Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
File: CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json)
Hash identifier: gmI+pW23kLN5tdqQt5bwRDkqRNPxv0pLphCLGQk8mSE=
Subject key identifier: 77:3C:17:67:FE:2D:D8:9A:2A:03:5A:08:B8:62:A9:E8:D8:F3:51:FB
Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
Certificate issuer: /CN=0979f537b09ebeaddf9878749d1f88753c540c75
Certificate serial: 0196BE5CA08AB680B7B03343E3EF21635753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 08:01:03 +0000
Manifest this update: Sun 11 May 2025 08:01:03 +0000
Manifest next update: Mon 12 May 2025 08:01:03 +0000
Files and hashes: 1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: 2cEaEe/iragsk4LASnnWiRbFqrkAws5LZ+4CXuM3iak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:a0:8a:b6:80:b7:b0:33:43:e3:ef:21:63:57:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75
Validity
Not Before: May 11 08:01:03 2025 GMT
Not After : May 12 08:01:03 2025 GMT
Subject: CN=773c1767fe2dd89a2a035a08b862a9e8d8f351fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:ac:2c:7b:84:78:b7:6c:8d:af:b6:f8:c0:
bc:1c:5f:94:15:c3:d1:f1:98:1a:0b:54:19:42:a6:
67:94:3a:28:11:2f:d2:3b:ef:fc:b2:93:fd:1b:e7:
8f:3f:48:85:73:40:b5:de:7c:e6:b5:bd:7d:05:eb:
37:14:17:71:4b:cd:5f:a5:55:b9:dd:81:98:92:ba:
99:56:34:65:24:ca:55:c7:3c:c8:45:8f:3e:f8:58:
dc:c2:8f:75:e5:c7:c1:e9:26:a6:7f:c7:eb:db:99:
6b:95:2a:bf:23:9b:b2:5b:98:eb:dd:f4:26:c2:9c:
bb:75:03:f2:f2:0f:a9:9e:5b:e9:b0:16:ab:3d:05:
a0:bf:b5:48:c3:82:c8:f8:f3:f7:32:8e:34:9e:db:
5c:06:08:ca:38:73:33:92:c5:26:63:b8:f0:26:89:
c0:a5:32:74:cb:03:58:1b:8f:d1:56:f4:6d:bf:25:
b4:38:a3:8a:97:ea:9b:2d:e5:e6:a3:7f:c3:98:e0:
15:f9:e9:c1:3f:7c:9d:2f:d2:0e:4e:f4:89:06:83:
8b:10:65:b8:f3:2d:35:43:a2:f6:9c:b3:b7:55:ad:
80:48:77:0f:df:cc:cc:3b:a1:1c:a3:6d:30:d5:97:
1f:9b:84:da:b1:47:ed:cf:08:bf:13:f9:51:83:53:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3C:17:67:FE:2D:D8:9A:2A:03:5A:08:B8:62:A9:E8:D8:F3:51:FB
X509v3 Authority Key Identifier:
keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:74:37:7f:74:80:74:88:28:df:0e:d1:90:91:25:ac:a2:91:
ed:c6:80:a8:89:2d:f3:68:d6:ab:0a:1f:a8:92:71:c6:cf:64:
db:f3:7a:53:63:51:21:ff:7b:cc:1b:50:51:d7:8a:7c:2f:95:
e7:80:79:f2:b2:fe:2d:9e:4a:42:26:27:9e:6c:ff:ea:61:df:
a4:69:5f:81:8f:0b:ed:2c:39:dc:be:4c:4b:09:44:1a:ad:c9:
2f:b5:e6:55:9c:67:ba:cc:ff:fc:3b:48:8d:d6:6c:2f:8d:5d:
65:d3:46:87:80:95:3a:6b:ca:24:e5:1b:e6:4e:28:5d:8a:a3:
65:9d:c5:96:6e:5a:ef:6a:f6:3c:13:be:30:c0:1f:56:86:84:
fe:c2:cd:15:e8:4a:85:f3:e5:0d:2d:5d:ad:52:a0:40:df:7f:
55:ec:b6:09:cd:3d:54:10:35:b1:d7:8a:38:f8:1f:1e:17:d9:
4f:3b:f2:ef:b8:8b:19:cd:93:b5:16:a1:ee:2e:a5:d0:08:fd:
96:2b:5f:1e:76:5e:ff:f0:b4:5e:6c:76:a3:a6:9a:bf:fc:9d:
23:52:4c:0a:1f:b0:19:0d:96:d4:53:4b:26:70:94:eb:19:54:
a4:ab:e1:ee:ba:05:6b:3f:c3:9a:82:be:cb:07:e1:e8:a8:97:
5b:64:68:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:52:20 2025 by rpki-client