Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
File: Rji3uq3cnWWuMsgX_meX7zeZaaM.mft (raw, json)
Hash identifier: TZeRuZ5ELbvsEffXIdyWxIuHHuV+HqJ9nUOhTjtUhB0=
Subject key identifier: 0D:91:90:96:1E:7D:92:77:9D:45:FD:9D:47:86:04:3A:1C:4C:6F:8C
Authority key identifier: 46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
Certificate issuer: /CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Certificate serial: 0196C2A72900DDDF76CA9EB70DE0DF69A73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
Manifest number: 1409
Signing time: Mon 12 May 2025 04:00:56 +0000
Manifest this update: Mon 12 May 2025 04:00:56 +0000
Manifest next update: Tue 13 May 2025 04:00:56 +0000
Files and hashes: 1: Rji3uq3cnWWuMsgX_meX7zeZaaM.crl (hash: 89OCxyWMmwg45sE4mF+VG4WtdJxyWkld1kNyvOXcuuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a7:29:00:dd:df:76:ca:9e:b7:0d:e0:df:69:a7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Validity
Not Before: May 12 04:00:56 2025 GMT
Not After : May 13 04:00:56 2025 GMT
Subject: CN=0d9190961e7d92779d45fd9d4786043a1c4c6f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:8b:8b:8b:2f:f5:ed:a6:21:35:d2:c4:9f:
83:53:63:e8:dc:cd:b5:af:6e:92:e9:de:2d:90:a8:
cf:d1:ac:0d:94:26:bc:95:ca:10:ed:62:33:b3:e9:
b5:c4:05:c7:8b:34:4e:16:be:c0:cd:74:2e:fa:46:
c6:03:20:46:fa:de:d2:56:d4:ea:c2:a5:8f:bf:5f:
49:cb:47:6d:90:a5:3e:39:86:da:85:1d:eb:58:a9:
21:d7:bd:7f:ad:c6:0b:fa:bc:24:47:d2:2c:19:2b:
f4:37:8e:eb:fd:8f:23:d8:61:0b:32:03:0a:40:40:
24:1e:7d:7b:fd:fa:e8:ab:e9:5c:cd:ae:56:0a:5e:
a8:13:fa:84:77:1e:b2:8c:88:07:d6:90:18:ed:91:
e2:de:b6:85:09:6a:a2:a9:3d:d4:3e:80:e1:ca:bc:
3f:0c:44:1a:b6:93:d5:61:36:29:4c:9d:b2:f0:6d:
b8:ce:c8:a9:fd:e7:17:d1:a7:d8:fb:c9:9a:fe:d6:
be:26:cc:5f:72:86:56:0e:4e:10:f5:a8:02:84:11:
d2:45:e5:23:4b:ba:65:9f:9f:cd:5a:9e:d9:08:9e:
b1:40:c7:22:31:f5:a6:3b:73:01:70:1f:8d:45:4a:
76:c6:5b:56:28:30:61:f0:f7:72:cd:a9:16:ed:10:
67:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:91:90:96:1E:7D:92:77:9D:45:FD:9D:47:86:04:3A:1C:4C:6F:8C
X509v3 Authority Key Identifier:
keyid:46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bd:6e:c7:15:e8:3a:b9:e2:3d:ef:2f:f7:f8:0b:77:f2:55:
d9:99:9f:d6:06:8d:d8:ed:48:76:0e:c9:37:a7:e9:1f:c5:ec:
02:bb:1e:20:ce:4f:11:33:6f:2c:2d:71:26:8a:7d:a8:06:09:
03:68:05:70:0d:c8:0d:63:b5:56:92:07:56:56:27:be:4e:c9:
1d:2b:bc:6e:81:43:07:79:ef:ca:bb:fd:d0:f5:46:71:df:b8:
84:df:28:9e:1c:e7:d3:70:c0:2e:28:9a:81:65:1f:77:dd:6b:
0b:14:3d:f9:d1:17:8f:11:37:4b:08:7d:92:53:20:40:7a:10:
a7:3e:b9:aa:3a:24:b3:f0:e5:42:9a:72:f0:f9:71:4b:e9:55:
ea:7b:dd:14:9c:d2:c4:79:18:4a:37:ab:20:28:6c:4a:cf:d3:
90:17:63:31:05:36:4b:4b:35:77:2e:cc:79:d0:a4:cc:f3:1e:
0a:5a:2e:2e:b3:7b:85:fa:28:ee:67:af:e9:a8:92:95:af:4f:
8a:bc:76:03:cb:bc:87:0b:fe:e1:b9:00:b0:d3:9a:63:fd:9b:
e7:de:6a:9c:13:98:96:19:c7:de:ab:f7:10:86:21:ee:08:54:
c2:93:45:eb:f8:fd:8a:68:bc:71:d6:00:44:b1:50:b0:c9:88:
c7:af:d6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:06:56 2025 by rpki-client