Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: yuRBEl9qca0pfENdviys5FzEiMi0TBkK7hCaBzBZwPA=
Subject key identifier: 18:2B:FD:B1:CA:E9:15:03:0A:49:F3:17:D4:BC:6F:98:77:14:54:4F
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 0196B1EB182F6EA3424082ABE2E1814EBE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 09FC
Signing time: Thu 08 May 2025 22:01:36 +0000
Manifest this update: Thu 08 May 2025 22:01:36 +0000
Manifest next update: Fri 09 May 2025 22:01:36 +0000
Files and hashes: 1: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: r2XtcQQfOWbCOj9jteAzphI2IFpmPFunxgVioULPPK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:eb:18:2f:6e:a3:42:40:82:ab:e2:e1:81:4e:be:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: May 8 22:01:36 2025 GMT
Not After : May 9 22:01:36 2025 GMT
Subject: CN=182bfdb1cae915030a49f317d4bc6f987714544f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:a3:b8:81:ef:b0:b8:a7:86:9d:5a:8a:9e:
86:86:9c:99:0c:13:58:2c:1c:23:27:fb:63:1f:b1:
95:25:2f:94:8e:d8:36:c0:ee:b8:3c:06:aa:47:e8:
c8:53:98:50:19:46:7b:6e:69:fd:18:34:e7:79:5a:
01:c7:86:5a:35:21:9e:25:28:68:e6:ac:20:9d:c7:
bf:aa:b9:15:1e:37:06:c1:bf:6b:cb:70:75:5c:66:
8a:36:1a:a7:35:fe:d5:b7:f4:1f:10:48:c1:59:09:
74:8c:32:7c:6a:12:24:da:7e:1e:7c:14:fc:68:9f:
56:f8:9a:22:63:05:23:ae:c7:74:5f:63:7d:99:9e:
3d:51:13:41:07:44:7b:74:49:b2:29:40:4e:61:9f:
33:49:ae:3a:fc:ac:9b:b0:da:7d:fa:8a:40:fe:7e:
5b:f7:76:c0:7d:bf:a0:8f:9a:a6:c5:58:86:c9:c8:
8e:97:d6:b8:c7:86:f1:c0:8a:f3:45:f8:55:c0:3f:
cb:26:fc:87:1c:d0:f3:ed:d2:5d:48:0e:ea:f3:da:
8e:ee:0f:0a:ed:99:fe:5d:40:8d:39:51:91:74:53:
3c:8d:73:3a:72:d8:cc:db:38:23:55:24:e4:a8:f6:
c1:ce:83:21:c6:3f:9c:cd:be:fe:c9:e8:ab:1f:5d:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2B:FD:B1:CA:E9:15:03:0A:49:F3:17:D4:BC:6F:98:77:14:54:4F
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dd:c1:13:74:35:53:61:e7:52:04:e3:bf:7a:3e:3e:74:65:
73:73:20:9e:e9:ff:69:1d:18:64:12:e1:0f:f2:97:80:5b:f1:
73:57:1e:dc:b0:d1:97:1b:90:bc:66:28:59:92:aa:3a:00:58:
21:36:e2:5f:1b:75:a4:c5:e0:45:ac:8c:b1:1b:ed:45:e6:8f:
93:56:57:77:37:93:e0:c1:70:d9:28:9d:20:d9:28:fb:01:e1:
91:5f:05:79:ba:cb:ff:fc:bb:ce:6e:c7:4b:8c:cf:6d:4e:e6:
f6:7a:05:14:cd:d4:5d:e4:1a:70:9c:72:8f:5d:d2:47:05:e9:
70:2e:74:c5:33:3e:14:04:86:de:4e:f3:e9:70:c4:5d:08:ab:
20:43:e5:eb:83:7b:0f:d5:6e:35:33:a7:e3:15:a9:88:b9:48:
8c:75:42:27:a3:25:ec:e8:7a:46:c6:cf:6a:63:d1:e3:70:cf:
99:58:ef:ef:c4:07:09:a2:de:77:ff:1f:09:fe:dd:e1:f5:00:
da:52:26:c2:5e:56:62:d8:59:d6:52:39:38:c2:bd:2c:68:71:
f1:5a:32:b4:47:58:1e:17:4c:68:2f:ba:fa:5d:34:77:2d:d1:
5c:23:53:b6:b0:4e:50:e6:83:e4:e7:7e:76:7c:fb:44:87:93:
cd:b9:9b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:02:13 2025 by rpki-client