Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
File: 9vwoeVAOHrgIVXBc-ENeA2NRN94.mft (raw, json)
Hash identifier: ErVdQZUIId5sz3fRxR1x3Jx9DrNiIrlnZ3uK3KPhBLY=
Subject key identifier: CF:C5:22:0A:A1:26:09:08:E6:34:84:12:32:A2:B3:72:55:D6:DE:38
Authority key identifier: F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE
Certificate issuer: /CN=f6fc2879500e1eb80855705cf8435e03635137de
Certificate serial: 0196C15DFB34AC7A03C3118C2A4F977B8EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
Manifest number: 0588
Signing time: Sun 11 May 2025 22:01:23 +0000
Manifest this update: Sun 11 May 2025 22:01:23 +0000
Manifest next update: Mon 12 May 2025 22:01:23 +0000
Files and hashes: 1: 9vwoeVAOHrgIVXBc-ENeA2NRN94.crl (hash: 2CpE6uZHVKrakLOZODKF52O8QbnIAPBWR5bbdPaujm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:fb:34:ac:7a:03:c3:11:8c:2a:4f:97:7b:8e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6fc2879500e1eb80855705cf8435e03635137de
Validity
Not Before: May 11 22:01:23 2025 GMT
Not After : May 12 22:01:23 2025 GMT
Subject: CN=cfc5220aa1260908e634841232a2b37255d6de38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:76:d8:63:bd:89:6c:d8:17:49:c3:8c:b4:
b3:68:6f:8f:39:1d:3e:5a:cb:51:8c:14:ac:06:af:
aa:95:12:bd:9c:ed:5f:f8:19:59:34:32:1a:b2:bc:
b3:92:c4:3f:6f:0d:78:6b:17:0b:6f:83:21:1c:be:
fc:83:f2:21:0b:0b:b1:71:ad:84:86:ed:d3:52:9c:
3a:85:a5:a9:3c:d2:cc:5e:22:f3:7f:4f:53:9e:0f:
79:29:9c:b2:09:6a:51:2d:3f:30:86:45:ef:cd:65:
9b:03:37:67:8c:c2:03:32:f4:2b:49:be:bb:87:7b:
a9:ab:38:2c:ac:d0:28:09:89:b7:b2:5f:55:ce:c1:
b3:cc:0a:fe:bb:08:a6:ee:d6:25:75:f6:e0:6f:7f:
dc:61:18:42:6c:02:9d:c5:dc:13:d3:24:3b:76:24:
2a:b4:26:c9:13:a9:99:84:aa:48:f9:6f:34:66:25:
ea:76:b2:43:95:1f:20:9c:e6:e4:f9:0e:55:28:a0:
cc:c6:1a:ad:d7:22:66:58:b5:27:75:df:90:2c:9c:
35:b3:b7:6a:ae:36:63:a0:e2:fd:03:e7:eb:32:8b:
47:d5:f0:79:61:f2:4c:f5:b4:52:67:6c:77:43:2c:
03:59:a7:9e:6b:67:7c:60:93:5e:64:4f:06:b6:e1:
59:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C5:22:0A:A1:26:09:08:E6:34:84:12:32:A2:B3:72:55:D6:DE:38
X509v3 Authority Key Identifier:
keyid:F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:97:ba:e8:b4:56:3e:7c:f4:10:4f:dc:48:37:f9:43:25:10:
b6:06:c3:94:74:43:24:c2:3e:e9:fc:fe:b3:b4:8e:36:d6:9d:
96:a8:16:72:08:46:65:17:f5:de:98:85:b5:89:2c:f4:b0:ca:
b1:c8:ad:40:42:63:01:38:58:95:08:82:ec:0e:d6:6f:7e:45:
db:ca:22:a6:f4:35:07:f7:20:f0:0d:9e:68:59:1e:70:73:f6:
81:9e:0e:84:ac:11:79:52:f5:f2:4d:29:dd:44:9c:33:fe:d5:
43:66:7e:2d:77:87:4e:41:94:58:70:ed:04:75:99:85:a8:a1:
bb:9c:19:f9:04:42:9d:36:7c:58:7f:5d:c2:79:d6:bc:73:52:
03:e5:03:02:97:59:d1:ee:c2:2e:9b:15:bf:89:f4:49:34:0b:
2e:5e:c5:0a:20:d2:2c:96:70:1b:6c:92:e1:2e:af:31:7c:e6:
8c:79:34:1b:de:d6:0d:44:a3:b4:b2:b7:08:3d:32:fb:4c:9a:
27:da:25:c4:63:8e:a9:14:49:f6:d5:51:e4:00:7d:9c:0e:96:
d3:55:b6:ec:df:83:21:c1:5e:1c:4f:22:15:18:50:dd:b6:bc:
93:f4:f1:6a:a0:e5:8a:eb:3f:a8:93:5f:6c:58:ff:f3:6f:63:
30:8f:91:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:46:42 2025 by rpki-client