Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
File: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json)
Hash identifier: S76hRy33GGPWqeVRtJYSg3BVX12SzLuRW9IkNKmwRao=
Subject key identifier: D8:04:32:A2:8F:F1:84:2A:9B:24:5E:2E:4E:9F:47:D6:98:34:C4:A3
Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Certificate issuer: /CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Certificate serial: 0196B8FEFA3B155363850580E0AEC4A9FC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
Manifest number: 0E56
Signing time: Sat 10 May 2025 07:00:39 +0000
Manifest this update: Sat 10 May 2025 07:00:39 +0000
Manifest next update: Sun 11 May 2025 07:00:39 +0000
Files and hashes: 1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: w0L/J6+wVcik4B9g8apfPsnwwAyEI7vH625qdQA+8D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:fa:3b:15:53:63:85:05:80:e0:ae:c4:a9:fc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Validity
Not Before: May 10 07:00:39 2025 GMT
Not After : May 11 07:00:39 2025 GMT
Subject: CN=d80432a28ff1842a9b245e2e4e9f47d69834c4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8d:8a:8f:9d:8d:f4:9a:cc:04:01:e7:73:a7:
d8:60:33:05:16:05:14:29:33:72:28:d4:13:ff:d3:
27:13:b0:eb:b6:74:92:44:ba:7f:49:e5:d0:5c:ce:
eb:b6:cc:6d:b0:39:9f:25:66:93:20:d4:0d:ec:9b:
b4:16:71:89:af:8c:5f:da:31:23:72:6f:c6:fe:c1:
37:29:7f:76:91:aa:03:b2:7d:40:cf:ac:96:b8:13:
52:d4:4a:29:51:c6:6c:b8:69:8a:31:2f:73:52:fe:
11:74:1b:d1:14:a3:a0:da:aa:ea:9e:88:2d:63:90:
b3:50:6e:9c:0f:bb:ba:11:74:cb:4e:33:18:48:ca:
53:c8:f8:20:84:2e:c1:4d:31:c1:66:65:3d:61:d3:
a7:04:50:95:0b:f6:bd:4a:61:e6:74:dd:2b:df:e7:
bc:f9:56:ce:d9:1d:81:47:07:70:be:b4:47:16:42:
2f:c1:35:25:b1:7c:0b:ce:bb:3a:18:5e:df:0b:53:
ec:f5:1e:d8:09:5d:b6:9a:83:7f:fc:66:7a:a3:2a:
e6:f3:09:3e:3e:24:b8:7f:7a:87:99:3a:27:9b:fc:
c5:16:f5:1d:cb:d1:7d:d3:95:fe:a3:e8:65:36:a9:
60:68:e6:d5:8e:b6:70:ea:99:dc:71:66:22:f4:0b:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:04:32:A2:8F:F1:84:2A:9B:24:5E:2E:4E:9F:47:D6:98:34:C4:A3
X509v3 Authority Key Identifier:
keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:34:4f:f6:8b:1e:99:a8:37:3c:ed:8a:2c:aa:75:4c:95:12:
db:8e:73:8e:c1:1d:95:8c:3d:4b:6f:3d:0a:d9:c4:08:d5:f6:
6c:1a:e7:d0:97:5c:c0:5a:cc:48:ca:40:13:ad:9f:e6:0e:4d:
ac:58:4a:b6:84:85:5c:4c:df:78:83:c5:9b:d9:9a:06:e0:72:
5a:d0:19:f2:74:0f:22:90:46:61:3d:91:94:b9:4d:d8:07:56:
4a:5c:65:0b:17:f4:1c:25:7e:61:96:9c:f2:a2:6a:34:3c:8e:
6a:52:d5:6a:8b:94:14:08:f8:d9:7f:7c:a4:37:ce:1c:67:a9:
c9:b9:42:cb:76:7d:2b:1b:a6:e1:16:67:b4:ea:e1:7a:69:ed:
25:6f:83:6b:a9:29:37:bd:97:33:88:74:35:c3:a8:43:bb:bf:
99:da:a8:a1:8f:56:4b:f9:9f:79:76:e9:4a:f9:e4:0f:a4:48:
20:53:42:38:62:54:27:4d:f9:48:ae:27:89:77:c6:a9:49:b8:
8a:1e:58:22:84:01:e8:37:c8:32:d8:ff:6b:0d:b9:a9:b3:4b:
a9:f8:ad:2b:27:26:c8:5b:d5:53:d4:34:49:59:87:ab:f1:a0:
c9:92:83:a9:6b:36:06:74:8c:f2:35:21:a2:47:b4:0b:13:25:
dd:50:21:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:50:51 2025 by rpki-client