Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
File: x87XolsQkPDT8-uXyBSrL_fb_DY.mft (raw, json)
Hash identifier: tfCs92jmPen//6SWQExcybX5H8IrvMDzCHZu2S9NZ9w=
Subject key identifier: 00:9D:5F:CB:8B:D6:63:B5:61:09:63:47:3C:34:52:90:56:70:3C:45
Authority key identifier: C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
Certificate issuer: /CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Certificate serial: 0196C7CD0FD1845029584CAC2588BDAB09E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
Manifest number: 08AA
Signing time: Tue 13 May 2025 04:00:26 +0000
Manifest this update: Tue 13 May 2025 04:00:26 +0000
Manifest next update: Wed 14 May 2025 04:00:26 +0000
Files and hashes: 1: x87XolsQkPDT8-uXyBSrL_fb_DY.crl (hash: HU4jS/wLDR3MJ9aHDZ5IlqenR/LAfKwaPalsYT1RpUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cd:0f:d1:84:50:29:58:4c:ac:25:88:bd:ab:09:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Validity
Not Before: May 13 04:00:26 2025 GMT
Not After : May 14 04:00:26 2025 GMT
Subject: CN=009d5fcb8bd663b5610963473c34529056703c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cc:08:97:37:56:d3:57:ec:8f:fb:84:a8:a9:
f7:3f:6c:3a:64:a0:c3:a7:2b:96:68:fb:44:bb:cf:
64:25:84:5e:e7:b9:66:c5:d5:a1:ce:c0:ea:e6:3c:
59:a1:c2:dc:2c:ae:cd:65:cc:87:36:6f:96:53:62:
66:5a:e5:6d:d0:d2:75:5c:56:94:69:77:a0:e2:4a:
3a:d2:c7:b3:3c:93:d4:c5:24:b6:ac:1c:05:47:87:
34:4d:3e:ff:ea:93:09:d1:12:43:fa:d6:21:4b:9e:
64:90:ed:7b:fd:b4:01:bc:43:3c:83:b9:d6:1f:d8:
31:2f:2a:d4:89:e6:30:38:cd:e8:6e:6b:8c:8d:9c:
a7:7d:7f:40:fd:f2:1c:26:6e:9a:4d:ed:48:e6:57:
77:cc:96:60:d7:67:f3:59:70:e5:31:63:7f:9f:7c:
d9:1c:2c:e8:11:8d:4e:4a:7b:76:90:3d:d9:63:9c:
9e:77:34:d9:73:e7:c1:76:30:42:07:97:4a:90:67:
61:0c:21:01:1d:24:02:b9:0e:53:6e:ce:22:70:9f:
3e:02:c4:4b:30:d7:42:0d:fa:cb:7d:e3:46:c6:a8:
1d:c9:5b:5c:1d:74:95:c9:66:e4:0a:49:d6:96:08:
16:dc:33:5c:df:e5:b4:ff:c5:b8:1d:e4:83:69:93:
bf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9D:5F:CB:8B:D6:63:B5:61:09:63:47:3C:34:52:90:56:70:3C:45
X509v3 Authority Key Identifier:
keyid:C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2e:4c:5d:0a:84:bc:89:c7:34:74:91:f8:38:09:65:44:7f:
bf:9b:4d:39:62:a6:37:06:a4:a5:c2:aa:33:8c:2c:a3:cf:71:
86:64:24:be:3e:99:1d:b5:ab:a8:8c:99:a2:fa:41:76:94:aa:
9d:c7:8d:28:51:fa:77:5e:31:4d:2a:f8:dd:6e:6e:f9:d8:7d:
e2:99:8c:a5:99:6b:d2:7c:5f:ce:20:99:c4:1f:f6:2d:17:b2:
02:4b:8d:64:7e:d1:fb:69:b2:f9:74:d1:b1:f5:b7:2a:d4:cc:
81:9e:2f:65:ee:9d:b2:bb:90:cc:52:1f:92:7c:b8:0f:60:20:
c1:37:14:ce:c8:20:0e:e3:f0:3b:9d:8f:29:5c:e1:bd:ac:76:
dc:06:ee:17:46:29:95:df:98:79:89:99:10:95:a1:03:1b:b9:
16:11:72:4c:d7:5e:c2:bb:ca:ee:8c:20:00:e3:14:07:d0:a2:
db:cd:ab:c9:81:fc:73:fa:5e:74:ac:75:5f:12:54:68:ca:1e:
eb:58:58:71:f2:5e:71:05:f5:53:3a:31:d3:de:3e:15:d9:0b:
ca:41:2e:90:07:ba:05:9f:29:54:0d:43:92:a7:66:da:c1:77:
56:c0:09:5e:3f:43:dd:5d:44:82:68:96:cd:01:0e:c9:d4:47:
ce:65:62:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:01:59 2025 by rpki-client