Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier: lO/IlEQOyiQDOONJf5u5tNm2urJCvrsGPnlxnWWwulU=
Subject key identifier: E2:39:BB:54:EE:84:DB:3D:47:55:C7:68:AF:F9:51:F9:1F:F3:E7:D2
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer: /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial: 0196BB922A929A9BD0C724FB82E6292116C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 19:00:40 +0000
Manifest this update: Sat 10 May 2025 19:00:40 +0000
Manifest next update: Sun 11 May 2025 19:00:40 +0000
Files and hashes: 1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: k4OvLpHH7IzwCj1SSr45cKJZe6BbfxBwC64ZmgKXduw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:2a:92:9a:9b:d0:c7:24:fb:82:e6:29:21:16:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Validity
Not Before: May 10 19:00:40 2025 GMT
Not After : May 11 19:00:40 2025 GMT
Subject: CN=e239bb54ee84db3d4755c768aff951f91ff3e7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:af:fb:2b:e5:b7:b7:59:38:03:e1:35:71:
78:e4:f9:b1:be:11:75:c0:a5:6a:17:6d:ef:06:e6:
88:39:43:53:b4:e6:f2:65:a2:f3:99:3d:17:6a:00:
61:45:41:62:cc:34:ad:bd:b4:05:12:f8:97:ec:20:
3e:7f:c3:01:04:83:b8:dd:6f:b7:f5:f3:8d:db:18:
e1:73:48:fe:67:f3:ce:8e:5a:7b:34:a7:22:3c:0e:
ee:38:48:63:99:1d:ea:f3:22:ed:c2:07:12:e0:08:
d8:0d:04:45:6e:10:37:35:07:d4:fb:e4:44:b5:3a:
4b:4d:36:15:61:de:f5:20:e1:f4:6b:dd:5b:00:b1:
de:21:1f:7f:c6:97:bd:68:9c:dd:33:00:41:c2:d2:
ca:37:18:01:24:63:92:a6:8d:2c:d7:93:e7:db:7e:
aa:6b:f5:f6:3f:87:e9:fa:94:3e:89:3d:4b:4f:9e:
37:52:7e:df:c2:95:5b:7c:5c:df:47:93:b0:fb:c8:
71:0e:94:38:bc:6c:c1:e2:7e:2c:a7:c6:38:be:e2:
3e:50:5c:72:3a:31:fa:78:07:f9:1f:32:27:ee:85:
29:99:1a:6b:b1:77:57:19:cf:ba:f8:fb:b5:b7:32:
71:7b:0d:ce:c2:51:c7:09:51:87:fc:e1:a9:ff:55:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:39:BB:54:EE:84:DB:3D:47:55:C7:68:AF:F9:51:F9:1F:F3:E7:D2
X509v3 Authority Key Identifier:
keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6b:14:80:7d:b7:af:0a:e8:10:8b:d0:ea:19:90:05:f6:e1:
1a:82:09:c4:0e:9e:8c:34:50:30:e0:1e:fb:70:9d:ac:c0:c5:
b5:88:c9:55:35:5e:72:23:ea:84:98:a8:c2:d2:2b:f6:67:28:
72:b6:e5:32:02:ba:84:7b:cd:51:f6:40:28:cd:44:8a:35:37:
85:0e:c0:2b:94:3e:6b:b0:2f:64:e4:76:63:38:53:d1:e2:be:
00:fc:48:86:b4:3e:1a:b5:20:c3:d5:2d:f4:9c:f1:cb:30:e9:
65:fb:3e:55:4b:83:59:c4:55:c7:51:b3:86:b2:25:9b:71:dc:
6d:f5:e8:47:88:a3:77:2b:ae:89:02:00:7f:5d:d9:e8:bc:3b:
34:d8:06:cc:e2:6f:2c:0d:50:04:95:37:b3:f2:c3:83:c3:4f:
e7:aa:14:52:e7:15:eb:d1:61:ec:27:3c:52:b8:de:1c:94:dd:
6a:08:dc:27:b5:46:49:b0:0f:fb:9d:ce:99:f7:f5:70:7d:87:
b6:93:8f:b3:b7:16:e1:73:34:0b:6e:30:b8:2f:58:94:c5:9e:
f8:f6:3b:2e:aa:ab:95:75:c3:16:3b:4b:76:14:19:b1:42:78:
d8:f6:28:66:43:cf:bf:99:45:dd:94:62:80:4d:65:dd:49:09:
3f:b5:48:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:11:25 2025 by rpki-client