Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
File: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft (raw, json)
Hash identifier: puzFEVW2KyUICMmrnZxMGPiuiSqE+ymdsjEKAMHOcDM=
Subject key identifier: CC:D2:41:65:BE:3C:05:34:3B:6D:99:76:F4:EB:74:6E:4B:29:76:2F
Authority key identifier: 7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
Certificate issuer: /CN=7fefebd15fbc651487acaf67424f4783d43eb420
Certificate serial: 0196AFFCA76FD3FB3B5D6125972A34093453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
Manifest number: 1528
Signing time: Thu 08 May 2025 13:01:32 +0000
Manifest this update: Thu 08 May 2025 13:01:32 +0000
Manifest next update: Fri 09 May 2025 13:01:32 +0000
Files and hashes: 1: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl (hash: tpWjN8uH2tSCksMOdMWhjdFR2RHlF1AuKUacUfHm824=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:a7:6f:d3:fb:3b:5d:61:25:97:2a:34:09:34:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fefebd15fbc651487acaf67424f4783d43eb420
Validity
Not Before: May 8 13:01:32 2025 GMT
Not After : May 9 13:01:32 2025 GMT
Subject: CN=ccd24165be3c05343b6d9976f4eb746e4b29762f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a7:a6:02:0e:42:f6:57:69:d6:e8:e0:f2:45:
ba:3c:44:c9:84:c9:49:d1:b3:13:45:4e:7a:24:69:
2c:16:2c:37:41:24:31:08:de:60:ae:99:cd:c0:ae:
15:65:60:2d:8f:d1:19:51:87:dc:e1:2e:b4:4c:d7:
5e:df:57:2c:ef:d6:7c:d4:2e:84:6f:d1:16:79:7a:
ec:ce:47:97:61:18:17:58:aa:49:62:e0:31:23:0a:
e3:6b:c7:95:bd:73:06:2d:e8:72:60:c4:04:5c:d8:
c9:f1:cb:15:63:bc:c3:8a:d9:98:b2:f9:f1:bf:88:
d4:74:50:80:c0:32:ff:d5:71:60:05:4f:4e:75:be:
8b:d6:bb:30:76:0d:c7:58:d8:20:2f:34:82:7e:01:
bd:58:32:d1:fa:6b:fd:a9:b2:c7:45:c5:04:ab:d4:
31:80:d9:90:60:06:9a:ab:5a:b9:17:94:c3:2e:a0:
14:5c:54:6b:32:67:d5:65:87:13:1a:db:16:0d:2c:
c0:a2:5f:c6:23:4b:2c:8c:2f:a2:b3:4b:91:c7:72:
29:0f:f9:ca:1c:9e:0f:88:07:a7:3c:66:9a:54:b8:
04:89:0e:65:8f:67:f8:5c:76:56:4a:5c:b4:f1:e1:
86:3c:61:ab:d2:bf:06:e4:ce:01:0f:3f:d1:fd:e2:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D2:41:65:BE:3C:05:34:3B:6D:99:76:F4:EB:74:6E:4B:29:76:2F
X509v3 Authority Key Identifier:
keyid:7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4b:53:c0:f0:15:cd:97:84:4f:18:06:73:15:30:6b:1b:a5:
89:e6:36:43:38:0a:8a:d9:83:a7:48:99:bc:c9:77:ba:10:3b:
1e:bb:1b:76:90:18:54:07:74:1d:5c:8b:c0:55:fb:08:f4:4b:
99:c3:c3:42:fc:aa:64:ff:ad:40:de:b8:ad:37:56:34:74:d9:
c3:9e:1c:6c:99:4f:58:0a:94:e3:d5:4a:b8:bd:5e:94:c9:49:
9d:4f:bd:b3:06:9f:8c:6f:7c:a4:6b:13:a3:2f:0c:46:47:b5:
55:f7:ff:e8:3d:47:72:36:72:c8:2f:d0:8f:82:76:25:41:73:
ba:15:ef:ab:fe:5d:59:bc:4e:62:fb:1c:86:e9:b2:1b:59:67:
f7:95:50:9c:6c:25:c7:5f:14:a2:7e:7d:1b:61:f3:11:ca:98:
f4:a3:0f:e8:fe:a5:8b:99:94:cd:c3:c2:4d:24:90:1e:bd:59:
30:79:74:e8:3c:24:d3:5e:35:f0:bd:18:45:65:e4:11:5c:30:
5d:ea:80:c0:2a:90:69:27:11:42:14:fc:c6:04:39:7a:13:d5:
5b:98:84:7c:f2:80:ca:d1:59:4a:12:5a:48:48:df:50:6d:bb:
0d:a9:c4:19:f9:d1:86:28:a2:36:4b:e4:f6:5d:01:68:70:b2:
b5:68:58:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:06:29 2025 by rpki-client