Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
File: x9CAN66dCrMNEA0U2WFLeNY5Srw.mft (raw, json)
Hash identifier: Ognx/2pBjG4lJd+Nfbw3cdxPI1Yxp8Bv5BZpnUA47l8=
Subject key identifier: 05:BA:F3:21:0D:3A:AF:EE:0F:31:36:29:92:1E:0E:A5:71:64:73:8A
Authority key identifier: C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC
Certificate issuer: /CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc
Certificate serial: 0196C683BB76F0C50E6B6222C53F78572F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
Manifest number: E7
Signing time: Mon 12 May 2025 22:00:44 +0000
Manifest this update: Mon 12 May 2025 22:00:44 +0000
Manifest next update: Tue 13 May 2025 22:00:44 +0000
Files and hashes: 1: x9CAN66dCrMNEA0U2WFLeNY5Srw.crl (hash: wk8XDaQhrLKDms83B4b9Vk1/FejG5LG11avqeJzuhjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:bb:76:f0:c5:0e:6b:62:22:c5:3f:78:57:2f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc
Validity
Not Before: May 12 22:00:44 2025 GMT
Not After : May 13 22:00:44 2025 GMT
Subject: CN=05baf3210d3aafee0f313629921e0ea57164738a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:72:16:70:20:5a:aa:8d:89:3b:ac:6b:e6:
a8:17:cb:b7:97:45:54:de:07:61:3c:43:44:a2:73:
dd:70:1a:38:85:87:4e:40:b4:ae:b1:62:0f:ff:30:
a0:05:2e:cd:f4:c0:75:c0:c0:4b:20:01:18:07:28:
29:3f:0f:ec:fd:37:33:ac:8f:dc:4b:dd:58:0a:03:
c4:65:33:6e:ce:9b:cf:4b:90:9d:dc:4b:7e:43:14:
b0:4f:40:d8:a6:51:a9:8f:85:3c:4e:fd:5a:c8:fd:
69:5a:6c:e0:5c:f2:5f:d5:12:32:3e:20:62:e5:96:
3a:ba:6d:90:ee:8d:39:47:d5:d3:24:80:66:b1:51:
b4:ee:51:af:23:9d:14:6f:ba:2c:7c:64:4e:0a:e2:
5c:06:19:d2:87:07:6c:aa:84:ae:b4:40:3c:2c:4d:
de:55:0a:e3:be:17:c1:9c:28:32:9f:fa:55:f2:21:
e5:b6:e3:c9:d6:cf:07:a0:97:ae:4f:6f:4d:d7:75:
89:9e:2b:a2:fd:af:f8:7d:ae:b1:f6:47:85:2e:a9:
0f:fd:8d:15:a2:cd:8e:35:bc:a3:7a:dc:ee:2d:4a:
8c:97:9c:5c:82:43:05:04:60:eb:30:8b:8d:3e:d1:
a5:99:5e:01:d5:36:1d:2b:9a:81:f5:b3:49:29:08:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BA:F3:21:0D:3A:AF:EE:0F:31:36:29:92:1E:0E:A5:71:64:73:8A
X509v3 Authority Key Identifier:
keyid:C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5a:46:50:c4:47:18:ea:d9:a6:3f:cf:57:17:75:05:71:77:
46:85:d6:0c:7d:d6:a3:cf:e3:a4:6e:aa:e0:47:6b:60:86:3b:
aa:58:b4:25:10:db:5f:d0:05:69:f2:c6:fa:bc:61:a3:b2:97:
a5:6c:1e:f9:aa:b7:7c:92:43:ca:19:42:79:ab:6f:32:d2:5d:
6f:be:d5:05:55:cc:95:fb:e6:d5:1f:2c:1a:14:93:b4:8c:20:
79:2e:39:0c:ec:ef:37:34:ae:a2:a3:3a:26:11:28:45:e0:d7:
f8:a8:02:f4:55:ce:32:09:d2:64:b1:4b:aa:b9:9d:c4:67:fb:
26:6a:a8:b8:cb:02:20:ec:03:e0:57:dd:ab:98:bd:90:20:c7:
d0:8c:2e:57:9f:4a:c0:5d:09:36:1f:99:fb:69:f8:88:b1:06:
27:14:0b:eb:41:07:dc:4b:bd:99:e6:37:e2:66:0e:56:1a:c7:
93:94:8e:02:df:23:a2:7a:15:31:a2:39:05:7c:76:4a:35:03:
da:bc:75:0b:b9:28:69:43:25:7a:d9:c8:14:b7:88:ab:dc:04:
6f:75:88:9e:48:31:cf:06:be:85:a6:17:68:e2:c9:c3:09:54:
3c:16:ee:59:76:93:22:35:0c:54:12:cc:d2:22:4e:04:d9:da:
1b:fa:48:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:01:40 2025 by rpki-client