Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File: INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier: xwmkYeqX4RNqGdTGYMD17+3lY/iFMXSWASutAAEeYZw=
Subject key identifier: DB:BE:4F:19:F2:F5:64:CB:3E:3F:B5:29:E1:A8:B7:2E:F8:23:DB:CF
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer: /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial: 0196B4EB54C5094098645943A5628EECA015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number: 0323
Signing time: Fri 09 May 2025 12:00:43 +0000
Manifest this update: Fri 09 May 2025 12:00:43 +0000
Manifest next update: Sat 10 May 2025 12:00:43 +0000
Files and hashes: 1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: 1a+v+30xxccmMOKUR49z/nggq5tH+WNJ6rCDPG5r41w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:eb:54:c5:09:40:98:64:59:43:a5:62:8e:ec:a0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Validity
Not Before: May 9 12:00:43 2025 GMT
Not After : May 10 12:00:43 2025 GMT
Subject: CN=dbbe4f19f2f564cb3e3fb529e1a8b72ef823dbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:12:a2:a9:d7:39:2a:eb:6c:d5:45:e8:b8:
99:ec:d0:6f:aa:24:ed:ef:7b:5b:18:39:d1:0f:b0:
17:b9:0e:4c:26:cf:33:74:3e:8e:48:61:0b:bd:8c:
76:7c:3a:2c:64:45:9b:66:8d:1e:4d:d3:9e:2a:fe:
46:cd:cd:aa:2d:de:c1:96:f5:2a:4c:8c:ed:14:d7:
5e:07:4b:c1:78:6d:71:ec:86:78:0f:59:01:a4:c0:
da:ff:e7:79:60:87:af:81:3d:14:2f:4c:8f:7e:2a:
cc:f4:52:63:95:d8:8e:76:4e:c7:79:16:ec:c2:24:
4d:6a:be:6d:19:10:05:ec:ec:54:51:71:41:2c:75:
44:7c:f9:e6:d0:05:1e:e2:3c:14:ff:c2:b1:0e:9e:
24:74:2a:a2:c7:b4:a5:c6:f2:8c:25:01:2a:20:8a:
44:67:e6:67:8b:66:3f:2a:fb:42:20:0c:cd:30:00:
1e:23:8b:d1:56:e3:4d:44:ed:0f:d5:37:6b:b1:78:
f5:ba:04:35:24:79:5c:d1:68:9b:de:04:28:6e:a8:
ea:02:a0:37:16:8f:4f:6d:22:5a:f5:53:1e:43:72:
7a:f7:c7:f6:88:30:c5:9a:30:b1:1a:62:50:3a:07:
d1:43:f5:c0:64:32:e7:40:e8:a3:ef:d8:ea:23:e9:
e1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BE:4F:19:F2:F5:64:CB:3E:3F:B5:29:E1:A8:B7:2E:F8:23:DB:CF
X509v3 Authority Key Identifier:
keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:21:1d:18:4b:44:ec:a4:77:58:38:d2:f6:67:61:b9:4e:9e:
2d:ae:2f:f1:84:14:16:24:85:e9:02:2f:e6:68:0b:b2:2d:38:
af:4b:f0:36:52:6a:53:8d:3b:06:63:1f:0e:77:1b:ed:5d:e3:
7f:59:67:5b:98:20:c4:c0:9a:f5:20:99:81:93:24:41:7c:31:
a6:85:82:63:59:c9:15:f7:2c:94:8d:80:bc:04:23:3e:03:6d:
40:d3:d5:0b:bd:33:96:84:bd:c5:f5:0f:41:ce:b4:aa:8f:c5:
3f:ef:b5:ae:77:19:60:4b:00:16:37:75:b5:27:58:11:06:f0:
d6:6b:2b:0c:ff:78:c8:ce:7b:d2:ba:c4:ad:05:70:63:8b:0c:
d1:ed:f1:09:87:e5:69:8d:4a:e2:3b:e7:36:5f:2a:00:6c:23:
f0:6f:50:56:d6:e3:b8:e0:53:fd:7b:9f:91:c9:76:e3:21:db:
5b:70:1c:99:d3:a5:c1:28:2e:e9:b4:ab:f4:6c:d4:1e:18:5b:
aa:8b:61:1b:7f:78:06:99:79:fb:ff:24:44:ba:90:57:fe:f6:
65:9b:4f:a0:23:87:ad:ce:60:b2:88:10:54:6d:85:0a:75:c3:
d3:13:5f:d6:ef:ca:72:28:eb:be:ef:5d:cf:e0:a0:0d:d3:f9:
6d:f2:55:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:39:28 2025 by rpki-client