Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
File: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft (raw, json)
Hash identifier: QLTodaXOz7X1z9NqRGIWx3fbLbUVVtB/lRsfUdvpKuI=
Subject key identifier: 66:2C:AA:9F:76:92:28:C1:A4:0B:B3:83:DF:00:37:E1:BF:73:09:FF
Authority key identifier: 9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
Certificate issuer: /CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Certificate serial: 01969F081D9C0498B9923D59DC4E09CC3CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
Manifest number: 1291
Signing time: Mon 05 May 2025 06:00:31 +0000
Manifest this update: Mon 05 May 2025 06:00:31 +0000
Manifest next update: Tue 06 May 2025 06:00:31 +0000
Files and hashes: 1: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl (hash: q5bHSGiBOzlaK5lg8gWSu+reRdGd1G08ubLa40Qus2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:1d:9c:04:98:b9:92:3d:59:dc:4e:09:cc:3c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Validity
Not Before: May 5 06:00:31 2025 GMT
Not After : May 6 06:00:31 2025 GMT
Subject: CN=662caa9f769228c1a40bb383df0037e1bf7309ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ff:38:32:21:5f:de:6d:b1:c1:f6:eb:b6:3f:
29:70:fb:c1:07:f3:2d:bf:28:64:6e:4a:62:e0:f8:
54:fc:c2:f4:81:73:60:73:91:c7:99:ee:a6:e9:7a:
44:b7:f6:84:7a:6c:f1:da:73:11:71:f2:02:fe:50:
cb:99:ff:72:97:fc:e7:eb:96:16:b7:7c:2b:56:74:
a9:53:fe:7d:13:54:9d:79:99:ab:be:ef:31:dc:6e:
60:89:63:8d:3b:2b:14:4f:34:d1:1a:62:ef:bb:e7:
96:c3:fb:5c:f6:23:fd:a3:3e:a4:21:f6:30:d6:71:
2d:dd:73:1d:01:94:ba:f6:66:4d:9b:03:ea:d9:6c:
80:13:31:35:7f:43:d2:0b:67:6e:73:fb:60:c2:a7:
07:fa:fa:96:02:45:0c:dd:6f:eb:c2:c5:c9:44:08:
e1:f7:ab:32:ff:0f:1c:a9:62:ed:2b:2e:d3:63:52:
31:43:c8:7c:48:4b:d7:44:6c:03:2a:a9:50:6b:66:
78:1f:08:3b:ea:19:e7:8d:d9:ec:6c:cb:c9:be:d3:
9a:6e:fc:f0:0e:26:65:c2:ba:8c:6e:63:e8:30:c1:
8f:53:9f:25:1c:cb:9e:3b:18:d2:88:fb:6c:41:ab:
0e:94:ed:29:04:cd:69:86:c8:77:03:49:34:fa:d2:
3e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2C:AA:9F:76:92:28:C1:A4:0B:B3:83:DF:00:37:E1:BF:73:09:FF
X509v3 Authority Key Identifier:
keyid:9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:44:2f:b5:14:54:f9:3a:ee:80:a1:db:9a:ec:7e:54:f1:3b:
e8:62:52:4a:57:cf:60:04:63:db:82:2a:c6:9c:b7:cd:da:e2:
ec:19:95:82:45:ec:ad:c9:a9:d9:29:08:cf:13:f3:56:c8:b5:
af:a5:ac:1b:5d:20:bb:77:15:85:aa:0e:40:44:25:a4:0d:c0:
09:58:aa:86:94:f1:49:a4:99:0f:ec:0f:69:87:ca:44:8b:38:
52:b4:84:78:18:01:e9:fa:44:a0:98:a0:78:d1:bb:5b:76:96:
69:b2:06:1c:41:76:a1:35:f9:dc:cc:ad:ab:21:08:f0:b2:45:
63:bd:0e:c4:a2:a5:88:07:5b:8c:00:c9:f5:c6:cb:7a:73:0b:
cb:22:2a:96:cf:1f:8f:d7:dc:b5:83:e5:b6:0a:7e:fe:fb:ea:
0a:6b:7d:60:cb:27:3c:f0:34:84:11:50:f9:a9:aa:01:c2:70:
5f:0e:67:66:7d:f6:e4:a9:31:a1:02:65:a7:66:be:3e:3d:88:
c2:06:ab:5b:4b:d3:a0:eb:e5:8c:3f:ed:46:c9:f3:01:01:53:
7b:c7:2c:73:e3:2a:2b:4e:8e:78:89:11:a3:d9:9d:1c:b1:16:
3f:78:0e:aa:e5:94:de:d5:ca:5f:32:5a:31:93:d9:e5:21:73:
60:8e:c2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:17:07 2025 by rpki-client