Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
File: 45WAim89Q2FJAcmQyc5jLhXt-gc.mft (raw, json)
Hash identifier: 2Uy8ZA/Q7WEl0s4JKEyT6hoZA0EmUGhV+PqFufVXEkg=
Subject key identifier: EB:FC:A4:7F:DB:AD:6D:D9:66:6F:4E:60:51:FF:0C:22:8E:B9:76:95
Authority key identifier: E3:95:80:8A:6F:3D:43:61:49:01:C9:90:C9:CE:63:2E:15:ED:FA:07
Certificate issuer: /CN=e395808a6f3d43614901c990c9ce632e15edfa07
Certificate serial: 0196B40FAB594D4E8A1CEA5E6291B24CDE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
Manifest number: 0387
Signing time: Fri 09 May 2025 08:00:47 +0000
Manifest this update: Fri 09 May 2025 08:00:47 +0000
Manifest next update: Sat 10 May 2025 08:00:47 +0000
Files and hashes: 1: 45WAim89Q2FJAcmQyc5jLhXt-gc.crl (hash: ZqxkfBRTnp7qGsLcp7f1edVCon8IfgXYdAwmPY+Ga7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:0f:ab:59:4d:4e:8a:1c:ea:5e:62:91:b2:4c:de:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e395808a6f3d43614901c990c9ce632e15edfa07
Validity
Not Before: May 9 08:00:47 2025 GMT
Not After : May 10 08:00:47 2025 GMT
Subject: CN=ebfca47fdbad6dd9666f4e6051ff0c228eb97695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:fb:a4:d3:61:4b:4a:e8:70:23:64:29:55:
5b:30:10:97:aa:5e:b8:4a:dd:3c:aa:84:41:c1:6e:
37:63:dc:4c:42:b7:2d:6f:1c:04:5c:7b:21:dc:f2:
74:fd:fb:c5:9a:0e:3c:a1:4f:fc:42:61:83:db:ad:
34:b8:8f:24:1e:d4:7f:7f:6a:65:c6:1d:6c:6a:70:
d1:0c:e1:49:a7:96:97:ec:8f:41:ec:99:be:dc:3c:
7c:1d:94:a9:68:36:62:23:89:53:d9:be:8b:69:d3:
52:4c:53:f8:09:f6:53:8c:e8:c5:d3:66:74:33:1a:
ae:3f:1e:1b:e4:93:0b:9e:fe:f4:4e:34:16:b9:6c:
1f:e8:4d:f5:0d:64:ca:10:59:c0:1c:12:f1:fa:97:
2a:5b:3f:63:e7:d8:53:93:c3:3e:45:51:aa:15:0d:
e4:5e:5f:03:ed:58:69:a3:14:34:af:26:6e:cb:06:
cf:70:07:23:4e:9c:3e:52:4e:ff:10:8d:f3:16:00:
4a:c6:01:4c:6a:61:0a:2d:27:dc:bf:4e:77:2d:02:
fb:d0:af:55:34:14:d6:e2:1e:d1:d0:84:a8:84:58:
01:c1:a1:93:5f:f1:d8:b0:9e:f8:2f:f6:99:14:9a:
22:cc:d3:4b:5f:0d:8e:01:a2:da:0e:c5:e6:41:69:
c7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FC:A4:7F:DB:AD:6D:D9:66:6F:4E:60:51:FF:0C:22:8E:B9:76:95
X509v3 Authority Key Identifier:
keyid:E3:95:80:8A:6F:3D:43:61:49:01:C9:90:C9:CE:63:2E:15:ED:FA:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c3:71:5b:ce:ec:8f:c3:9a:30:6f:88:a6:2b:61:a1:27:e1:
66:29:e2:f1:8c:86:b1:e7:6b:0b:bc:21:b0:88:3a:0d:b3:56:
c4:49:6f:27:9b:e5:d2:f6:54:7a:8d:c3:4c:ec:eb:8a:fb:53:
a4:d8:2f:d1:00:9f:ac:76:49:19:00:b2:32:2c:bc:fa:b9:bc:
0f:e6:7c:db:47:49:07:e9:58:f7:9f:8d:be:65:a4:62:c9:3b:
7a:b2:88:2a:c6:c1:22:ab:55:d8:47:05:7b:3f:26:68:33:a7:
3d:c9:80:28:82:e0:bf:9a:21:e1:22:79:55:db:a1:30:50:87:
b2:69:b9:21:7d:34:59:f7:00:44:00:46:a1:fd:6b:cb:8f:e4:
50:ec:11:aa:d2:e3:9a:19:cf:9e:76:50:f1:3e:57:49:c7:fc:
03:e0:ee:ff:75:a4:0c:76:0d:19:54:ed:fe:5f:81:89:a0:52:
80:e2:44:4f:5c:52:3d:67:f4:6d:b9:e9:00:b6:bd:43:fe:46:
86:34:04:99:26:c5:8f:c6:d9:dc:db:23:51:85:ee:42:c8:c5:
00:6f:ad:43:07:cd:ca:3a:c3:98:38:e0:56:5c:7d:5b:cd:29:
35:78:ba:08:d8:c8:87:66:5f:77:64:9c:b2:81:e8:27:3d:ac:
a0:92:44:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:36:41 2025 by rpki-client