Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
File: h3YEKrfwcZWY6znlPvkuCsz6T6M.mft (raw, json)
Hash identifier: NqZGDqy+qEErcAMBYweTNWRFVInDX6QR557L+l1ubTI=
Subject key identifier: D2:19:B8:81:C9:82:5F:55:2F:1D:79:85:9A:3E:F1:E6:5D:1D:C2:8C
Authority key identifier: 87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
Certificate issuer: /CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Certificate serial: 0196B7B58F1F24AB02F8777B7931E3EECDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
Manifest number: 0932
Signing time: Sat 10 May 2025 01:00:51 +0000
Manifest this update: Sat 10 May 2025 01:00:51 +0000
Manifest next update: Sun 11 May 2025 01:00:51 +0000
Files and hashes: 1: h3YEKrfwcZWY6znlPvkuCsz6T6M.crl (hash: Qi1QCOn7IQFkyU0kOEJAm5zoBJpGjN+5abcVfudYYHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:8f:1f:24:ab:02:f8:77:7b:79:31:e3:ee:cd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Validity
Not Before: May 10 01:00:51 2025 GMT
Not After : May 11 01:00:51 2025 GMT
Subject: CN=d219b881c9825f552f1d79859a3ef1e65d1dc28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:22:72:f1:39:5c:27:12:6e:87:1c:38:48:
83:41:fc:cc:db:a7:c3:1c:73:3c:8b:36:e2:04:f5:
47:87:c4:65:7c:fe:e6:84:67:8a:50:d3:28:1d:9f:
a4:d4:98:56:5c:39:88:3e:b1:05:2d:a2:7d:9c:ce:
a8:8f:f3:95:42:53:59:62:ad:e5:50:e6:59:08:26:
8f:d5:23:41:00:69:d0:2a:fb:a2:6d:bd:bc:48:24:
87:9b:f6:95:5c:78:d0:04:6b:38:44:6f:be:ee:be:
49:29:b7:ae:38:8f:da:9a:df:f8:8a:02:5b:42:9f:
8b:85:74:41:28:94:ae:97:46:23:f6:06:be:8d:08:
e8:5b:59:2b:7b:86:ff:9e:30:0d:c2:c4:29:2d:d0:
31:0c:cd:ae:5e:f6:be:79:81:bc:2e:5b:26:8e:b3:
78:02:69:1d:9a:79:29:ac:2f:09:73:11:72:fb:27:
95:a6:87:46:53:7f:87:d3:2f:bc:71:68:38:02:85:
77:80:d6:28:5a:08:62:ab:b3:2a:de:6b:f7:a2:eb:
16:24:48:58:f3:b8:43:31:b1:4e:93:62:ae:c7:99:
9b:71:5e:bc:cb:26:2d:49:48:40:b6:4f:54:ff:ec:
9a:19:7e:66:2f:8c:68:b8:e3:e9:4f:1d:ff:a3:70:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:19:B8:81:C9:82:5F:55:2F:1D:79:85:9A:3E:F1:E6:5D:1D:C2:8C
X509v3 Authority Key Identifier:
keyid:87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:54:5d:45:45:55:f3:e5:4e:94:89:da:a7:72:48:67:97:eb:
8a:1f:9a:30:12:32:cc:d4:d8:57:8e:62:3e:21:34:a0:1c:86:
14:3f:36:16:1b:65:1d:4a:54:35:a5:43:3a:16:17:a4:9f:79:
dc:49:4c:05:f5:14:6f:4f:22:66:04:1b:c2:c7:ca:bd:87:c1:
e5:13:83:b1:1e:79:62:86:61:ad:66:b8:99:ab:c1:40:18:61:
c6:b9:48:b8:1a:21:0b:e2:7f:b1:bb:c1:f6:b7:28:8c:1d:80:
07:94:5d:34:d0:49:f3:a3:58:91:27:4c:9c:63:96:23:bf:7d:
d7:f7:83:c7:53:67:cd:f9:2c:18:17:50:6b:16:31:86:5b:90:
c5:0e:8c:f3:a2:01:f6:bf:90:cf:90:b7:b1:23:53:a5:d4:4c:
ed:51:b5:a9:3f:17:d1:d8:43:2e:fe:cd:10:e0:6c:c3:20:b3:
50:0c:0b:63:e0:ca:c5:e9:e5:e7:e7:63:4e:c5:7f:fd:bc:94:
91:90:f1:14:98:18:bb:0a:3f:8f:af:6e:ff:a1:77:05:c6:f0:
c8:ba:b7:c8:1c:00:3a:ca:05:61:22:a0:2a:12:55:92:01:aa:
f4:ec:9a:a6:42:42:b4:25:79:f5:3b:b8:8c:90:f2:99:28:a7:
74:27:ca:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:01:23 2025 by rpki-client