Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: I93X6xJKjH6R/zi+AQblvqwMbK/CZoJ+2bcvNQJwqZU=
Subject key identifier: B6:51:CA:7E:77:E7:DB:52:59:61:9D:64:B7:09:CD:F2:D1:3D:5F:52
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 0196A6548686A96368EA2A1CA37730316887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 0AA9
Signing time: Tue 06 May 2025 16:01:19 +0000
Manifest this update: Tue 06 May 2025 16:01:19 +0000
Manifest next update: Wed 07 May 2025 16:01:19 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: f7bOZVoLV0uHg0yl/k2GUXdJQU1g7qnEe8R6tgT0MQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:54:86:86:a9:63:68:ea:2a:1c:a3:77:30:31:68:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: May 6 16:01:19 2025 GMT
Not After : May 7 16:01:19 2025 GMT
Subject: CN=b651ca7e77e7db5259619d64b709cdf2d13d5f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:98:f0:6f:c1:1c:45:07:ae:31:16:b6:9c:9a:
02:cf:d0:69:b9:f3:45:2b:8e:b8:9f:62:65:2c:11:
97:77:22:a4:1f:18:15:c6:af:e2:0e:21:e5:50:b3:
6c:a6:2f:24:42:b3:7f:e2:32:27:39:98:34:a9:6c:
0c:05:65:70:93:34:51:86:b1:db:ef:5f:db:cd:3b:
e7:ba:43:09:a7:8e:a8:d5:f7:f0:4d:70:ed:28:78:
19:68:8a:67:8b:38:1d:f6:da:d2:cb:3e:5c:e2:67:
7c:82:15:18:dd:cb:77:91:30:10:dd:aa:7b:c4:05:
5c:09:52:f4:a4:5f:fd:ea:4c:a0:1f:3f:33:26:30:
06:b9:3f:d0:04:d0:23:a2:5c:57:61:c8:7c:b2:71:
14:83:79:0d:c7:32:50:3e:99:2e:f6:db:06:10:63:
7f:d2:77:08:f9:4a:92:ba:c3:ae:0f:69:63:90:b9:
d8:18:31:61:23:df:cd:3e:80:35:7c:14:e5:8e:bf:
2c:c4:b3:04:b3:53:4a:de:40:d3:0f:b4:cd:37:1f:
5d:be:28:2f:26:62:14:5b:20:a1:ca:17:b9:f2:0b:
5c:67:91:ef:2f:87:88:cc:17:4c:d3:a1:21:65:47:
b1:6e:3a:03:77:c6:3b:25:db:27:b3:0c:b6:8b:87:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:51:CA:7E:77:E7:DB:52:59:61:9D:64:B7:09:CD:F2:D1:3D:5F:52
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:30:4f:fd:88:8f:f7:31:cb:88:5b:03:87:cd:fe:6c:21:f6:
e6:2a:d6:fe:51:3b:8e:7d:de:cb:56:bb:dc:1f:d3:21:04:3d:
2f:2a:cf:26:b8:e8:3e:e5:fd:8a:87:31:57:e2:79:53:ea:2c:
df:57:f6:e8:f0:a3:08:cc:88:51:d8:47:51:be:a6:f8:1b:36:
fa:cf:a7:75:d0:1a:1f:6b:f5:c6:c4:a3:4e:84:cc:a0:ff:60:
e7:a9:54:65:0c:f3:c6:11:cd:4f:86:71:77:55:75:f7:e7:38:
6c:5c:29:10:77:23:91:a3:be:c9:7b:ee:a9:ef:ef:e4:3f:e0:
7d:af:76:18:17:49:1d:9b:fd:17:94:b7:90:c3:42:18:8d:09:
38:cf:7d:bb:b9:01:13:d0:c7:0d:15:74:2f:c6:9f:55:ed:fa:
b4:4d:8f:79:66:7b:5c:8b:55:0b:cb:0b:e8:41:93:87:3e:a2:
c4:1d:3c:3e:bf:d7:47:b6:62:8f:3e:d6:a5:ba:9e:93:d7:c5:
2d:19:b9:a7:c0:cb:85:aa:c7:60:58:64:20:da:bb:18:f7:08:
00:08:2b:83:e6:39:bd:06:52:cd:cc:97:e1:d7:cd:45:08:f1:
fa:0c:2e:cb:1c:45:27:2d:03:fb:f7:4a:28:1c:d6:3e:43:4a:
82:df:17:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:34:59 2025 by rpki-client