Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
File: ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft (raw, json)
Hash identifier: zuv9Zk2GY6It+rae8IWLyqSWCJLECxD8Rn8IEP/2IPE=
Subject key identifier: EE:5F:DD:95:BB:B7:C5:B8:D7:45:E0:A1:BF:A3:28:12:80:4B:02:A7
Authority key identifier: 7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
Certificate issuer: /CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Certificate serial: 01969E9AA26D2CA4882CA3AEEF4C78B3B9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
Manifest number: 1521
Signing time: Mon 05 May 2025 04:00:56 +0000
Manifest this update: Mon 05 May 2025 04:00:56 +0000
Manifest next update: Tue 06 May 2025 04:00:56 +0000
Files and hashes: 1: ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl (hash: AJ7mtt+8kkJucydN0JXaDJZJNkrusZRTg66/kpWTL58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:a2:6d:2c:a4:88:2c:a3:ae:ef:4c:78:b3:b9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Validity
Not Before: May 5 04:00:56 2025 GMT
Not After : May 6 04:00:56 2025 GMT
Subject: CN=ee5fdd95bbb7c5b8d745e0a1bfa32812804b02a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cb:5c:86:ab:7f:5d:bf:2a:66:0d:dd:5e:89:
f2:30:15:01:26:ff:e4:20:5a:ff:b6:61:6c:ed:fb:
ca:26:7b:f8:b0:6f:60:ab:97:ed:26:a5:3c:d7:9f:
48:e4:72:40:50:d6:e0:8b:cf:b0:eb:37:ec:ca:a9:
08:59:ee:bb:91:3e:a7:5a:57:2c:bb:89:ba:16:2a:
07:2d:68:68:86:98:8c:0a:5a:36:7d:75:8f:e4:42:
45:17:6f:ef:aa:92:03:f0:9a:2f:a7:b0:e0:a1:84:
bb:43:1e:31:3d:90:f0:a8:0d:42:46:f6:ab:6e:c2:
76:d2:2a:ba:c8:86:c6:ef:3c:4d:14:2d:91:e7:58:
a5:81:33:b7:5f:c5:bb:0f:82:31:7c:6e:dc:c8:aa:
d6:d8:a8:98:35:91:81:13:18:00:e5:85:a9:ce:0c:
8d:ef:75:73:7f:47:32:34:d5:5b:75:6f:62:1c:01:
64:9c:9b:d6:7b:21:7f:78:79:3e:24:8f:81:9f:32:
e8:e9:2f:70:7c:7f:c9:5b:69:ff:89:12:ba:de:86:
e9:8c:f9:4a:76:9e:91:01:fb:a5:79:b8:0e:8b:6c:
03:f7:a5:40:af:ab:cd:54:52:db:85:bf:1e:7e:7e:
8c:1d:b2:67:16:79:54:ff:6f:c0:d0:5f:ca:52:80:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5F:DD:95:BB:B7:C5:B8:D7:45:E0:A1:BF:A3:28:12:80:4B:02:A7
X509v3 Authority Key Identifier:
keyid:7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4c:8d:a7:0a:5d:06:0d:3e:57:16:69:cb:af:9c:cc:49:41:
2f:c8:7c:1b:e5:ee:38:58:5d:e5:42:6d:e4:63:f5:fa:c4:7a:
98:7d:dc:4e:ff:1e:31:b9:4a:b2:45:07:0f:a0:91:88:77:9c:
9d:7f:3e:d5:cb:19:f3:23:85:47:6f:8e:d8:57:4b:ea:cc:b1:
3b:24:97:30:ae:87:9d:63:c5:79:36:bb:a1:07:43:61:9f:3f:
b5:61:08:4a:d4:f3:e0:a8:77:a7:70:aa:86:84:43:ae:c4:ee:
9d:88:d1:ec:d8:11:c6:b9:11:1b:de:f3:dd:92:85:ec:55:79:
5c:27:d9:b4:7b:71:ca:d1:2f:db:8e:ea:c9:00:c6:e3:4d:97:
c8:df:4a:6a:8f:1b:22:05:f0:97:67:16:c0:e5:d9:86:48:cf:
29:f9:e2:35:30:0f:ea:5c:31:ed:6c:31:e4:c8:1c:d8:9b:cc:
5e:46:40:48:79:ae:3c:2a:20:a4:5c:10:95:64:e9:bf:a5:35:
35:4d:69:56:07:bf:7d:20:d6:a4:7d:77:72:4c:97:1a:57:ff:
be:1f:1b:9e:c3:dd:be:bf:06:6a:f4:33:b2:a3:fd:0e:1c:46:
fb:fe:08:a5:e8:09:d2:c9:d2:4a:d9:a7:0f:54:07:0e:ff:85:
2e:c0:d7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:48:12 2025 by rpki-client