Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
File: c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json)
Hash identifier: 23uPGFVswFx/2RX7zDV8mFr+zNoTqIutf3iwlIvGYGM=
Subject key identifier: C5:F9:AA:F8:D3:F3:3C:39:6D:90:AD:FE:E3:8F:19:D1:E2:8D:14:2A
Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
Certificate issuer: /CN=737787cf2a870d91b11369f9d74591957602814e
Certificate serial: 0196AA30F732A2EDABE1BD86263665550EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
Manifest number: 07F0
Signing time: Wed 07 May 2025 10:00:57 +0000
Manifest this update: Wed 07 May 2025 10:00:57 +0000
Manifest next update: Thu 08 May 2025 10:00:57 +0000
Files and hashes: 1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: MXfnYClkHiqvG0gSgQF+Cbfhn7wl9BEUOpzY6CKo1Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:f7:32:a2:ed:ab:e1:bd:86:26:36:65:55:0e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737787cf2a870d91b11369f9d74591957602814e
Validity
Not Before: May 7 10:00:57 2025 GMT
Not After : May 8 10:00:57 2025 GMT
Subject: CN=c5f9aaf8d3f33c396d90adfee38f19d1e28d142a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:72:3d:79:ab:39:8b:ca:64:c9:b9:60:db:
1a:92:03:4e:5f:e6:30:2f:c3:4f:e4:e6:17:32:5c:
e1:10:e8:82:50:94:91:10:7b:7a:ac:f8:38:55:59:
be:6e:75:eb:d3:b2:c1:f2:89:cb:96:69:96:b6:7a:
8a:a6:da:6a:2f:96:29:a1:13:f1:5c:d9:94:82:ea:
dc:92:75:39:ff:d9:4a:f9:eb:f4:92:cd:cc:fa:7b:
59:62:5b:31:fa:e7:c5:a8:f6:a8:22:7c:17:3d:09:
8b:de:8a:c5:80:10:61:a5:8d:67:23:b1:64:e3:c0:
3a:c0:5e:26:50:c8:3f:9b:c6:ad:d6:34:95:fb:c4:
c0:b9:4a:ce:63:5a:5b:1f:ea:f6:67:70:d4:31:a1:
ce:67:19:28:4b:80:e5:66:b5:58:0a:13:0a:da:12:
fa:18:f9:bb:9e:b8:36:94:cd:7d:17:8e:7e:ae:79:
f1:2a:e6:8e:e8:0d:fd:e9:c7:55:08:80:3b:1f:2b:
c0:2a:19:16:b9:d3:fc:bd:c3:40:b8:e2:6c:8b:92:
98:87:69:b2:85:be:4c:9f:18:bb:94:74:e8:aa:df:
15:20:59:01:fd:b5:42:ad:97:0d:f4:5a:e7:75:b5:
0f:26:10:4a:4f:92:1c:d0:cf:27:a3:f7:fb:94:c4:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F9:AA:F8:D3:F3:3C:39:6D:90:AD:FE:E3:8F:19:D1:E2:8D:14:2A
X509v3 Authority Key Identifier:
keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:47:c0:3e:a8:d2:e5:e1:ee:21:c8:86:44:3d:cb:6f:20:b9:
3e:0c:bc:5a:eb:d9:24:14:4f:91:f6:e4:8a:15:53:b1:52:00:
e6:a1:ac:59:58:dd:fc:6c:07:c2:2d:10:ee:cc:14:f8:e9:1d:
c9:3d:dd:6d:97:29:60:88:76:15:d5:34:d3:d8:eb:38:9f:40:
74:fe:ba:9d:c9:de:d2:eb:97:5e:08:ac:98:73:10:19:45:cc:
ff:9e:b4:90:d8:13:db:c7:c3:da:20:e5:23:28:53:83:c5:53:
de:64:60:ed:3d:fc:34:41:9d:82:51:79:fd:bf:84:f4:0a:39:
bd:22:e5:f3:54:34:f7:c6:fc:ad:ea:1e:6a:cd:10:44:a2:db:
be:0c:aa:d0:97:b5:e1:9c:9d:65:e0:60:e1:13:d8:7f:35:0d:
69:1c:8e:10:61:96:bd:f0:f1:1d:4f:0e:dd:e3:5e:d8:4f:71:
13:a7:5c:08:4a:83:1e:9a:dd:d2:3c:b1:7d:07:05:71:3e:df:
6d:9a:d2:da:c2:4f:db:80:12:e1:7e:a5:f1:9f:12:c2:7f:9e:
4b:7d:1b:d9:08:3a:89:49:d1:35:d3:f4:b7:53:10:27:f1:15:
3c:81:8b:f6:a8:bb:c7:14:c0:a0:0f:93:81:4f:d2:e7:de:f8:
28:28:dd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:04:15 2025 by rpki-client