Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
File: C4K9iLuhoX0siu9h3sHaxmFe75A.mft (raw, json)
Hash identifier: KiVFYeMEwApY1FSTlbJ6QIRj9ofkWqFiRZpz62wcX0c=
Subject key identifier: D4:49:7E:EB:67:1B:6D:C6:BB:2F:11:06:AE:CE:F4:59:89:63:41:A7
Authority key identifier: 0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
Certificate issuer: /CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Certificate serial: 0196C539A54793E4269C2C4E8508B4D92FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 16:00:11 +0000
Manifest this update: Mon 12 May 2025 16:00:11 +0000
Manifest next update: Tue 13 May 2025 16:00:11 +0000
Files and hashes: 1: C4K9iLuhoX0siu9h3sHaxmFe75A.crl (hash: oG+Idc4HJusYY1kribRIFx6eqZzah/84RgRPoQkqbxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:39:a5:47:93:e4:26:9c:2c:4e:85:08:b4:d9:2f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Validity
Not Before: May 12 16:00:11 2025 GMT
Not After : May 13 16:00:11 2025 GMT
Subject: CN=d4497eeb671b6dc6bb2f1106aecef459896341a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e0:8e:4c:d4:20:4a:89:3c:94:81:2c:01:b4:
aa:08:a7:e6:52:95:37:2d:ac:f4:20:9e:7c:6b:67:
25:fa:ca:76:ab:7a:2b:63:6e:9e:79:e2:a1:ca:70:
68:c9:f1:8d:7b:2c:90:11:9d:59:46:95:dd:0c:43:
86:1e:d3:5c:dd:59:08:2b:39:db:74:07:bd:46:3a:
5a:08:56:7c:0c:4a:48:97:7a:7c:94:16:db:4c:34:
50:1d:a6:1b:30:b0:29:5f:38:2c:93:07:d8:1e:26:
3e:62:95:e3:34:55:39:f0:6f:85:84:66:28:e8:28:
f7:60:28:ac:e1:9b:24:bf:2d:b2:8f:26:85:cd:61:
5f:1d:ec:5f:7a:e0:d1:c3:22:3d:38:ed:70:00:f6:
14:c1:27:18:cc:a7:e3:97:ae:a4:b4:1a:52:16:6f:
64:2c:67:0b:b9:b9:bc:f0:42:be:36:ab:9d:79:ec:
36:4b:5a:23:dd:59:cc:51:e5:3d:a4:8b:5a:10:78:
f9:54:0e:74:95:9d:ee:9e:1c:f9:f6:2d:eb:87:9a:
a8:57:b4:4f:7e:67:e4:36:16:1f:4b:9f:5c:9b:66:
e3:c0:4a:27:e9:9d:23:bd:de:c3:8d:a0:87:6f:79:
1e:42:5c:cd:e8:ee:d8:2f:b5:e1:50:90:fb:50:af:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:49:7E:EB:67:1B:6D:C6:BB:2F:11:06:AE:CE:F4:59:89:63:41:A7
X509v3 Authority Key Identifier:
keyid:0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2e:c6:b8:e5:44:4d:b6:8d:90:6f:11:df:5e:b8:1a:c1:06:
03:3c:c7:37:87:69:4c:0b:e2:fc:2a:aa:c8:6b:8e:d5:ee:43:
f2:fc:c3:8e:3e:11:9a:e1:6f:70:d9:76:65:63:1d:a6:d5:cf:
1d:ed:60:88:6d:0d:80:27:0b:32:29:4e:1f:92:57:23:83:44:
0f:21:db:35:b7:20:e2:2f:6b:26:93:42:58:a4:1e:29:41:7d:
b3:e2:9d:d9:49:d4:bb:51:6a:7c:da:35:c4:90:a9:a1:e1:af:
d4:72:c2:12:6b:0a:23:1f:ec:de:dd:62:28:3b:24:3b:63:88:
98:a2:d3:36:ef:31:2e:c0:e4:30:eb:70:36:f6:c0:8e:43:55:
80:f0:12:6a:51:81:06:52:f9:81:b0:5a:02:f9:46:fc:29:54:
36:b9:01:6e:c6:de:5f:85:84:7b:da:7d:70:48:b2:6f:b0:3c:
4d:59:1b:3e:f7:95:19:9b:4d:72:ce:61:ec:f2:d2:2d:7e:1e:
4d:e2:9d:e8:f9:e8:a5:58:19:be:44:0f:04:5c:f1:b9:5e:18:
36:4c:d6:dc:a3:03:49:7b:9b:81:3b:f2:e6:84:4d:8f:31:20:
37:1a:4b:e8:89:8c:32:51:c0:91:40:73:11:61:2e:97:2b:05:
23:83:08:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:31:29 2025 by rpki-client