Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
File: l213R7vhqAE1QKcW0lzHh_h9tmo.mft (raw, json)
Hash identifier: s3Ekq4tyLD7YXUklGOMri/+9P0wiFXcF51l23v5acOA=
Subject key identifier: 71:58:53:60:F2:55:F6:16:D3:47:E7:8D:5B:AA:55:C8:77:60:A7:94
Authority key identifier: 97:6D:77:47:BB:E1:A8:01:35:40:A7:16:D2:5C:C7:87:F8:7D:B6:6A
Certificate issuer: /CN=976d7747bbe1a8013540a716d25cc787f87db66a
Certificate serial: 0196BF6FBC5D824794126EA2E7E9A651D11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l213R7vhqAE1QKcW0lzHh_h9tmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
Manifest number: 0BDF
Signing time: Sun 11 May 2025 13:01:33 +0000
Manifest this update: Sun 11 May 2025 13:01:33 +0000
Manifest next update: Mon 12 May 2025 13:01:33 +0000
Files and hashes: 1: l213R7vhqAE1QKcW0lzHh_h9tmo.crl (hash: xyB8SDJx6J5qMcwjYwIkN/hLwhjPRdsEViFDmyPBPBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l213R7vhqAE1QKcW0lzHh_h9tmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:bc:5d:82:47:94:12:6e:a2:e7:e9:a6:51:d1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976d7747bbe1a8013540a716d25cc787f87db66a
Validity
Not Before: May 11 13:01:33 2025 GMT
Not After : May 12 13:01:33 2025 GMT
Subject: CN=71585360f255f616d347e78d5baa55c87760a794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:3b:7a:6b:a1:0e:af:fc:be:ca:5a:bf:c2:
5a:14:cf:56:ed:9c:1a:93:ea:cd:07:03:a4:af:68:
55:93:6f:de:c1:79:92:92:77:89:c6:cc:a3:4c:90:
c0:0d:d8:ed:d1:04:3d:bc:62:64:95:06:09:51:e1:
0f:40:d8:91:5a:33:fe:95:c2:c2:51:f9:66:fa:65:
75:52:0d:a6:64:bf:c9:8f:8d:a6:d1:39:11:1f:c0:
a3:b0:fa:46:ee:7b:c3:48:2a:5f:dd:e8:c4:19:0c:
44:85:fd:c0:04:83:2f:ec:68:32:9a:c9:4b:6a:77:
ee:ae:b9:37:53:dc:49:b6:98:aa:d6:55:0a:19:ac:
2f:99:f2:11:8a:ee:ac:ee:d7:b4:33:08:e5:18:d0:
4d:15:da:03:0f:02:00:72:f9:38:ac:b8:92:3e:62:
f1:46:0b:7c:d9:9b:c9:0f:db:a6:23:8e:f4:b6:09:
e3:af:b0:db:57:b1:8c:28:a1:2a:14:46:1b:ce:b7:
1b:dd:02:97:48:b1:71:62:40:f0:ad:a9:06:7a:34:
e1:c6:50:e4:08:aa:e8:28:10:37:f6:95:6e:cb:28:
a0:b1:7a:bd:cc:6a:3b:99:db:17:57:24:39:83:74:
7d:36:4f:8c:1c:71:8f:0e:fe:f2:64:58:ec:3e:8e:
ce:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:58:53:60:F2:55:F6:16:D3:47:E7:8D:5B:AA:55:C8:77:60:A7:94
X509v3 Authority Key Identifier:
keyid:97:6D:77:47:BB:E1:A8:01:35:40:A7:16:D2:5C:C7:87:F8:7D:B6:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l213R7vhqAE1QKcW0lzHh_h9tmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b492ff-3154-4304-b927-d99832657a45/1/l213R7vhqAE1QKcW0lzHh_h9tmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:29:3d:34:ff:b8:47:0d:6b:7e:1e:3c:d6:61:15:8c:7d:c2:
bf:9c:52:45:97:13:0e:95:5a:a0:36:08:26:0e:ec:d6:e8:12:
af:4f:85:b3:82:f8:e1:8c:bc:b1:ae:9e:a3:32:d7:c0:7c:cd:
79:db:36:3e:78:74:06:ff:72:01:81:be:ff:ff:ae:b8:a9:af:
c0:f5:98:ff:3f:4b:55:69:6e:03:1d:7f:09:93:00:6e:18:8d:
b2:4c:9c:47:6a:ec:d0:4c:dc:10:5c:ad:bb:05:7c:83:66:8b:
96:61:9f:24:0f:22:ce:1f:67:04:b8:16:c2:0b:16:9d:67:e6:
f7:19:5e:f2:09:12:f9:4b:72:5c:bb:1f:75:d5:0a:f4:18:80:
b1:ce:ef:c0:35:06:ed:32:de:49:ce:60:26:a9:50:6a:c2:88:
23:4a:f1:41:68:e3:1e:08:d3:6e:b7:df:3f:7e:fe:2e:cc:29:
7b:4a:26:c7:e2:4a:76:68:82:c2:d1:82:95:ad:ba:38:b6:ac:
f1:bd:59:86:6f:e4:48:25:c4:fe:d3:f3:5c:bd:2f:7f:cd:82:
02:1f:a5:d2:6d:9c:e1:e0:5f:77:ad:04:57:6c:9c:aa:4f:6c:
73:2a:0b:f4:b4:20:34:43:72:4d:c1:45:9f:dc:9a:9f:7b:45:
63:d2:98:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:52:57 2025 by rpki-client