Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier: ReSHm4xADjUB8kig4WCO39tBJHTN4dWlZaul8LE1lHA=
Subject key identifier: 35:4B:62:FF:6E:31:D4:F5:E5:9F:AA:A4:B1:60:53:FE:23:47:20:E2
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 0196BB9273A60561F6FEBE924D91FAAB6DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 19:00:59 +0000
Manifest this update: Sat 10 May 2025 19:00:59 +0000
Manifest next update: Sun 11 May 2025 19:00:59 +0000
Files and hashes: 1: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: MZuLpT5d/dVkfKxh8i70oVqlzH2Ns9zhka7cTkyUOBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:73:a6:05:61:f6:fe:be:92:4d:91:fa:ab:6d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: May 10 19:00:59 2025 GMT
Not After : May 11 19:00:59 2025 GMT
Subject: CN=354b62ff6e31d4f5e59faaa4b16053fe234720e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:94:a8:37:73:c8:77:2d:2c:53:9a:6b:95:3a:
fe:eb:1e:ec:5f:75:0a:99:65:a9:bb:aa:dd:e1:90:
5b:6a:b0:70:7c:27:d7:64:10:f7:ac:4f:76:61:08:
da:2c:7e:8c:cf:af:2c:59:64:ad:9d:6a:21:7d:39:
81:df:a0:d2:27:d4:68:b3:82:7e:4f:fa:da:8a:76:
5d:18:14:12:2e:00:e6:3f:0e:6d:04:98:61:0b:2e:
3e:09:e7:1e:65:59:9a:9a:f1:93:bb:a7:cb:9a:88:
bc:c7:d8:7c:6a:c1:70:45:f5:65:0a:41:8b:03:02:
06:9c:b5:87:67:d1:24:2e:63:e0:81:06:4d:5e:df:
06:d5:f7:0f:50:8d:b2:f3:a1:16:cb:ca:57:ce:a8:
42:d2:da:a1:6b:18:fa:16:71:05:d6:15:e5:bf:23:
39:07:aa:4d:55:c4:fb:a6:ab:59:ae:79:cc:a2:0b:
c4:af:29:04:78:1a:bb:44:2a:5c:0d:9f:df:f9:31:
58:e9:59:0e:38:92:4d:f5:b4:10:90:a0:d6:1e:9f:
de:f6:c8:cb:74:98:6e:75:e5:8b:d0:48:3f:f9:1e:
42:fd:7f:67:ad:23:94:56:7f:eb:e3:63:e0:f5:48:
72:e9:29:6c:db:71:06:3b:fe:7d:e1:01:77:48:44:
24:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4B:62:FF:6E:31:D4:F5:E5:9F:AA:A4:B1:60:53:FE:23:47:20:E2
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:43:f2:80:7a:b2:4e:33:d9:2c:54:02:08:09:c4:cd:05:64:
22:4a:70:f7:c5:f0:f0:75:d3:5a:33:4c:79:45:d7:32:5c:df:
c8:9c:86:b6:15:5b:50:23:b3:97:91:6d:fc:32:0d:64:ae:2a:
70:ae:f8:0d:da:46:01:27:41:57:d0:b5:80:1c:f3:54:dd:f4:
11:94:1b:8f:b8:69:e1:a2:f4:18:4d:c1:c9:e0:3b:80:4c:46:
0b:c6:c4:05:76:6c:90:eb:f6:9f:b5:b4:af:71:58:d1:9c:21:
b6:81:c8:c9:b6:9d:a9:08:b2:07:49:06:08:ee:50:4e:c2:da:
1c:c7:73:d3:1f:0a:bf:39:ae:67:bb:d1:1e:54:e3:e1:f7:00:
4a:4c:ce:83:4e:53:e4:c6:07:73:fd:81:d9:62:cc:9d:d0:94:
0f:85:ea:d5:af:5b:35:5a:b9:b3:78:02:73:5e:31:40:77:d8:
ba:b5:8d:41:54:4c:a9:d1:b3:77:7a:e4:23:24:ec:1c:28:57:
dd:89:f8:69:70:f3:25:4d:2f:65:7b:dd:89:1e:b5:22:b3:97:
e7:86:de:90:22:69:9e:63:38:dc:60:37:89:0e:a0:2e:9e:04:
b5:9b:af:07:f1:10:36:cb:b1:ea:f1:1a:b2:33:f7:78:cb:e7:
cf:ef:60:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:50:54 2025 by rpki-client