Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
File: rKcX8QfgYizkyz71KwFU-n-baS0.mft (raw, json)
Hash identifier: Cil6gt4oI1Ity+2RH5U2TUVi+b4vTIDo0GYq8Qs8ZAQ=
Subject key identifier: FB:9C:D8:59:E9:38:70:92:45:BA:44:EE:BB:20:A6:E9:AD:AF:A6:1F
Authority key identifier: AC:A7:17:F1:07:E0:62:2C:E4:CB:3E:F5:2B:01:54:FA:7F:9B:69:2D
Certificate issuer: /CN=aca717f107e0622ce4cb3ef52b0154fa7f9b692d
Certificate serial: 0196D0D11769234A20AEF8A547DF4B20A3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
Manifest number: 10BC
Signing time: Wed 14 May 2025 22:01:26 +0000
Manifest this update: Wed 14 May 2025 22:01:26 +0000
Manifest next update: Thu 15 May 2025 22:01:26 +0000
Files and hashes: 1: rKcX8QfgYizkyz71KwFU-n-baS0.crl (hash: qqviOfFvvJTmxhWU7nJD0h67SJ+sJlX4kM5dpyr4JGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:d1:17:69:23:4a:20:ae:f8:a5:47:df:4b:20:a3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca717f107e0622ce4cb3ef52b0154fa7f9b692d
Validity
Not Before: May 14 22:01:26 2025 GMT
Not After : May 15 22:01:26 2025 GMT
Subject: CN=fb9cd859e938709245ba44eebb20a6e9adafa61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:21:c3:9b:be:c4:e1:31:2a:fd:20:2e:49:d3:
51:93:90:29:ea:d7:bf:87:53:d1:df:46:23:96:bb:
92:c8:92:fd:37:ba:e5:b9:ca:a7:9a:83:f5:d6:18:
0b:4c:75:50:b6:4c:a3:e5:00:5e:02:e4:94:1d:7e:
88:24:67:5f:5e:ac:bf:fa:f8:29:68:57:d3:cb:7b:
b8:92:82:c4:d6:dc:cf:27:00:6e:55:c9:40:04:bf:
e5:02:13:bd:e5:f5:98:68:09:7a:8b:f4:db:1e:90:
09:aa:35:97:6f:f4:9e:3c:6e:a4:6c:0d:37:29:85:
5a:f1:36:59:9e:21:47:17:29:65:3a:0e:c8:c6:82:
44:44:76:e8:b9:a4:ca:a4:a9:01:3e:08:a4:d2:8f:
87:4b:06:93:58:36:a7:95:02:73:e4:89:f7:c6:36:
d4:0e:b4:5b:90:f2:f5:ff:54:c2:61:6a:4e:17:ed:
da:59:71:48:94:35:14:d6:dd:2e:0c:86:95:8b:26:
1a:b8:96:3d:61:5d:98:f2:e7:1d:1e:cc:99:8e:ad:
73:dd:7b:2d:7c:ca:fb:4d:66:4d:1d:84:75:5b:e0:
be:7b:35:16:d3:e2:0a:b8:e7:3c:82:f0:17:42:4e:
04:ef:83:1b:b8:7f:a0:74:6d:07:2b:e3:11:6a:86:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9C:D8:59:E9:38:70:92:45:BA:44:EE:BB:20:A6:E9:AD:AF:A6:1F
X509v3 Authority Key Identifier:
keyid:AC:A7:17:F1:07:E0:62:2C:E4:CB:3E:F5:2B:01:54:FA:7F:9B:69:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d2:61:fd:f6:92:89:da:e9:c1:bb:0b:3f:0b:d7:05:6a:9f:
c7:85:fa:3e:94:40:9e:2a:9f:bf:48:07:90:f9:c1:09:77:c5:
f4:2b:98:a1:9a:7b:cb:3a:b8:28:db:0d:fd:00:4c:6d:e8:61:
7a:1f:01:2d:14:32:71:2c:ae:c0:8e:21:0a:63:ca:67:a7:e0:
41:03:00:96:33:9c:f3:9c:84:5d:f7:1d:2d:20:a6:5c:57:8f:
41:83:92:ff:db:aa:02:47:b2:97:86:0b:bf:65:52:72:cf:67:
f7:1b:33:10:6c:0f:10:ad:a6:1b:d6:50:38:4b:86:84:79:0f:
52:db:f0:7b:ff:8c:5d:ed:b8:35:83:95:fb:1d:1f:ce:a0:7a:
6a:12:52:01:8e:2d:4f:13:68:03:4f:37:60:d2:f3:4c:de:95:
b0:92:73:d6:f1:e4:f2:21:de:83:b5:f6:4e:4f:cd:10:61:cf:
f6:23:ae:23:4f:a9:44:b0:61:f9:85:08:4c:04:b4:ea:0a:6d:
99:76:79:4b:cf:0f:aa:a0:cb:e7:5a:53:ca:44:62:ce:ee:28:
bc:b0:80:8d:a4:05:3d:8a:fb:b0:c8:b5:fe:0f:82:c4:df:1c:
dd:76:94:75:2b:58:a0:e9:d0:af:72:8e:1a:de:f6:5b:ff:25:
e5:5e:de:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 04:39:38 2025 by rpki-client