Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
File: _sl9DBu8zD2GcSKhFxD1X3AjAI4.mft (raw, json)
Hash identifier: 0Kknp+bc2ERCU9ONDCOKNdU/LpXLyuhMGYoAiVQFsno=
Subject key identifier: E7:05:BA:8D:DF:3F:BA:79:36:46:A9:3B:F3:42:4D:0A:96:92:94:DD
Authority key identifier: FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
Certificate issuer: /CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Certificate serial: 0196BE2522D53BAA832C0DA55EC32AF24196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
Manifest number: 042C
Signing time: Sun 11 May 2025 07:00:26 +0000
Manifest this update: Sun 11 May 2025 07:00:26 +0000
Manifest next update: Mon 12 May 2025 07:00:26 +0000
Files and hashes: 1: _sl9DBu8zD2GcSKhFxD1X3AjAI4.crl (hash: Dzvg7N6Hh283KlVMYKhhc14YWDbnnGuRgsfWhpFlzgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:22:d5:3b:aa:83:2c:0d:a5:5e:c3:2a:f2:41:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Validity
Not Before: May 11 07:00:26 2025 GMT
Not After : May 12 07:00:26 2025 GMT
Subject: CN=e705ba8ddf3fba793646a93bf3424d0a969294dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:1f:df:b1:77:31:82:15:e3:4c:92:42:6d:
16:4d:89:a7:ae:cb:14:65:6b:b5:bb:62:92:4c:2f:
9c:24:8a:05:05:65:4e:f5:5a:46:12:a9:89:64:06:
45:bf:5b:db:fb:f6:4d:2e:4b:d7:d9:99:be:25:d3:
e1:a4:5d:83:3f:d0:45:57:19:2d:10:b2:89:22:f8:
d8:01:54:73:80:b4:9d:27:56:08:34:94:a2:d2:bc:
c1:0a:6e:e3:c8:07:c9:8d:99:da:8f:c7:51:17:1a:
c6:1c:4f:4f:a6:58:37:60:6c:e8:b4:7b:58:b0:62:
93:b1:5e:f7:9d:b1:b3:5c:95:35:15:36:f2:fd:25:
25:f5:15:32:02:2d:17:ce:4a:74:34:e0:9a:1e:07:
6e:51:00:61:f9:99:76:fc:18:3b:47:a5:76:cb:2e:
39:90:b9:d4:9b:9b:1c:96:12:83:4d:6e:20:ea:e3:
86:1e:e0:97:52:3e:e7:37:2b:54:08:57:92:28:b2:
9c:1d:a2:f2:77:ff:54:d0:8f:30:ba:a0:19:83:b9:
e4:3d:38:ee:ac:6e:a5:24:3c:aa:24:b4:09:32:f9:
e9:94:e0:f0:05:35:21:49:ad:bb:4a:7d:de:87:dd:
78:e5:f0:1c:2f:fd:1d:58:22:49:98:f0:83:15:e5:
9d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:05:BA:8D:DF:3F:BA:79:36:46:A9:3B:F3:42:4D:0A:96:92:94:DD
X509v3 Authority Key Identifier:
keyid:FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:bd:0a:04:77:32:76:49:e9:e3:24:a4:f2:21:b5:b1:8b:6c:
9c:3c:7a:24:2f:e5:1d:8a:ed:6e:6d:a7:f4:d0:7e:3c:77:2f:
56:ed:66:b7:7d:7d:04:ae:ee:ec:3d:7d:de:d1:50:95:2f:82:
a4:ef:c3:fc:95:b9:2c:d6:14:48:0f:99:7f:8c:a7:97:0c:eb:
87:67:86:42:1d:14:fb:75:04:7c:43:1f:d8:26:2f:f5:3f:82:
04:08:ab:5c:f3:4e:d7:ba:14:df:07:a4:0a:c0:d4:ba:29:13:
76:27:1a:a1:4c:86:c8:6d:a0:a0:0d:50:d2:1e:65:61:e6:c1:
55:06:66:07:b1:e3:08:48:2c:02:d2:53:ce:fd:6d:4f:51:a6:
54:cd:4b:dd:99:00:72:03:bb:c7:df:73:41:60:2b:ad:72:8d:
eb:3c:35:55:39:30:6b:7e:81:9c:e9:bc:fe:31:19:0b:8f:12:
dc:33:f6:23:59:a2:46:da:ad:e2:a0:fe:7b:53:08:bb:55:e8:
7b:5c:11:25:5c:35:02:5f:78:92:cf:44:16:d8:c0:79:b7:34:
7b:e2:81:07:9a:94:ce:ae:2a:2b:81:8b:90:09:a2:8b:86:61:
f0:ad:c9:24:62:e4:85:d6:9c:a0:69:08:12:4e:b5:a4:4e:23:
cc:4d:1e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:07:34 2025 by rpki-client