Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
File: SdWTfY5gK0jLL_UXFtmV0jofPho.mft (raw, json)
Hash identifier: JpRLIj2Pt95R3Joa6NM8E/fV1T51rXN+PWU8P1HLgL8=
Subject key identifier: 96:58:4E:88:5E:FD:14:BF:35:13:E3:4A:A2:33:96:84:4F:C2:15:04
Authority key identifier: 49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
Certificate issuer: /CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Certificate serial: 0196BD80C8E1F086348DF6B80E7AD9575DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
Manifest number: 0DF7
Signing time: Sun 11 May 2025 04:00:55 +0000
Manifest this update: Sun 11 May 2025 04:00:55 +0000
Manifest next update: Mon 12 May 2025 04:00:55 +0000
Files and hashes: 1: SdWTfY5gK0jLL_UXFtmV0jofPho.crl (hash: lS5P0eds16Vp9RSgKTiisljEIU1US6rGEZ0vbJ4KaB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:c8:e1:f0:86:34:8d:f6:b8:0e:7a:d9:57:5d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Validity
Not Before: May 11 04:00:55 2025 GMT
Not After : May 12 04:00:55 2025 GMT
Subject: CN=96584e885efd14bf3513e34aa23396844fc21504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:18:29:ce:2f:b8:95:77:70:bc:ba:57:77:
9b:65:fc:32:22:da:b3:6f:09:8a:de:ee:a1:a4:ea:
fa:c1:30:00:fb:a2:77:2c:5d:c6:c9:47:dc:e7:d0:
f6:b1:a7:27:f2:e1:07:6b:02:c6:17:a2:74:f6:d3:
f5:52:05:f6:7f:3d:f4:2b:3b:b5:aa:14:6f:4f:f0:
5f:38:5b:27:e5:9d:58:78:ab:54:a5:b2:84:c0:bb:
8e:53:57:ff:94:7b:61:a3:ff:bf:ad:ff:35:0c:a7:
c8:2a:e9:31:c9:20:55:27:4a:14:95:49:e7:29:3d:
82:57:87:ce:d2:df:ab:3a:75:a6:d8:85:c7:f2:0f:
84:02:b1:b8:6a:62:f4:13:cf:c6:e7:91:ff:7f:97:
8d:d0:7b:f9:cc:5a:69:fd:d1:d2:18:7e:8f:48:8b:
47:29:ed:fe:3b:8a:30:66:3e:c4:4f:33:c7:b4:ba:
0a:e7:94:92:f3:ff:01:87:a8:9d:d9:3d:85:06:0e:
3a:f5:69:28:19:95:69:8a:30:cd:be:85:5e:6f:15:
d6:24:e9:d8:46:89:90:1d:be:5b:fd:8f:93:6f:f9:
9a:da:e1:22:77:c9:a1:e5:98:45:c7:89:76:85:36:
37:4f:66:d6:4f:79:77:e7:b4:ea:7a:8e:d0:98:eb:
b6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:58:4E:88:5E:FD:14:BF:35:13:E3:4A:A2:33:96:84:4F:C2:15:04
X509v3 Authority Key Identifier:
keyid:49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e1:55:06:e5:71:02:d1:11:3e:66:cb:2f:8b:7a:aa:d6:08:
a3:69:42:3d:44:7d:95:d3:6d:be:85:81:4c:88:b7:dc:28:e3:
39:99:c0:ad:bb:aa:bd:aa:eb:01:55:60:94:de:06:66:6f:17:
20:64:72:21:b6:bc:eb:2d:bd:ce:fc:e9:05:96:7a:48:ad:ff:
a1:5b:ab:a5:98:43:dd:74:64:93:78:d5:58:ef:6b:a4:a4:2c:
d5:82:32:9b:09:c6:fe:1a:c5:35:39:96:db:6f:a6:ab:31:24:
ad:c7:83:c8:9b:cb:52:5b:23:5c:9e:98:b6:82:55:36:cc:27:
10:ed:97:ea:57:3f:70:16:89:43:99:51:db:bb:08:6a:5f:2e:
be:d8:4d:df:b7:25:28:fc:b0:e2:48:df:79:35:c4:5c:17:8b:
c0:8c:d9:31:fa:2d:95:d4:6b:eb:91:72:4e:f9:af:43:53:d6:
55:1c:3f:39:ae:9d:c1:78:89:ef:3e:de:50:de:00:84:96:23:
5c:9c:6d:0b:60:3e:8f:f3:fb:9f:70:fa:83:2c:64:f3:69:cf:
c9:7c:da:0e:be:7e:36:c0:69:00:74:14:01:f2:83:da:ae:55:
bb:f0:4a:89:28:53:ea:74:c7:05:8b:45:dc:80:2d:df:58:ca:
79:fb:ca:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:03:56 2025 by rpki-client