Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
File: _rzZRV4eVaXh1gG9SoV0ta_VQHU.mft (raw, json)
Hash identifier: 7P1or6pyvj4Gw0Qn5gN8/M5mCSnEjd3M5ljTp4dWNuU=
Subject key identifier: A4:16:6F:8A:20:69:62:24:2D:42:C4:95:EE:E7:EB:67:6F:8F:B2:50
Authority key identifier: FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
Certificate issuer: /CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Certificate serial: 0196C4959222CC11D8E9AD730E7ACD4CE804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
Manifest number: 0454
Signing time: Mon 12 May 2025 13:00:58 +0000
Manifest this update: Mon 12 May 2025 13:00:58 +0000
Manifest next update: Tue 13 May 2025 13:00:58 +0000
Files and hashes: 1: _rzZRV4eVaXh1gG9SoV0ta_VQHU.crl (hash: NDnkf/g0cfxgCgI+2X/LIQO5m4vwJxvMk7oY5lygUuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:92:22:cc:11:d8:e9:ad:73:0e:7a:cd:4c:e8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Validity
Not Before: May 12 13:00:58 2025 GMT
Not After : May 13 13:00:58 2025 GMT
Subject: CN=a4166f8a206962242d42c495eee7eb676f8fb250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:01:3a:c0:90:31:73:da:f9:90:0c:66:44:79:
ed:c7:43:33:18:bc:26:d5:e3:a2:ee:e5:3a:d1:13:
56:b6:f0:c9:b3:20:c2:3f:b5:f1:f8:e8:91:15:1e:
17:e8:7f:ca:20:56:e8:b5:1a:2b:61:c6:d4:35:5a:
78:a7:94:e3:cb:33:74:f1:7a:3c:47:ec:7d:98:60:
eb:d9:cf:ff:d9:8f:04:8a:dd:11:1f:f9:92:3b:18:
6b:21:b6:a5:d3:c2:28:0b:52:c4:24:58:5f:a7:f8:
2a:d7:c2:4f:0b:25:36:4d:9d:d2:0c:e5:1e:e5:53:
ad:81:01:0c:9e:71:53:f9:dc:af:04:cb:e0:14:1c:
10:d3:3b:36:10:51:5f:a7:39:16:12:95:43:61:7a:
d4:d1:ea:23:4c:9a:bf:09:88:87:d7:bb:07:11:ef:
65:78:88:d7:2b:46:d6:96:56:b1:bb:22:ec:3a:4f:
26:be:77:3d:a9:f5:70:3b:da:56:8c:f7:3b:23:98:
39:a2:4d:2e:c1:7f:ad:54:ea:a5:d0:26:51:ad:23:
84:d4:ba:2b:36:4b:c2:8d:c2:e9:69:b3:8c:4d:0c:
70:47:40:c8:2a:81:02:80:cc:8f:1f:af:d0:a7:88:
ed:8d:54:87:0a:9c:f0:a5:36:f5:b4:52:36:75:b1:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:16:6F:8A:20:69:62:24:2D:42:C4:95:EE:E7:EB:67:6F:8F:B2:50
X509v3 Authority Key Identifier:
keyid:FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:15:11:43:af:cb:90:d2:2f:a4:8f:5e:01:c6:3b:03:33:a4:
4d:f7:12:73:c4:12:f2:a1:d0:00:8e:b4:63:2e:e4:b2:11:66:
01:a7:db:db:a0:73:a6:55:cd:95:5b:08:fc:f7:fd:72:68:71:
81:56:43:82:f3:5a:47:af:86:b4:51:3c:32:8f:66:d9:85:bf:
31:c6:81:c6:19:0a:38:d2:58:0c:ad:0a:8f:f4:5b:09:1e:06:
02:49:1b:11:40:67:63:04:fe:ef:88:59:ff:3f:27:da:f6:0d:
ec:98:65:b6:d4:a4:06:44:86:85:b0:48:84:09:c8:dd:6b:63:
6e:bc:08:52:a8:e8:ab:2f:6c:21:f1:9f:dc:42:1d:37:68:18:
e6:42:75:33:23:8d:6d:05:d7:19:14:68:76:98:ad:f7:e8:54:
d3:bf:15:43:05:32:38:5c:d3:40:eb:73:02:e8:c4:37:3c:e4:
89:9d:11:af:12:47:74:3e:e5:b8:40:4b:db:0d:18:a8:09:18:
e7:1a:2b:88:74:b8:11:f5:ca:c2:c1:cc:72:c0:25:ff:a3:95:
53:cd:ac:13:4c:8b:a0:09:2c:27:2f:69:26:c8:70:f6:c8:e1:
f2:05:61:62:93:e4:30:7d:62:cf:41:a3:8c:54:9c:ec:2a:4b:
47:d1:ea:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:01:59 2025 by rpki-client