:96:47:96:cf:7e:5c:2d:25:33:aa:51:
6b:2f:97:9d:ff:b7:e7:0f:fc:a6:e0:ed:d3:d2:68:
01:da:e8:2c:d3:da:59:1c:6c:61:b7:53:02:53:2c:
29:9b:10:08:a2:96:cf:5d:92:9d:ea:df:b0:63:12:
78:f8:0f:72:26:ef:53:27:99:2c:27:9e:72:83:66:
08:6c:db:ac:18:84:ab:9a:83:65:4a:a9:02:c9:a1:
46:72:ca:13:02:ba:af:db:9e:79:22:7d:94:eb:2d:
39:47:48:d6:0a:47:a2:0f:54:55:0f:c1:1e:2f:ab:
c9:0d:ce:7d:76:33:33:63:5a:5d:20:08:d8:56:04:
80:0d:3d:1c:0a:d2:ae:45:43:48:86:7b:cc:62:da:
0f:1d:33:ef:bf:c4:c7:54:2a:f8:81:ef:08:aa:b0:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:73:7A:68:89:88:E8:C8:C8:BE:8B:9C:64:F6:00:D6:89:E3:0F:F0
X509v3 Authority Key Identifier:
keyid:71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0b:df:f9:41:4b:0a:2d:d1:54:13:54:ad:b2:88:20:08:2d:
68:e9:5d:d9:07:f0:3c:fc:ea:35:a8:ed:d4:d3:5c:2b:bb:95:
1f:ff:86:22:22:cf:28:6a:2c:b8:fc:d1:9a:dd:78:5f:e1:31:
4f:a9:15:92:dd:1c:34:48:70:97:92:ff:c5:5c:f3:10:2d:01:
ea:0c:5a:09:68:93:d2:8a:8e:df:82:a8:9c:10:fb:95:80:c4:
d1:7a:e7:58:28:3f:de:ba:02:26:9f:96:40:1a:b4:19:25:08:
f2:99:d7:d8:60:7b:b5:95:2c:71:61:80:02:c2:89:3e:8a:9b:
81:4c:57:1f:3b:c1:36:1d:52:1c:c2:2f:5a:ae:78:3d:a8:c5:
ad:d9:2b:70:f0:fb:ab:57:a3:7b:5d:8b:1d:0e:15:cc:e1:9b:
98:3f:09:61:39:7e:33:8b:d5:ca:10:e9:c7:7c:41:a0:96:c2:
38:ac:57:60:d0:f8:47:2a:f7:87:82:f7:68:ba:4d:fc:26:05:
ab:06:64:83:fa:00:a5:d9:fd:71:a4:01:68:eb:83:85:04:58:
e8:f8:78:51:54:89:2c:78:83:f3:f3:e3:8f:25:33:fb:a3:e2:
c3:e0:03:84:11:9f:c0:ac:d3:db:69:3d:48:72:18:83:2b:bc:
96:6c:35:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:02:25 2025 by rpki-client