Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
File: fZ9lKePCbtCMlfdP5j17Lush9XE.mft (raw, json)
Hash identifier: siU8J5ewCH2wFB6eoYL0kWInWM9LAdhuMTnQHA9r+18=
Subject key identifier: C9:90:A7:C9:3A:A1:63:4F:BF:D9:8C:2A:09:0A:C3:36:38:77:9E:47
Authority key identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
Certificate issuer: /CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Certificate serial: 0196C8E012CCD0467934763E424483BAF7E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
Manifest number: 01CD
Signing time: Tue 13 May 2025 09:00:50 +0000
Manifest this update: Tue 13 May 2025 09:00:50 +0000
Manifest next update: Wed 14 May 2025 09:00:50 +0000
Files and hashes: 1: fZ9lKePCbtCMlfdP5j17Lush9XE.crl (hash: ju3oVXMyglPb7ZzRLX9Km7B2dnMSvmy4JnL2QPk3H2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:e0:12:cc:d0:46:79:34:76:3e:42:44:83:ba:f7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Validity
Not Before: May 13 09:00:50 2025 GMT
Not After : May 14 09:00:50 2025 GMT
Subject: CN=c990a7c93aa1634fbfd98c2a090ac33638779e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:da:b2:61:7a:9b:c5:03:48:7f:cf:e9:43:
45:78:7a:48:b9:d8:2e:33:8b:84:52:2d:d9:e5:fb:
ae:e3:ee:ac:5c:90:87:38:af:0f:97:9b:51:fd:29:
5c:f3:bf:55:28:5e:5a:be:39:3b:13:f8:c5:e0:44:
95:0e:4a:c0:7b:9a:dd:e5:99:07:ef:93:6e:80:18:
6c:91:8f:ce:93:7f:ed:c6:22:b6:a3:73:6e:98:dd:
df:15:35:09:ce:a0:f1:d4:a0:29:86:1f:2c:87:6b:
e3:0c:e2:6b:aa:01:19:f4:58:fd:14:a9:ff:cc:de:
fb:34:2f:db:2d:7c:b7:86:d4:c2:52:9a:ef:31:e7:
e4:01:9d:1f:a5:1e:f4:4e:ce:92:0f:97:ed:ab:18:
21:7e:80:b3:d4:91:de:82:3e:1b:cb:cf:c7:d2:c2:
0e:61:79:4d:fa:dd:b8:39:cf:70:bf:e4:10:af:82:
9a:82:9d:66:66:61:7e:2b:6b:29:5e:dd:5a:c6:37:
95:07:b1:2e:29:f5:1c:31:4b:b9:cf:0c:75:b2:4f:
9b:17:c2:e3:3f:c6:68:d0:49:cb:47:fb:6b:01:82:
36:50:65:c2:94:f8:b3:90:c8:af:32:28:4c:34:9a:
a4:7c:11:dc:66:fa:c2:1e:59:22:be:a9:e8:9a:bc:
05:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:90:A7:C9:3A:A1:63:4F:BF:D9:8C:2A:09:0A:C3:36:38:77:9E:47
X509v3 Authority Key Identifier:
keyid:7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ae:e3:21:9f:ef:7f:f6:48:f5:6f:ef:d0:41:e5:43:66:bb:
02:db:7c:95:2d:53:6e:2d:f8:ff:60:24:a2:1e:5f:37:55:b9:
d5:62:47:8b:43:d3:6d:20:a9:35:2d:5d:39:30:5a:8e:69:79:
6c:69:84:5e:73:d9:50:3b:fd:4c:25:8c:44:7c:be:a7:42:91:
18:a0:ef:81:fd:1d:6f:5c:66:3f:8c:53:42:53:ad:ba:4c:62:
fe:28:ff:17:5c:d5:36:16:c4:e5:b9:35:12:ba:dc:34:08:a9:
78:49:bc:43:be:94:be:3f:ce:32:1a:da:5b:da:07:bb:ab:ea:
f8:f6:16:c7:09:f7:88:da:0f:b4:21:cb:e9:91:17:af:7f:25:
9a:d2:6f:78:9b:d6:d9:55:c8:a9:d9:52:63:96:4a:e4:c6:f8:
42:a2:74:22:d7:7a:f4:1c:10:dc:7e:49:ef:c5:84:d3:66:d0:
c8:56:1c:9e:14:22:64:a8:fa:49:a2:a0:3c:c5:51:73:ef:e5:
9e:59:0a:0b:1e:ca:5d:16:1f:f0:1b:d6:6f:28:7a:c4:3e:a8:
6b:11:45:25:a7:a1:cf:13:00:28:1a:0f:03:7f:6b:1c:50:45:
37:57:93:34:01:ab:62:a6:e5:1b:93:16:53:f8:45:a9:65:88:
c5:bd:bf:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:02:12 2025 by rpki-client