Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.mft
File: 9oUCGMB4Hne2SXXDTBalwSm3nrk.mft (raw, json)
Hash identifier: 9pY7gxNN25tC1aFS6JoxJ9TvMaqha1uPQeKT4NkjqE4=
Subject key identifier: CA:16:83:31:52:77:58:DA:15:C0:3A:F5:76:FF:C7:05:CD:CB:48:0B
Authority key identifier: F6:85:02:18:C0:78:1E:77:B6:49:75:C3:4C:16:A5:C1:29:B7:9E:B9
Certificate issuer: /CN=f6850218c0781e77b64975c34c16a5c129b79eb9
Certificate serial: 0196C91686F2BAE4291DE1B5D616E5477FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oUCGMB4Hne2SXXDTBalwSm3nrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.mft
Manifest number: 53
Signing time: Tue 13 May 2025 10:00:18 +0000
Manifest this update: Tue 13 May 2025 10:00:18 +0000
Manifest next update: Wed 14 May 2025 10:00:18 +0000
Files and hashes: 1: 9oUCGMB4Hne2SXXDTBalwSm3nrk.crl (hash: /Dz3l/F9VjXXu3IDKOuZtiw1VFyX6Ck5hQG7t/hsN+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oUCGMB4Hne2SXXDTBalwSm3nrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:86:f2:ba:e4:29:1d:e1:b5:d6:16:e5:47:7f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6850218c0781e77b64975c34c16a5c129b79eb9
Validity
Not Before: May 13 10:00:18 2025 GMT
Not After : May 14 10:00:18 2025 GMT
Subject: CN=ca168331527758da15c03af576ffc705cdcb480b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a9:fe:b6:d8:55:9a:fc:e1:71:bd:50:ab:0d:
a6:96:88:5a:ef:ec:c5:b8:11:fd:92:64:a2:d3:a9:
2b:fe:23:2b:14:10:50:94:3e:a7:96:d5:42:ff:f0:
d3:42:3a:9f:f2:7e:11:84:97:34:11:09:0b:7a:40:
32:d3:b2:08:97:92:85:f9:78:ca:4a:e2:bb:f6:e6:
4b:f0:78:2c:9d:58:7f:29:0a:44:74:22:c1:f0:c0:
7a:0c:bf:b5:1f:7a:0f:10:91:a8:e6:e1:82:3b:e3:
e9:27:d8:dd:9b:d4:50:ed:0f:16:03:7d:e5:cd:e8:
34:2e:3a:58:19:a9:ae:fc:c9:60:5a:43:91:84:27:
54:30:e9:bf:86:ec:8a:d6:9c:0d:04:c2:16:ab:24:
19:f1:38:02:9d:72:3e:e6:08:80:71:7a:55:1d:e3:
5b:f0:0a:21:1b:68:f7:e1:f5:5a:de:39:9e:bc:eb:
fc:87:ac:f4:e2:1f:0d:7d:e1:16:23:2a:35:c4:e3:
30:b2:f3:0e:1c:bc:24:ca:22:84:1d:0a:03:0d:0c:
c1:da:d5:84:8a:d9:d1:1f:5b:ec:60:75:b2:18:e1:
c2:2b:15:0d:97:8d:5f:d7:79:72:ba:a4:5e:6a:84:
21:92:db:34:5d:39:8c:97:0b:7a:7b:d1:2e:40:1e:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:16:83:31:52:77:58:DA:15:C0:3A:F5:76:FF:C7:05:CD:CB:48:0B
X509v3 Authority Key Identifier:
keyid:F6:85:02:18:C0:78:1E:77:B6:49:75:C3:4C:16:A5:C1:29:B7:9E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oUCGMB4Hne2SXXDTBalwSm3nrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:34:de:8f:d6:b3:d0:d7:2f:02:95:0e:1d:79:2a:20:40:70:
1b:df:23:cb:87:90:e3:e3:bc:a1:ee:a8:ec:10:7d:9e:b6:d7:
b7:9d:8c:05:a3:4a:eb:a5:c7:cf:0f:a6:5c:ca:d3:7a:1a:a4:
dd:ce:39:96:ab:5a:f4:7d:00:84:c1:0d:ad:9c:21:4b:22:80:
f2:39:54:e3:88:61:52:71:a7:c1:3f:f7:f1:53:6c:15:76:98:
02:fa:00:0c:5d:88:19:f2:33:ce:75:5b:42:83:89:96:b8:33:
d3:01:cc:e2:c4:ba:6a:2a:e9:3c:77:39:81:43:71:96:a1:16:
54:77:55:d1:63:4f:ce:3e:92:ba:e9:16:62:10:39:aa:50:fb:
4b:9b:40:cf:75:ad:20:78:2d:7a:02:7f:83:10:d6:38:aa:7e:
ee:de:e0:1b:61:6c:59:c8:a6:14:62:75:cb:c3:d3:13:9f:4e:
11:ce:5b:2f:50:9e:de:0b:22:a0:fc:da:81:d3:fb:42:c5:43:
75:66:26:8b:69:47:50:ff:97:66:22:69:52:33:3d:34:1f:56:
23:b2:b7:d8:d0:12:b1:e7:8c:cc:b7:84:12:16:2a:a9:a8:6a:
37:ed:ef:cf:8f:f3:34:47:e2:a3:33:c3:d0:3e:d8:e5:d9:a7:
4e:07:9d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:32:30 2025 by rpki-client