Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
File: rDWoN7KvW2-xjKNdFguamhgiBO8.mft (raw, json)
Hash identifier: wMt4CI8I/b6uJpKKO7ym3oUuYNhcl96yjPDTdn8R4nw=
Subject key identifier: 56:7A:EE:60:65:82:8E:DB:0F:36:FD:65:A5:B4:47:9C:B0:3A:EC:10
Authority key identifier: AC:35:A8:37:B2:AF:5B:6F:B1:8C:A3:5D:16:0B:9A:9A:18:22:04:EF
Certificate issuer: /CN=ac35a837b2af5b6fb18ca35d160b9a9a182204ef
Certificate serial: 0196C916FA1B914B9B2804F75AF8745E4371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
Manifest number: 1023
Signing time: Tue 13 May 2025 10:00:48 +0000
Manifest this update: Tue 13 May 2025 10:00:48 +0000
Manifest next update: Wed 14 May 2025 10:00:48 +0000
Files and hashes: 1: rDWoN7KvW2-xjKNdFguamhgiBO8.crl (hash: SXw67vPNY7/dGBd7gQiMGYvOwoX6lApUkCuyvYO71HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:fa:1b:91:4b:9b:28:04:f7:5a:f8:74:5e:43:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac35a837b2af5b6fb18ca35d160b9a9a182204ef
Validity
Not Before: May 13 10:00:48 2025 GMT
Not After : May 14 10:00:48 2025 GMT
Subject: CN=567aee6065828edb0f36fd65a5b4479cb03aec10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:7b:8b:e1:de:ae:d9:0b:f5:ba:65:c0:00:
8c:5a:72:7e:c3:73:20:0a:75:6b:3a:aa:fd:bf:30:
3d:40:dc:69:74:12:de:08:73:ff:4c:12:1e:f4:07:
5e:4f:33:f9:d6:9c:64:75:ca:b0:eb:5b:88:7f:86:
ad:8c:74:2c:f8:e8:ef:3c:bd:01:ba:07:9f:a5:0b:
50:95:7f:3b:5b:98:6a:0b:87:fd:ba:24:43:ef:25:
19:72:38:41:34:07:d4:95:82:1a:eb:a6:a1:0b:16:
3a:ab:6d:de:16:af:1f:e6:59:3a:36:b5:91:4b:75:
b0:9b:a2:30:7a:ad:71:4c:3f:95:88:11:27:78:b4:
81:f0:f3:56:18:0e:36:26:9a:aa:0c:dd:5f:da:5c:
0b:ac:98:75:b2:50:1b:cb:d4:49:d1:51:bf:ea:f2:
9b:92:bb:16:7f:26:58:75:c9:93:24:f8:b9:b4:56:
4f:eb:7b:f7:3b:52:cd:4e:66:d8:4b:ad:f5:ac:42:
8e:ee:5e:95:e6:b5:4a:a3:6e:04:35:7f:89:a2:dd:
44:20:cf:40:f1:4a:66:5e:78:8d:aa:a4:2e:53:30:
bf:70:85:66:2f:16:3a:e8:ec:3e:35:a5:a4:f7:4f:
3f:34:1f:30:05:93:e6:12:30:c5:d4:0c:9f:86:95:
78:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7A:EE:60:65:82:8E:DB:0F:36:FD:65:A5:B4:47:9C:B0:3A:EC:10
X509v3 Authority Key Identifier:
keyid:AC:35:A8:37:B2:AF:5B:6F:B1:8C:A3:5D:16:0B:9A:9A:18:22:04:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:11:22:22:5a:b4:a8:c2:9b:58:8a:c0:79:b8:f6:50:d7:de:
67:d1:3e:2f:7d:b0:d7:f4:33:ea:90:72:db:a5:1c:14:33:41:
05:f6:6d:dc:b6:42:65:ca:24:9b:99:d2:d3:d2:e4:f5:79:f4:
54:f7:7f:03:bb:a2:97:53:6d:62:b3:f1:1e:92:aa:40:cc:5f:
7f:fe:3b:6b:c1:99:70:21:da:b4:9d:98:bd:7f:ec:b8:66:2d:
66:c8:c5:1a:07:e4:53:df:4e:9a:4c:e5:95:ec:e1:3a:b9:7f:
24:f6:d1:64:b9:c4:cc:fc:87:fe:27:00:7c:98:1d:b0:19:87:
91:25:09:b7:e7:8d:1d:54:79:d5:c4:bc:51:6a:d9:f1:e6:09:
8d:04:e5:f8:3a:7b:a3:0a:7a:e8:2b:2d:1e:b2:74:55:5e:c2:
dc:e7:d5:79:9d:d6:08:2f:4c:cf:21:3b:76:63:0e:da:51:6b:
01:8a:60:b3:00:36:4d:05:95:8a:22:ab:ae:47:39:4a:9c:b1:
a0:2c:6d:70:4e:39:89:95:a0:95:83:2d:aa:85:58:34:a0:d3:
a1:d1:43:fa:e2:1c:43:66:f5:52:67:5a:66:5a:91:f5:8d:c0:
db:a2:11:31:dc:0f:b4:c0:5e:a4:60:57:b5:17:81:8a:3c:ab:
54:1f:d9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:44:52 2025 by rpki-client