Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
File: MFTtpIzl_KSJJbrLoUeMisotOcw.mft (raw, json)
Hash identifier: /1/J7WI0QGa++S4eCr1Mlp3PPFXNjPer5xLI4Qw57i8=
Subject key identifier: 40:8A:D7:31:68:06:29:11:C0:E4:9C:7A:1F:76:64:68:3A:1A:F8:3A
Authority key identifier: 30:54:ED:A4:8C:E5:FC:A4:89:25:BA:CB:A1:47:8C:8A:CA:2D:39:CC
Certificate issuer: /CN=3054eda48ce5fca48925bacba1478c8aca2d39cc
Certificate serial: 0196BE2561661EF27C5F22DBBFDAC912CE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
Manifest number: 1458
Signing time: Sun 11 May 2025 07:00:42 +0000
Manifest this update: Sun 11 May 2025 07:00:42 +0000
Manifest next update: Mon 12 May 2025 07:00:42 +0000
Files and hashes: 1: MFTtpIzl_KSJJbrLoUeMisotOcw.crl (hash: PduYvxMaY/Htuw2Peqyi58eD/ESB8R1g7xvJbiLgCmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:61:66:1e:f2:7c:5f:22:db:bf:da:c9:12:ce:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3054eda48ce5fca48925bacba1478c8aca2d39cc
Validity
Not Before: May 11 07:00:42 2025 GMT
Not After : May 12 07:00:42 2025 GMT
Subject: CN=408ad73168062911c0e49c7a1f7664683a1af83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:0b:5f:ef:15:61:8f:e2:e5:57:8e:a8:63:
6b:02:69:b1:be:ec:c9:6d:38:3f:d1:07:8a:85:19:
77:3a:8d:3f:d8:94:b6:19:f6:b5:6e:b2:dc:a0:d8:
b2:90:32:56:a0:f1:9f:df:e4:11:fa:a0:bc:c6:bd:
93:ea:0c:fa:79:d0:e0:5d:4a:18:f2:cc:7d:26:78:
ab:3f:f8:62:d8:78:d3:38:25:57:64:20:e0:c1:07:
ec:3d:69:5d:84:ac:a5:26:b1:43:b4:fd:70:5f:e6:
0f:57:50:9b:f5:92:b5:91:cc:83:8d:68:e7:c7:4d:
55:7d:c4:97:65:1f:2b:6e:23:ca:36:8c:ad:06:f3:
ff:93:82:81:8c:a6:0c:b7:f8:60:78:4b:29:c5:8b:
b9:61:8c:c3:e5:8b:34:18:0f:a9:15:18:4e:39:31:
40:b0:ff:eb:63:78:d7:0c:83:16:76:00:3a:1c:11:
36:38:18:3a:4a:b1:55:56:b1:cf:e1:98:eb:8c:ef:
c7:ea:99:67:f1:45:d4:2c:81:44:63:f6:0c:87:1b:
8b:b8:97:61:c9:c8:5b:50:7f:43:04:34:71:b2:ab:
d7:db:0b:fa:21:68:a4:63:bd:e4:9d:98:75:7e:ff:
e9:fd:48:4c:34:45:e2:23:b6:c6:45:7d:9d:7e:83:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8A:D7:31:68:06:29:11:C0:E4:9C:7A:1F:76:64:68:3A:1A:F8:3A
X509v3 Authority Key Identifier:
keyid:30:54:ED:A4:8C:E5:FC:A4:89:25:BA:CB:A1:47:8C:8A:CA:2D:39:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:75:d6:8c:69:db:bb:f0:ea:44:5d:1a:8c:ab:f3:98:fc:df:
47:42:b5:2a:e9:ae:e1:19:eb:ff:a9:9b:62:d6:a3:82:74:e0:
33:af:82:bd:3b:af:06:bf:74:58:a3:e3:91:69:92:c2:08:9b:
8d:ee:e7:84:9a:48:9a:29:27:8f:09:31:a6:96:ec:cc:05:ee:
35:31:84:f0:4c:19:de:a5:48:16:83:06:68:80:6f:93:aa:7f:
bf:d1:5d:be:6c:f9:e6:39:97:32:db:3f:30:60:7a:a6:18:75:
4f:be:23:b9:90:e0:e7:db:43:49:c0:20:e2:9b:38:24:35:95:
ea:e0:90:a4:79:45:cb:9d:68:76:d0:75:78:7e:c8:38:5a:9c:
c0:ac:cc:be:34:80:da:03:bb:a2:5c:6b:36:f6:76:30:e3:90:
96:0d:52:75:39:12:d9:b1:a5:5d:e4:41:21:bc:fc:13:e8:40:
b8:f3:e0:07:94:82:7e:d6:1d:e6:f4:3c:1d:d1:dc:d3:4c:a1:
0b:66:4b:fe:90:87:d8:23:b5:3d:f0:74:ee:76:12:f8:8b:5e:
2d:45:df:92:e1:45:00:b0:85:54:95:12:c2:c2:5f:42:92:7c:
a0:02:5d:ec:c0:b2:89:77:90:a7:fb:06:64:a2:23:7c:55:67:
55:af:d5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:36:28 2025 by rpki-client