Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
File: AlY31IiO4AWN6a06cMQtxGmWmpk.mft (raw, json)
Hash identifier: 2gpRmCXytI7Es+yEu6WQ5CBEZyDtXB+GQe1jMmLW1Tk=
Subject key identifier: EF:5E:64:E8:BE:1A:72:5F:8B:ED:80:0F:DD:A6:34:10:BE:9C:14:CE
Authority key identifier: 02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
Certificate issuer: /CN=025637d4888ee0058de9ad3a70c42dc469969a99
Certificate serial: 01969F08313153C1B273BDA43C313793EFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
Manifest number: 099A
Signing time: Mon 05 May 2025 06:00:36 +0000
Manifest this update: Mon 05 May 2025 06:00:36 +0000
Manifest next update: Tue 06 May 2025 06:00:36 +0000
Files and hashes: 1: AlY31IiO4AWN6a06cMQtxGmWmpk.crl (hash: Mpu8l6zUfxpNb13EpOu8s8Qiot7xVLKOnAg4hPB044U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:31:31:53:c1:b2:73:bd:a4:3c:31:37:93:ef:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025637d4888ee0058de9ad3a70c42dc469969a99
Validity
Not Before: May 5 06:00:36 2025 GMT
Not After : May 6 06:00:36 2025 GMT
Subject: CN=ef5e64e8be1a725f8bed800fdda63410be9c14ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:14:eb:ad:4c:68:08:6b:f7:d0:22:7c:35:
8f:80:17:d2:72:54:a5:32:e4:d0:93:bb:6b:e5:e3:
7c:28:08:22:e8:e2:63:60:2e:f4:a6:b3:c1:fa:08:
b8:cd:4d:94:4e:2f:70:c7:bb:78:38:4e:d0:2c:67:
ea:4e:85:24:b3:05:c2:74:9d:77:e3:1c:29:19:0e:
a9:22:73:bc:6e:66:5c:4f:5c:61:18:bd:b3:59:ea:
6b:14:3e:bf:6f:a2:51:0f:0c:42:a8:4b:ba:49:cd:
a8:4f:ca:73:cf:90:9d:f3:63:67:44:ff:a6:a9:dc:
db:92:6b:e4:f6:5f:e9:d1:e6:35:9b:08:29:3f:75:
5a:82:3a:1d:95:e2:53:11:20:24:cf:0b:dd:fa:35:
a4:a9:61:4e:6a:1c:f9:09:d0:91:2c:3f:dc:47:e2:
a0:3e:9f:25:90:80:2d:35:fb:31:36:4f:c3:99:82:
19:d4:a8:57:21:d8:c7:4c:d9:c5:bf:3d:d0:43:1c:
b3:ca:2a:5b:11:95:d6:47:fc:28:bf:e8:d9:6b:1c:
e2:27:34:bc:33:41:da:d9:19:50:17:39:59:a7:b2:
0f:5d:e3:2d:ab:fb:d8:18:c4:ee:4a:ab:ca:48:84:
01:99:dc:b9:25:d4:6b:52:2e:ec:34:7a:33:2e:78:
b9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5E:64:E8:BE:1A:72:5F:8B:ED:80:0F:DD:A6:34:10:BE:9C:14:CE
X509v3 Authority Key Identifier:
keyid:02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b5:5d:e8:d9:2d:6a:72:1f:ad:f0:aa:ca:f7:8b:d6:74:1d:
06:cd:12:5e:ae:8c:3a:46:74:c1:20:8b:0a:bc:f4:d3:9f:6a:
72:0d:17:0f:6f:53:df:bd:5a:68:2b:79:f7:35:6e:07:83:39:
37:eb:79:be:02:63:f3:f3:d1:22:43:38:73:2c:5c:6f:36:f7:
15:8b:0b:22:ee:c7:fa:7a:bb:f8:60:1d:b9:f2:8c:4a:8f:51:
92:bd:d4:48:6c:78:6e:ec:24:81:c4:9e:2d:e4:6a:c7:74:30:
36:2a:1f:ad:5d:e4:08:29:a8:e1:01:06:f0:8b:17:c4:c6:90:
4a:68:f0:6f:c2:72:5a:ef:dd:57:12:32:27:81:8d:16:9e:bd:
39:ed:03:42:ed:a8:12:67:c7:15:1c:50:e7:b8:6c:9b:48:b3:
ac:12:de:1a:f3:4b:fb:02:ec:80:87:c3:9d:5a:b6:dd:e9:59:
26:9d:3f:af:47:25:dc:b5:7a:62:f0:2c:28:d3:e0:d4:d9:a0:
03:aa:1d:f8:58:a1:a2:bd:f1:16:e9:48:98:a6:5f:88:5b:25:
e3:bd:aa:fa:04:f5:06:02:75:34:92:ac:e1:c0:64:10:e3:89:
18:1d:5a:2a:04:72:c6:5d:f6:40:55:1a:a4:e9:61:3c:68:dc:
fc:87:cc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:55:38 2025 by rpki-client