Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier: YzWUYVGNlrKdEB5df8tD9OdqIDTyieWNW0SRdaiLXKE=
Subject key identifier: 4A:C4:7E:87:30:3A:1F:8F:1F:30:A4:9C:C1:81:6A:5F:57:B5:1A:50
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer: /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial: 0196CA606FCAFA7E110FAC6E92BCDE5467C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number: 1537
Signing time: Tue 13 May 2025 16:00:39 +0000
Manifest this update: Tue 13 May 2025 16:00:39 +0000
Manifest next update: Wed 14 May 2025 16:00:39 +0000
Files and hashes: 1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: TKQXya+FPFXk+22nqkAaWlQ99SyXdPFJ3e395q8LWmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:6f:ca:fa:7e:11:0f:ac:6e:92:bc:de:54:67:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Validity
Not Before: May 13 16:00:39 2025 GMT
Not After : May 14 16:00:39 2025 GMT
Subject: CN=4ac47e87303a1f8f1f30a49cc1816a5f57b51a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:93:9b:8e:8f:b6:ae:01:87:2d:9c:21:db:
4a:1a:0c:12:03:91:2f:56:4f:04:2f:fc:5d:a6:3f:
4e:a7:75:f1:10:d5:fa:4a:69:f8:5f:e9:01:10:fb:
9b:bd:f7:8d:15:60:82:db:f8:7e:46:81:ff:e0:a6:
b5:cc:f7:d1:1f:be:e0:8d:9f:cc:e9:ab:3c:ee:23:
98:40:51:40:9c:f5:db:37:55:6a:ed:b5:1d:33:ef:
a6:f7:67:44:cb:dc:0d:53:95:dc:42:aa:eb:33:e3:
f7:d1:b3:d4:1d:8a:e5:c8:77:a7:9b:57:31:60:58:
9c:81:f0:ef:53:74:b2:72:a6:c8:25:2e:5f:57:89:
b6:98:2f:b2:d2:d5:10:7b:e2:6c:30:72:ab:87:ae:
03:10:22:48:e1:91:6c:50:f7:51:15:15:ac:90:d2:
eb:84:9c:a1:32:44:e4:38:e1:dd:30:99:51:a7:1d:
a3:0a:b4:fd:d5:38:4d:e7:a7:ed:81:de:d2:fb:7b:
15:a3:e4:e4:f7:83:dd:f8:bf:06:d9:ff:a4:e4:40:
bf:4b:8c:84:18:7c:70:78:ce:0e:46:8c:48:4d:e7:
0a:4c:40:83:06:f6:f2:47:74:e4:54:64:ea:97:f7:
2c:76:b7:99:eb:6e:ad:43:7b:98:31:24:70:a7:4a:
f4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C4:7E:87:30:3A:1F:8F:1F:30:A4:9C:C1:81:6A:5F:57:B5:1A:50
X509v3 Authority Key Identifier:
keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c0:17:a5:40:d2:62:7b:87:d8:f2:00:c8:ce:c4:45:95:bf:
2c:7b:4e:9f:26:f4:28:6b:be:0d:ff:64:a5:da:a0:30:45:40:
35:b8:b5:2d:7a:a7:c5:7f:22:db:99:09:b8:70:e9:30:e6:a6:
e5:a2:b3:3c:f6:83:2d:b5:01:c6:c9:9e:9c:23:54:43:5f:50:
51:46:bd:f0:03:eb:c6:e1:30:e4:5d:9b:14:ec:8e:f8:13:33:
c6:0f:c5:5a:3f:37:54:94:84:e3:6f:30:45:4a:d8:d6:86:c5:
83:e5:cc:5f:a2:ac:4f:33:17:51:1d:a9:40:5c:f4:e5:57:99:
6e:2f:65:70:16:aa:b6:ea:01:5d:ab:dc:13:f1:ff:d6:f3:f0:
2d:d4:43:68:83:ed:ac:a3:b9:31:a6:09:23:8f:f8:e1:5b:cf:
df:09:ec:40:a5:cd:52:30:43:2e:24:27:51:50:11:b0:d6:c5:
94:39:a2:1f:70:b2:54:9d:33:43:24:6a:e7:ef:a3:73:44:bd:
06:bb:ec:90:63:9b:dd:66:8a:de:24:b6:1b:c0:50:22:21:45:
0e:18:ea:a5:a2:a4:10:49:bf:aa:d4:be:e8:91:52:1f:13:0f:
b1:1b:62:64:b3:26:99:03:60:f9:a7:0c:de:af:d4:b5:96:7f:
1a:fe:fe:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:09:47 2025 by rpki-client