Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft
File: rIpdP4uUYpQnOEoSDHdHYFY611o.mft (raw, json)
Hash identifier: 4v8PeAtLfNY/zDAYu9LFIP3iYjE8dW2xVtE4hzXlaos=
Subject key identifier: F3:9F:D8:23:A2:F7:75:EE:C9:7A:17:28:FC:6A:77:2C:0C:3E:34:27
Authority key identifier: AC:8A:5D:3F:8B:94:62:94:27:38:4A:12:0C:77:47:60:56:3A:D7:5A
Certificate issuer: /CN=ac8a5d3f8b94629427384a120c774760563ad75a
Certificate serial: 0196C34C6514AB2098A005874EEAA5AF72EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpdP4uUYpQnOEoSDHdHYFY611o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft
Manifest number: 0F14
Signing time: Mon 12 May 2025 07:01:25 +0000
Manifest this update: Mon 12 May 2025 07:01:25 +0000
Manifest next update: Tue 13 May 2025 07:01:25 +0000
Files and hashes: 1: rIpdP4uUYpQnOEoSDHdHYFY611o.crl (hash: jzAc9aWmsuEGXFB7YohiqpgbEEGbyC9AJOlu6RIzC7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpdP4uUYpQnOEoSDHdHYFY611o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:65:14:ab:20:98:a0:05:87:4e:ea:a5:af:72:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a5d3f8b94629427384a120c774760563ad75a
Validity
Not Before: May 12 07:01:25 2025 GMT
Not After : May 13 07:01:25 2025 GMT
Subject: CN=f39fd823a2f775eec97a1728fc6a772c0c3e3427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:ef:f8:88:c3:ec:4a:e9:82:b2:5f:8a:b3:
7a:fc:77:36:a6:52:ff:18:7a:41:e2:5d:2c:67:37:
60:c0:64:5a:57:1f:af:98:1f:4c:35:94:ed:e3:2d:
17:88:c1:bd:c1:6a:ab:0c:a7:2d:56:58:ca:8a:1e:
c1:e2:fb:de:56:23:ef:81:9b:f4:10:6d:a7:36:ab:
90:00:44:c4:dc:11:a7:f9:ae:22:35:ea:24:bf:73:
ab:7f:43:9a:47:ce:56:d9:cc:01:b3:d7:2d:f2:8d:
00:eb:60:27:21:13:ab:56:4a:7a:a8:c6:7b:8d:e1:
44:aa:e9:e9:df:9a:28:12:63:57:4f:a0:e3:c0:c5:
f3:58:2c:4f:3e:6a:e8:7a:4b:e9:49:b2:08:7c:f2:
65:dc:b5:6f:59:a1:79:f8:29:d6:62:19:78:d8:90:
e7:ea:cc:a9:27:b5:97:e4:d1:66:d4:3f:fd:f1:92:
62:48:23:a2:00:03:b7:03:c5:d2:53:9d:97:28:18:
6f:3d:08:7d:4e:9a:a3:33:a8:b2:a9:3f:18:1f:e4:
8f:3a:af:a4:5c:ab:50:cc:f7:6b:d1:43:f4:30:f9:
91:7a:5f:69:fe:ca:7c:3b:ad:6b:aa:b8:9a:61:1f:
6b:ba:e1:f7:02:dc:c8:03:35:d0:60:7d:78:c6:d0:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9F:D8:23:A2:F7:75:EE:C9:7A:17:28:FC:6A:77:2C:0C:3E:34:27
X509v3 Authority Key Identifier:
keyid:AC:8A:5D:3F:8B:94:62:94:27:38:4A:12:0C:77:47:60:56:3A:D7:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpdP4uUYpQnOEoSDHdHYFY611o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:99:7a:23:fa:fe:24:a5:8d:f1:e9:99:6e:27:f3:f7:ea:26:
f2:58:5b:c9:fa:b6:e3:71:bd:76:fc:7c:84:e2:36:19:02:0d:
35:b1:e8:ba:b8:ac:9c:d2:e0:1c:f1:91:a8:dd:00:8e:a2:87:
5c:54:6d:53:6e:1b:d2:45:87:7a:ee:18:ff:52:88:54:b4:e5:
53:f7:fa:32:4c:59:62:e5:7c:01:4a:77:92:00:c7:d7:0b:6b:
46:2f:50:97:1a:4e:9c:f3:91:41:50:9f:31:c8:2c:98:18:d8:
04:b8:4e:4e:ad:52:28:74:aa:ad:10:52:5c:00:51:f8:8a:b4:
0a:5a:3d:5b:0c:33:22:bc:cf:cf:26:2b:3e:fc:87:c3:40:fa:
a2:e5:b0:ba:27:45:d7:06:a3:e0:16:3e:33:31:f1:dd:c4:d8:
74:a0:ca:25:55:d0:47:2b:7d:92:35:b4:ea:60:ec:9a:ca:bf:
26:b9:b6:da:5c:3f:1c:f0:e9:59:eb:c0:7f:06:b8:4d:b3:cf:
1e:12:27:d4:81:1a:8b:54:bf:f4:8a:5f:e5:5b:08:e7:2e:40:
56:7b:dd:5f:1b:d5:dc:20:f3:bb:1e:ab:38:8b:e7:21:f3:17:
8b:5f:55:ba:3c:da:03:03:19:a8:0e:44:f1:08:c3:7c:5b:66:
ba:0c:60:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:57:07 2025 by rpki-client