Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
File: gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft (raw, json)
Hash identifier: 8M0c23EURZuBnna1h4Jw34ZNYNl8YO5xAU6DwaKvkLQ=
Subject key identifier: 23:A1:77:E1:3A:EA:69:D7:C7:5E:81:19:6B:69:F4:F9:12:13:31:A5
Authority key identifier: 80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
Certificate issuer: /CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Certificate serial: 0196C34C642BF8D2F184F35AAA2F8D245567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
Manifest number: 126F
Signing time: Mon 12 May 2025 07:01:25 +0000
Manifest this update: Mon 12 May 2025 07:01:25 +0000
Manifest next update: Tue 13 May 2025 07:01:25 +0000
Files and hashes: 1: gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl (hash: jK2g+Ncl7AUebAN0MEt0/rpQ1PRvoxK6K1722jtS7Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:64:2b:f8:d2:f1:84:f3:5a:aa:2f:8d:24:55:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Validity
Not Before: May 12 07:01:25 2025 GMT
Not After : May 13 07:01:25 2025 GMT
Subject: CN=23a177e13aea69d7c75e81196b69f4f9121331a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:05:7d:f8:db:92:3f:7f:49:98:7e:1a:a2:54:
bf:70:20:8e:ff:20:30:34:5a:f6:00:ea:1b:87:80:
c5:0d:c0:6d:d5:4b:d9:29:5a:6f:e1:dc:21:e5:aa:
ce:5f:2e:0e:57:d0:0b:d0:83:dc:49:e1:87:48:99:
3a:24:d8:1c:4c:b1:0a:31:db:35:b7:97:60:c8:6b:
32:5b:2a:75:c8:95:b9:0a:08:ef:a7:91:5b:b8:b4:
e6:88:e2:f3:a5:cd:45:24:e0:67:70:35:20:77:60:
13:22:0c:ea:b2:92:91:77:40:30:e0:c6:12:7d:7c:
30:48:a4:c9:79:9d:2d:f1:58:1d:20:82:ed:a5:3d:
27:11:d9:96:01:71:e6:af:a5:15:6b:89:e9:09:62:
9a:28:61:b0:57:5b:13:c1:21:2f:8c:d5:64:51:77:
33:a2:c7:63:0f:75:8d:22:16:ea:e5:ad:24:70:21:
52:71:57:97:35:f1:8a:07:3e:84:b8:7b:82:75:7a:
6c:c7:2a:31:3c:85:46:81:f9:97:00:4b:f2:fa:39:
af:bc:b4:01:cd:6c:9d:e5:7b:aa:0a:1e:df:69:79:
a9:72:2a:cd:61:bd:31:61:60:80:90:17:3c:cf:63:
56:52:ba:bd:22:80:b2:15:46:c9:ba:d1:54:4c:f4:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A1:77:E1:3A:EA:69:D7:C7:5E:81:19:6B:69:F4:F9:12:13:31:A5
X509v3 Authority Key Identifier:
keyid:80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3b:bd:ff:79:5d:db:60:ae:ef:53:8f:3c:08:45:79:f5:f6:
bb:93:72:de:3b:c5:63:9c:3c:33:ff:a9:59:a7:6c:d5:00:13:
b0:9b:4a:ef:85:ce:45:6f:6a:e4:fb:61:f0:73:dd:d8:9a:32:
cd:6b:91:9b:93:78:9e:f8:3e:34:5b:7a:a4:cf:06:05:88:b5:
54:f1:69:0d:95:80:0e:88:7c:88:e8:e5:53:29:e5:3e:b3:89:
f9:44:03:da:d1:b9:89:0a:3e:2f:bf:bb:c0:d5:30:22:ce:2b:
3c:f8:7e:3e:44:3c:72:88:ea:28:d6:66:3a:8d:92:ab:f0:54:
13:84:60:43:75:53:62:bd:88:67:4a:46:3c:2b:10:75:50:5c:
e0:6c:43:1e:40:6f:1b:ea:6b:7b:c2:b7:db:1a:17:66:7f:9d:
39:55:28:c1:c2:fa:e5:07:95:61:bd:28:27:35:e6:f3:8f:21:
14:96:92:c4:d8:58:cf:5e:21:3c:84:16:22:70:e1:18:7c:4e:
5e:42:65:c5:e6:d1:10:c2:e4:2a:5f:42:cc:b1:43:e2:6a:47:
fd:b5:95:4c:ad:73:27:4b:34:36:d9:8f:dc:e1:44:2b:d5:0a:
50:27:83:68:ac:ba:af:70:25:23:46:be:1b:22:ef:38:f8:50:
36:1e:9f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:11:07 2025 by rpki-client