Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
File: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft (raw, json)
Hash identifier: 0fjg+9kCWgnisvQJ/3B8T4qk/vqbq1EK5t0G4WFg0Ok=
Subject key identifier: 6B:DB:4E:46:DE:74:5C:57:02:0E:40:30:73:D1:72:F4:10:7A:10:91
Authority key identifier: 71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2
Certificate issuer: /CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
Certificate serial: 0196BDEE560FB739559ED5F1ED658FAB93FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
Manifest number: 05A8
Signing time: Sun 11 May 2025 06:00:35 +0000
Manifest this update: Sun 11 May 2025 06:00:35 +0000
Manifest next update: Mon 12 May 2025 06:00:35 +0000
Files and hashes: 1: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl (hash: 5yMUYoWeGtXhkRL5CyfG18S2bsBaY+3hKQKJXv7JVdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:56:0f:b7:39:55:9e:d5:f1:ed:65:8f:ab:93:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
Validity
Not Before: May 11 06:00:35 2025 GMT
Not After : May 12 06:00:35 2025 GMT
Subject: CN=6bdb4e46de745c57020e403073d172f4107a1091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:4e:55:cb:c4:ad:d4:05:0c:15:c6:7e:94:
2f:b8:60:a1:c3:97:50:e7:47:1f:dd:97:3b:f4:9c:
40:b7:e1:df:13:2a:7c:05:71:2b:ed:c8:d1:7a:fa:
07:93:47:6d:19:bd:d2:ef:33:9c:7f:bb:ad:82:df:
f9:3f:4e:73:a3:fc:a9:ad:c5:cf:3f:a9:e6:0f:4a:
0a:00:37:7d:d5:ca:c4:2f:a8:3a:7e:3c:b8:36:c1:
bb:1d:61:7c:88:f9:01:c0:8a:85:9c:3f:47:40:76:
88:d6:08:d7:41:47:41:41:d3:5c:5a:3f:d4:a4:9f:
8e:3c:ad:b1:9b:f6:b4:8e:03:e0:2d:de:bd:82:d6:
60:23:2d:0e:5a:a7:ff:2f:97:c3:1e:5a:59:e9:3b:
ed:9a:57:c7:4f:3e:d7:ee:4a:24:f8:ad:57:a5:84:
01:8f:f5:91:9e:c0:2f:5e:c8:04:60:25:49:cb:c5:
0b:cc:ec:54:e4:4b:fe:00:01:5b:5e:16:be:ee:89:
22:5a:bc:da:70:76:2b:79:bc:d1:f4:f3:b5:75:d8:
0f:51:2e:c7:0e:5e:84:3f:a3:04:c8:84:90:6d:c4:
23:5f:30:00:7f:d3:65:58:0d:a8:78:df:af:1e:83:
f9:c4:7e:ac:99:b2:8f:93:e5:e8:1e:0c:4a:de:fb:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DB:4E:46:DE:74:5C:57:02:0E:40:30:73:D1:72:F4:10:7A:10:91
X509v3 Authority Key Identifier:
keyid:71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1b:c0:c1:db:b9:db:20:59:ff:c1:31:0d:4e:3d:f0:fa:8e:
47:1d:a7:ba:ca:84:56:1d:6f:03:d8:ec:10:40:9f:7d:39:3d:
0f:ea:34:cb:4b:42:58:14:17:1f:88:fd:d9:9d:f2:61:bd:61:
c2:32:6e:2a:90:97:71:84:68:35:77:8c:f3:1f:94:26:db:ab:
93:8b:82:78:53:6c:59:e9:95:87:e3:3b:50:5d:b4:d3:7a:05:
3a:14:3f:a5:13:a9:43:30:ba:5e:1d:f8:eb:0d:3f:95:62:9a:
49:21:a0:89:76:31:3f:9a:63:53:58:e4:dd:7b:11:bd:ff:0f:
8e:d0:8a:fd:59:e0:3f:fd:f0:b2:eb:99:00:72:e7:3a:8a:f5:
ff:3c:cc:83:f6:8a:35:c7:84:49:8c:8b:df:28:11:19:c7:95:
98:71:6f:1d:63:c6:68:da:87:ad:5a:8b:0a:64:ec:f5:b7:64:
32:3c:57:79:0c:46:dc:43:84:d8:21:c5:96:91:0b:44:36:7f:
8d:23:d8:e3:cc:46:69:3e:55:11:6f:dd:37:35:d2:92:42:2c:
50:cd:a1:84:d5:82:6e:66:97:4f:de:29:5e:59:f1:53:9d:c4:
92:96:39:63:d7:8b:94:51:3c:3d:0f:65:ec:26:06:bf:23:a8:
05:05:fa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:30:24 2025 by rpki-client