Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
File: B_xIFsg7wTWHjxB93N9DOB3JPPA.mft (raw, json)
Hash identifier: PK2JLTH+2r3CjNTFYqgdSuqAklZPRejXxiDRX9+j8gE=
Subject key identifier: 64:CA:3F:75:DD:B8:A3:25:45:17:63:91:0E:6C:D9:80:00:1E:26:B0
Authority key identifier: 07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
Certificate issuer: /CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Certificate serial: 0196B9A44F35777AAB444C3D1D64602932A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
Manifest number: 152E
Signing time: Sat 10 May 2025 10:01:15 +0000
Manifest this update: Sat 10 May 2025 10:01:15 +0000
Manifest next update: Sun 11 May 2025 10:01:15 +0000
Files and hashes: 1: B_xIFsg7wTWHjxB93N9DOB3JPPA.crl (hash: XLa2sTBfrVsu7WNQoyB2QRE7iWBFIsSQjYMqpwGtUH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:4f:35:77:7a:ab:44:4c:3d:1d:64:60:29:32:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Validity
Not Before: May 10 10:01:15 2025 GMT
Not After : May 11 10:01:15 2025 GMT
Subject: CN=64ca3f75ddb8a325451763910e6cd980001e26b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:e0:ce:1a:41:2b:f3:57:92:26:fe:92:00:
b8:63:6c:b2:6d:f9:0f:0b:00:dc:74:57:86:41:e7:
c3:2f:f5:45:d9:e6:5a:01:aa:6d:b0:25:fe:e8:13:
d7:52:b8:9d:e8:c4:6d:37:ea:64:e2:a6:c2:93:59:
93:95:7b:13:4e:7a:19:d1:98:6d:9c:c7:49:fd:1b:
59:fa:fc:38:5b:12:93:32:7a:98:be:dd:de:2f:44:
4f:db:b5:2e:dd:68:42:b6:5e:85:33:8a:63:c6:23:
27:cc:e4:44:a4:0a:c2:d5:68:aa:03:0f:7f:50:3e:
e6:50:31:d7:c3:49:b7:ae:ff:c3:e3:e6:04:28:dc:
a4:0c:9c:66:24:4b:e6:11:1d:b7:b9:85:58:64:f3:
13:5d:52:6d:99:bc:46:80:36:76:59:93:82:1e:d3:
01:12:83:18:95:1b:27:8d:c7:b7:bd:1f:9d:de:2b:
b3:e5:53:9e:7c:be:66:ca:00:1b:53:7d:c2:f1:13:
ee:23:53:e2:b1:63:3e:1c:fa:46:51:57:f4:05:83:
ac:36:01:e6:12:54:ab:27:58:95:e1:d1:3c:d2:7d:
18:47:9d:05:49:c8:a9:3a:b0:2b:fa:56:92:f3:52:
ab:84:dd:5c:09:82:65:50:e5:8b:57:3d:bc:ad:44:
e5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CA:3F:75:DD:B8:A3:25:45:17:63:91:0E:6C:D9:80:00:1E:26:B0
X509v3 Authority Key Identifier:
keyid:07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:52:f5:bb:cb:c2:f1:a6:81:93:55:fc:fa:ea:5b:66:57:55:
d1:28:35:f2:58:cf:77:39:ca:97:c6:63:89:48:f6:c7:aa:e2:
2f:ed:ef:d9:64:08:56:60:07:e7:09:f9:c4:ef:d1:16:eb:94:
7a:68:e6:f3:a3:19:00:34:57:35:86:6e:b3:93:12:f9:42:71:
e1:76:56:3c:d3:95:0b:e3:97:82:c6:e3:c2:fa:52:d4:42:2f:
64:61:8b:59:a9:7a:d0:0f:db:e4:bb:46:72:dd:86:4e:be:39:
97:70:bf:08:af:33:ff:aa:ba:09:06:18:92:d7:cb:f4:d9:a7:
c5:8a:24:7a:fb:fe:ba:f9:52:eb:09:6f:cd:ce:ab:67:f1:d1:
48:62:44:93:a1:a0:99:6c:f8:f3:db:c4:15:00:a5:82:10:ce:
82:89:ab:af:02:2b:5a:0c:46:79:74:85:31:be:85:0f:ec:66:
e9:39:63:25:09:49:e0:54:13:f3:02:3f:25:db:71:76:67:67:
25:62:82:21:fd:ce:d3:38:95:b7:75:f3:85:8f:bc:14:1a:ba:
fa:00:f5:4d:32:54:98:4f:4e:0a:a1:85:7e:9f:14:c9:5d:55:
d2:92:e1:71:05:82:e2:46:b4:65:3c:92:d1:38:c8:25:bc:d5:
4f:e7:db:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:02:42 2025 by rpki-client