Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
File: RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft (raw, json)
Hash identifier: nVpSzy1rPr5WgOmKCTTCwqn+pzYZLT149N4jvjLnGhY=
Subject key identifier: 2C:51:0F:00:E9:55:CB:80:0C:FC:28:36:1A:AA:0C:FA:1F:1A:29:FE
Authority key identifier: 44:05:86:C5:46:14:B9:6E:DB:84:70:95:24:A3:34:B3:1C:99:99:FD
Certificate issuer: /CN=440586c54614b96edb84709524a334b31c9999fd
Certificate serial: 0196A842E980244EF7120FBBA5ADD643D30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
Manifest number: 0831
Signing time: Wed 07 May 2025 01:01:19 +0000
Manifest this update: Wed 07 May 2025 01:01:19 +0000
Manifest next update: Thu 08 May 2025 01:01:19 +0000
Files and hashes: 1: RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl (hash: t8k+Kk+qDQ7TJNZbbq+Mbpge7OMYtqeyskhMBqvEXt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:e9:80:24:4e:f7:12:0f:bb:a5:ad:d6:43:d3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440586c54614b96edb84709524a334b31c9999fd
Validity
Not Before: May 7 01:01:19 2025 GMT
Not After : May 8 01:01:19 2025 GMT
Subject: CN=2c510f00e955cb800cfc28361aaa0cfa1f1a29fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:38:97:e7:e1:0f:3f:52:22:79:0b:d1:1f:2c:
c9:cd:3f:f6:1e:32:16:88:a8:5e:1f:33:7d:9a:58:
e3:1c:8f:f3:d9:c3:1e:bc:c8:16:88:a0:9c:65:30:
8d:0d:1b:3d:ac:97:26:8a:7d:f0:a6:c0:ff:06:7e:
23:f5:32:41:72:d3:d1:6f:d3:a4:04:ec:b3:ea:8a:
96:92:62:db:fa:80:eb:27:11:8b:70:4b:de:e6:10:
54:34:b6:1e:2b:61:a3:f3:eb:8e:cf:0e:9c:b1:a4:
fd:72:f4:34:45:84:eb:5d:b2:86:ae:3a:74:5f:37:
91:e5:b1:8a:c2:b0:09:41:71:15:c1:c5:40:e4:99:
df:ba:5e:5f:4a:8d:a8:76:56:18:bc:97:aa:0e:07:
80:0d:94:ed:0b:21:37:86:a0:2d:b7:c0:83:f7:c4:
31:f0:c4:f0:09:49:5e:21:fd:88:3e:53:2f:3a:57:
72:86:28:3e:d5:8f:6a:98:ac:dd:16:b2:fc:9a:e9:
ee:87:df:45:ee:b6:73:96:73:e3:72:b0:66:97:2f:
bd:a7:ab:05:dd:30:0a:75:54:78:cc:e5:35:d3:b8:
4b:25:70:9b:83:48:f4:64:00:7a:5c:6e:06:35:4e:
bb:81:49:02:38:b2:11:13:29:eb:19:d6:78:9a:ec:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:51:0F:00:E9:55:CB:80:0C:FC:28:36:1A:AA:0C:FA:1F:1A:29:FE
X509v3 Authority Key Identifier:
keyid:44:05:86:C5:46:14:B9:6E:DB:84:70:95:24:A3:34:B3:1C:99:99:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0d:f9:83:45:9b:13:98:d7:08:1c:b8:16:a2:42:d4:3a:2a:
97:d9:54:c3:04:3d:9a:7d:8c:2e:c8:96:a4:21:a2:83:2d:ef:
5d:ca:80:a9:39:60:55:c5:ba:43:00:28:bd:82:91:b3:b8:33:
43:db:d5:53:57:c3:2d:ce:68:b4:13:c6:47:28:94:45:93:49:
4a:5c:9b:24:19:16:90:66:f4:25:37:97:1f:6c:b5:48:ee:71:
d8:31:33:19:96:42:ab:32:cd:92:ef:4d:48:de:a2:b1:94:27:
ae:b0:fb:f3:ed:da:cb:f2:ae:65:f8:b6:ad:0d:a6:f0:ed:cb:
3c:54:83:e7:eb:ad:e9:25:b6:ee:35:92:4d:82:4f:46:58:32:
65:ef:6f:ae:dc:9a:24:b4:af:37:45:42:2b:65:27:5d:02:8a:
54:90:5b:fb:c7:84:e8:9a:6d:5c:f7:59:88:58:cf:a6:77:90:
b9:8f:88:63:45:3f:a0:67:b3:17:1e:ef:a4:62:aa:db:98:4c:
6e:bb:a8:8c:a0:ee:17:18:25:e4:95:d7:3d:fb:45:ae:05:d5:
f9:46:ab:a3:c0:05:a2:bc:7b:6a:1e:ae:06:0f:4b:40:fd:d7:
2e:9b:88:8d:25:89:9f:aa:22:f5:3c:8c:20:f9:4a:1b:b6:ef:
03:e7:3d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:11:01 2025 by rpki-client