Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
File: 97LAktArE86qejP_BXqECmjXFSE.mft (raw, json)
Hash identifier: Nsrzg2FI5OIWN0jvUMevZ7i6NFEdjkBJOTKsMJgFaH8=
Subject key identifier: 17:69:2A:58:F6:2B:FA:25:5C:4B:29:FA:6B:62:2F:38:62:E3:14:CE
Authority key identifier: F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
Certificate issuer: /CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Certificate serial: 0196BF6F9A8ECED57D6FA2248CAC38F11A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
Manifest number: 0F56
Signing time: Sun 11 May 2025 13:01:24 +0000
Manifest this update: Sun 11 May 2025 13:01:24 +0000
Manifest next update: Mon 12 May 2025 13:01:24 +0000
Files and hashes: 1: 97LAktArE86qejP_BXqECmjXFSE.crl (hash: OYh3kQ5HHYJ72c7TAxzoQWTEKTIxglMS0nTmBWR28AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:9a:8e:ce:d5:7d:6f:a2:24:8c:ac:38:f1:1a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Validity
Not Before: May 11 13:01:24 2025 GMT
Not After : May 12 13:01:24 2025 GMT
Subject: CN=17692a58f62bfa255c4b29fa6b622f3862e314ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:39:e9:32:e3:72:5c:bc:3f:0b:8d:37:af:
6d:a2:17:2d:8c:ab:40:7e:2a:0f:af:1b:02:93:84:
35:e3:da:ac:ff:91:52:6c:cd:65:a4:cc:65:e8:59:
7c:c8:18:d3:ad:d2:54:0e:de:d9:ee:b8:8d:30:b0:
49:9f:1f:37:1f:64:1e:b7:d9:93:ca:f1:74:a3:1d:
51:69:5e:80:67:0a:6e:fe:c6:0d:ee:72:1c:8e:cc:
65:dc:9c:30:39:26:98:4b:80:51:e6:3c:e5:5a:76:
06:01:79:04:26:0a:bc:de:b2:14:9b:26:f5:d5:fc:
9d:31:fd:73:de:da:cb:b7:3a:38:3b:8c:95:92:67:
71:7f:44:53:ce:80:28:ed:65:f4:f9:97:3d:ff:f3:
bb:02:a9:f7:77:24:b4:4f:94:45:fc:ac:f4:c8:14:
5b:e5:21:89:7c:c8:d3:e6:60:a5:7f:15:0d:39:96:
77:89:5f:84:c2:9b:a2:fd:ef:e9:fd:fa:0d:40:9b:
c0:f9:2a:89:2b:96:45:ff:c3:f1:5f:08:71:d3:50:
57:c0:23:e9:04:5f:83:fd:a0:e5:e4:c5:39:34:6b:
31:95:dc:2c:4b:d1:00:d1:1b:8b:4c:c7:75:96:7e:
1f:e3:f9:be:89:3e:d8:ca:62:d7:95:10:e9:92:0c:
b2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:69:2A:58:F6:2B:FA:25:5C:4B:29:FA:6B:62:2F:38:62:E3:14:CE
X509v3 Authority Key Identifier:
keyid:F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:bf:27:45:57:b5:6e:75:1b:95:ad:e8:e1:08:dd:15:8c:ae:
39:f8:8e:98:d2:15:2e:25:eb:ea:87:d2:67:56:5e:44:be:1b:
46:8d:5d:e9:ba:59:c8:ad:80:1a:3e:78:1c:be:6e:1d:5e:e2:
51:0f:8a:e4:a3:b7:94:ac:2e:49:4a:3c:ac:df:fe:32:94:14:
8a:64:88:02:0d:5d:cd:30:59:ff:65:bd:d2:36:63:be:a4:b0:
b7:48:98:3a:0f:aa:37:79:b8:e0:32:66:d8:79:bd:76:2d:bd:
9f:93:3b:60:07:a2:21:da:89:47:d7:47:c0:64:9d:37:7f:17:
5e:93:27:bc:94:b4:31:18:c5:4c:e3:f3:aa:9b:11:16:f9:a0:
e0:67:78:ba:f8:7b:53:56:4d:99:43:50:4a:0b:22:24:5e:50:
0a:f3:a0:5e:1d:43:b0:a1:05:cb:26:2f:04:e7:d4:84:20:aa:
5d:71:d7:2e:1b:44:2e:95:7e:38:1f:96:96:4e:92:86:62:8b:
14:b3:6d:51:f7:17:3c:a7:b4:2e:4e:ef:95:bd:76:4f:8f:22:
f5:7f:1c:3a:b1:06:ef:51:eb:e2:2e:09:8a:b4:cc:87:6f:8d:
e8:8f:53:bf:f8:76:22:64:6b:83:f7:40:3f:d2:f6:4c:14:df:
3c:1f:92:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:01:37 2025 by rpki-client