Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
File: t64i7alidO6Wl8qqy1PfkXNwngM.mft (raw, json)
Hash identifier: BjP4In+4pYtC66huPzttccMvyEHZBmgYoJi8hY9wfCI=
Subject key identifier: 12:F7:72:CF:F1:5E:7D:C8:F9:07:64:06:2A:A2:49:0C:95:17:F2:37
Authority key identifier: B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
Certificate issuer: /CN=b7ae22eda96274ee9697caaacb53df9173709e03
Certificate serial: 0196C3B9DB0AFB9C5049C64437F759C105DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
Manifest number: 1296
Signing time: Mon 12 May 2025 09:00:59 +0000
Manifest this update: Mon 12 May 2025 09:00:59 +0000
Manifest next update: Tue 13 May 2025 09:00:59 +0000
Files and hashes: 1: t64i7alidO6Wl8qqy1PfkXNwngM.crl (hash: bxau6y5UTcn0GWAIW9TDla5V+8m26tXlJWNSvC9A5ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:db:0a:fb:9c:50:49:c6:44:37:f7:59:c1:05:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ae22eda96274ee9697caaacb53df9173709e03
Validity
Not Before: May 12 09:00:59 2025 GMT
Not After : May 13 09:00:59 2025 GMT
Subject: CN=12f772cff15e7dc8f90764062aa2490c9517f237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:6a:d4:aa:1a:d3:94:1c:f5:a0:78:48:1f:
af:ed:bb:4c:b2:d6:ff:29:16:ee:a7:c0:5a:0f:d0:
7f:1c:21:55:b8:c3:8a:f9:1c:2f:d3:ec:fd:3e:f0:
c1:18:9d:56:6c:7f:35:e3:4e:39:06:51:65:1d:c3:
fc:55:d4:cb:05:48:79:5e:b8:d3:36:1c:0a:90:e0:
bc:1b:19:b8:57:15:46:46:ad:b9:1b:f4:23:ee:ca:
ff:84:d4:1c:a9:05:53:b0:a7:96:59:4d:e7:9d:ad:
32:d5:70:d8:42:ae:e6:35:64:ef:f3:ed:d0:ad:46:
65:6b:89:af:d5:1d:cf:9c:a6:06:a7:7e:c5:c4:b6:
f4:92:4e:42:e7:9a:4a:55:45:7d:76:72:30:04:3d:
10:16:72:37:59:c2:d6:8f:00:a8:c7:fc:da:4e:c0:
f4:91:3b:e1:9e:e2:44:e9:04:3e:35:e8:1b:b2:d0:
a0:fd:67:0e:21:0e:34:b1:96:a5:bb:59:15:c8:f8:
a9:8a:b6:a8:f4:87:09:d9:58:23:48:b2:74:69:59:
af:20:b7:30:88:74:32:1a:b9:b4:f4:72:5e:d7:76:
97:1a:fa:fb:0f:49:4f:46:66:2b:bb:8b:cf:32:7b:
e6:3f:f0:46:47:3e:6b:d5:22:ed:a6:66:3f:db:80:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F7:72:CF:F1:5E:7D:C8:F9:07:64:06:2A:A2:49:0C:95:17:F2:37
X509v3 Authority Key Identifier:
keyid:B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:45:96:29:ad:a7:57:1e:1a:ed:c1:01:3a:34:2a:7a:3f:0c:
22:61:58:63:0e:ce:5a:64:b8:c7:c6:87:73:2c:93:20:d9:27:
5a:1f:4e:43:71:56:a1:94:d2:a1:d9:72:15:aa:b1:fe:1d:08:
2c:f0:59:1b:f1:ab:03:f1:47:d4:93:53:70:30:63:53:39:e1:
3b:a4:cc:c2:57:2c:a0:1a:52:fc:e4:36:2f:48:73:ba:4a:39:
cb:7a:df:da:55:a9:a1:62:81:46:06:b2:8c:c6:8c:0c:4d:f4:
f9:51:82:63:b7:9b:e2:bb:01:a4:76:6c:87:5a:e4:fa:74:0b:
41:a9:26:32:b5:fd:46:c4:6a:ca:19:63:20:c8:39:4e:c4:3b:
b0:29:49:ee:e0:45:88:50:28:6b:2e:0a:55:92:79:ba:0e:38:
e8:97:19:bd:70:71:99:80:c0:74:8a:c6:98:27:ee:a1:aa:ca:
af:6b:69:13:4a:e7:9a:26:e1:56:fa:69:8f:5e:26:b1:b4:80:
15:d4:7a:e8:01:45:96:73:a8:42:e4:d2:e2:e8:9a:05:79:7a:
fe:c0:b2:23:45:66:c7:ef:2c:79:e3:28:34:f8:09:e2:60:1b:
9f:dd:4a:30:18:5e:66:2d:7f:8a:97:5e:7d:f0:0a:02:60:df:
4b:12:aa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:26:14 2025 by rpki-client