Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier: G0857Hj289LL0udZX2e/AuUGtnyrNfzeyK4ABbVo4UE=
Subject key identifier: 73:B1:A1:C0:89:3A:AB:73:33:3A:8A:6A:5A:EA:BC:70:A4:97:B6:32
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer: /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial: 0196C9171A170ECB7058C3493D5385D85579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number: 1537
Signing time: Tue 13 May 2025 10:00:56 +0000
Manifest this update: Tue 13 May 2025 10:00:56 +0000
Manifest next update: Wed 14 May 2025 10:00:56 +0000
Files and hashes: 1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: qEXMwcqvWbPtLXo1tuz/rITiSikOFxMjKbJHFUCJoKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:1a:17:0e:cb:70:58:c3:49:3d:53:85:d8:55:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Validity
Not Before: May 13 10:00:56 2025 GMT
Not After : May 14 10:00:56 2025 GMT
Subject: CN=73b1a1c0893aab73333a8a6a5aeabc70a497b632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2a:28:4b:92:46:e9:a6:94:9e:fa:84:e3:a4:
82:37:e5:ce:ae:97:a4:9b:9b:20:74:a2:40:90:64:
bc:c4:50:38:2f:d3:5a:35:19:59:75:87:52:e5:48:
c5:00:fd:ef:e6:37:92:5e:66:c5:65:18:8a:3d:97:
fa:e4:d6:38:e3:31:40:39:a2:a5:fa:4c:a1:90:7a:
7e:d2:80:b6:21:81:5e:da:33:c1:42:f4:92:33:3f:
b8:6c:7e:34:9a:47:5a:26:70:da:a7:7e:32:e7:d7:
6b:2a:8f:97:db:01:4d:35:aa:fc:60:d1:d6:de:80:
c9:51:7e:42:22:23:8d:4b:4c:6f:cf:de:9a:93:02:
b1:f2:c0:e7:d4:b8:62:c2:03:bb:0f:3c:2d:28:d4:
25:04:d5:4a:ff:b0:d2:48:93:1e:dc:c9:37:f5:5a:
68:da:5e:24:64:a3:21:56:89:bb:88:94:7e:9b:c5:
bc:3a:47:2a:01:ae:87:18:22:38:42:cf:04:5e:f2:
a2:5b:7d:26:15:35:6d:be:41:46:c7:e0:99:df:74:
ac:00:ba:af:1b:fa:0b:94:81:02:b6:4f:32:b6:ac:
94:ad:63:64:5a:99:a5:59:86:d5:f5:42:99:5b:ff:
55:ec:47:1d:a2:07:fd:0b:ca:9c:5a:ff:06:60:8a:
4d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B1:A1:C0:89:3A:AB:73:33:3A:8A:6A:5A:EA:BC:70:A4:97:B6:32
X509v3 Authority Key Identifier:
keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:15:6e:dc:5b:bd:de:f8:33:b1:09:c7:e0:f9:27:4e:f1:56:
10:71:ca:0e:01:5c:88:47:75:60:31:cc:28:11:f2:21:8b:5e:
9a:79:19:6d:ea:d4:45:43:21:b2:b1:26:60:85:65:c2:a3:08:
67:96:28:e4:f4:95:e2:75:c8:e2:5a:4c:7c:80:09:9f:c4:c3:
6f:fd:e6:eb:77:d2:59:cf:58:51:21:05:6a:55:40:30:f6:86:
0a:e2:4a:c3:ec:9c:96:9b:55:a4:ce:2c:0f:7d:1a:08:89:c2:
31:5e:e7:d8:08:53:33:93:5c:b2:6e:29:ce:66:bf:ca:c7:f3:
e5:26:fb:01:cf:58:ea:95:56:ef:85:f0:80:40:76:9b:47:8b:
f7:76:bf:8c:aa:13:2f:a3:06:6c:8f:0d:67:c2:1f:3e:ad:c5:
d4:37:b2:f4:cf:c9:9b:b1:a9:4c:38:a2:97:33:50:e0:f8:75:
d0:8d:21:6a:1b:f8:05:7b:15:53:d0:52:be:60:8e:99:3b:1f:
85:8a:22:ef:d3:bc:3d:72:31:2d:96:8f:c9:bc:41:c0:32:66:
eb:3e:4c:71:1e:4b:0a:ab:64:3a:ab:25:3a:d9:9f:4d:e0:ed:
d2:e0:8b:6d:6c:f7:01:2f:97:31:e4:2f:c7:89:28:a8:ae:51:
fa:00:9e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:29:10 2025 by rpki-client