Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
File: 9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json)
Hash identifier: o5dODjSD3zP09g1EBGbHFmzY2qPJPUZ1d5Rbya52Auo=
Subject key identifier: 77:87:9B:75:E4:E1:2D:C7:8B:13:55:B0:6E:FE:D8:61:F4:18:3E:70
Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
Certificate issuer: /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Certificate serial: 0196B890BE3A4B4BADA2BBFD57C82E2CD0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
Manifest number: 152E
Signing time: Sat 10 May 2025 05:00:15 +0000
Manifest this update: Sat 10 May 2025 05:00:15 +0000
Manifest next update: Sun 11 May 2025 05:00:15 +0000
Files and hashes: 1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: rgLEeI9CiwIZ5G7ThV/V/tqRNMslhf1EFEcdOzsDBw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:90:be:3a:4b:4b:ad:a2:bb:fd:57:c8:2e:2c:d0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Validity
Not Before: May 10 05:00:15 2025 GMT
Not After : May 11 05:00:15 2025 GMT
Subject: CN=77879b75e4e12dc78b1355b06efed861f4183e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d3:3c:08:17:6c:71:91:86:24:05:91:57:ae:
83:6e:d0:f0:56:ec:22:fa:16:d6:d8:04:69:17:93:
9a:f0:a5:55:25:43:24:b4:5e:a6:4a:8a:7b:7b:92:
a2:52:24:c2:8b:b1:36:0f:df:31:74:f6:a1:4e:e9:
05:6c:60:5e:1a:fe:a6:95:bf:a5:94:b9:d7:0f:c2:
19:dc:05:ae:bb:c3:5e:36:77:db:f4:ee:8c:c0:bf:
4e:3b:75:76:d6:68:2e:23:cd:a7:83:11:df:d0:ea:
83:73:ba:88:63:22:a1:61:f8:e4:ec:70:ff:ef:cb:
ff:67:89:f4:7f:be:c9:35:45:d7:58:34:58:f1:71:
8a:3b:a1:5c:34:f6:fd:25:aa:da:b9:bb:81:4f:80:
ee:ee:20:5e:a1:98:0a:54:4c:f9:85:3d:85:cd:d8:
50:d2:2e:f2:09:79:21:5d:0c:07:24:0c:bc:77:b8:
f5:a4:40:02:e2:10:29:02:3a:98:88:83:d6:67:ba:
20:8c:ba:ba:a2:c9:0b:6e:65:02:10:64:0a:5f:94:
d7:39:aa:25:b8:59:5e:f1:0f:a5:60:92:e9:c8:f8:
f8:6f:d0:1d:b5:f2:f5:fc:8b:ea:92:72:4f:5e:f8:
3d:97:a1:1d:ed:50:9f:e2:44:86:e8:e8:25:6b:84:
2a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:87:9B:75:E4:E1:2D:C7:8B:13:55:B0:6E:FE:D8:61:F4:18:3E:70
X509v3 Authority Key Identifier:
keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:17:b9:7a:fa:ac:a7:5e:53:a3:03:cc:0e:f5:71:a0:4b:61:
85:23:ab:84:6d:55:26:15:8f:bd:de:a7:8d:05:4e:f2:68:b3:
94:84:3e:aa:c0:29:f4:7e:ec:f4:55:55:28:94:3b:67:a0:23:
3d:0a:f7:83:74:c7:ce:cf:e5:01:68:de:ce:3a:c3:99:43:0b:
f0:08:84:64:be:cc:63:e7:53:31:62:0e:0e:ab:cb:4c:7b:48:
71:11:ae:6d:66:9f:c7:ea:cf:ad:cf:fe:44:d5:39:1e:be:d0:
2b:17:3c:59:b6:a9:08:40:2e:e4:5e:b2:ca:9b:1c:c6:4c:2a:
34:81:69:c9:4b:8b:f1:cf:b6:26:c8:8b:69:fc:dd:82:97:8f:
d3:43:f2:d4:5b:da:99:a9:2c:72:14:c5:67:6c:37:51:69:17:
f3:77:4a:6c:3a:ea:53:06:65:b2:08:50:1a:3f:be:51:5a:33:
8b:fb:27:f4:0e:2e:56:9e:36:4f:5a:d9:6c:f8:52:d0:c3:fe:
0c:22:02:40:03:61:63:68:a2:2e:02:47:58:db:02:24:7c:71:
6e:76:fd:cd:6b:26:84:6b:85:93:26:fe:31:dc:2d:d2:2d:ea:
4f:76:65:14:b6:61:00:c6:bd:12:f8:07:14:8b:c9:1d:7b:62:
4b:37:9e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:19:56 2025 by rpki-client