Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
File: R7lNsbPetIBa0mFVS65rpfp0CMs.mft (raw, json)
Hash identifier: m+bn/Dk/U50/F/7E7ln6BhQTN0i2D+iI6Mz7c3Q8mig=
Subject key identifier: 14:FB:E3:A8:8D:D7:17:B8:35:38:60:0E:C6:C6:33:7C:F5:AB:78:BA
Authority key identifier: 47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
Certificate issuer: /CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Certificate serial: 0196C15DBDC55ADBC99C49AB0E7D51670865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 22:01:08 +0000
Manifest this update: Sun 11 May 2025 22:01:08 +0000
Manifest next update: Mon 12 May 2025 22:01:08 +0000
Files and hashes: 1: R7lNsbPetIBa0mFVS65rpfp0CMs.crl (hash: yYJ51qdcX6eaV3ds4JE7jgjSmDWPdWqyKmCYSQ028Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:bd:c5:5a:db:c9:9c:49:ab:0e:7d:51:67:08:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Validity
Not Before: May 11 22:01:08 2025 GMT
Not After : May 12 22:01:08 2025 GMT
Subject: CN=14fbe3a88dd717b83538600ec6c6337cf5ab78ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:b8:19:34:a5:01:ac:7b:ae:63:ca:55:95:
eb:b5:c3:cc:ac:34:49:df:79:9c:ff:32:d3:39:7a:
62:ed:d6:c2:59:67:b9:3f:b5:97:d3:12:82:14:36:
9e:38:cb:1c:7d:5b:f3:13:a0:d9:0f:dd:eb:e3:16:
fd:c4:09:40:0b:47:4b:1f:51:6a:94:c8:44:a1:7e:
97:54:fd:d1:08:df:e6:3f:7b:42:5a:a0:9f:31:08:
f6:87:91:9f:19:65:03:a4:62:27:95:da:b4:71:c4:
ed:bf:82:02:fd:31:d6:26:f7:e7:6a:7d:dc:ba:89:
b0:ff:55:31:30:fe:cc:e7:ee:e5:48:b4:05:cf:05:
63:bc:d7:bd:e3:83:1c:3a:74:30:0c:c9:06:72:f0:
06:a2:e4:83:af:23:76:2f:9a:03:93:8b:ef:c1:b2:
2b:1e:e5:26:0f:4b:22:6d:b0:09:a8:95:58:a3:74:
55:cd:b9:51:b1:56:37:b5:7f:c2:fc:1a:ad:eb:27:
93:00:1a:ad:78:ff:2d:2c:88:41:ae:ae:b8:5c:1d:
fd:3d:04:5c:85:0b:4a:a7:4a:a8:56:60:dd:8b:48:
93:c2:16:be:4b:71:f6:e6:ef:78:91:23:8d:c8:f1:
c3:ce:e7:53:c5:92:d8:89:b6:0f:e3:45:78:d8:6b:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FB:E3:A8:8D:D7:17:B8:35:38:60:0E:C6:C6:33:7C:F5:AB:78:BA
X509v3 Authority Key Identifier:
keyid:47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9c:d7:a3:dc:74:42:34:97:6b:02:25:66:44:b0:b3:44:d3:
5f:96:09:c4:3b:5a:d8:df:44:61:75:ac:59:1b:3c:ca:b2:47:
73:23:ea:16:d9:91:6d:94:73:7d:e0:bd:5c:fd:d0:84:08:8c:
06:ab:5f:a9:ae:85:22:11:db:a0:ec:53:28:31:32:68:ab:83:
ff:7c:ca:b2:5c:7e:7f:6c:4d:db:90:26:ba:af:c7:9c:9c:d8:
8a:86:c1:34:9d:bf:f5:61:d8:c0:72:02:5d:9a:21:ff:b5:61:
a2:ad:75:d4:87:04:41:c9:b0:13:bd:12:c2:27:16:f5:8a:4e:
c5:10:08:61:05:18:eb:cc:23:53:5c:3c:25:4b:ad:22:a6:21:
13:f2:e7:f0:ea:e0:d7:e6:ef:77:ef:8d:4a:9a:09:6a:28:f2:
03:df:6a:e0:f8:13:1c:b9:a0:00:3f:85:c2:c6:c8:db:3c:2c:
ee:7e:56:a6:37:58:d6:b3:d5:96:38:77:a4:9a:a6:83:76:06:
ac:b5:fa:3f:ae:60:3e:7e:97:e8:34:ad:4a:7f:66:13:46:bb:
4c:de:f2:01:d9:55:36:e2:6f:bb:1c:3f:39:d2:d8:cf:0f:66:
11:8d:5d:51:d0:f3:ae:57:fd:02:70:04:1b:6c:7d:d1:55:a4:
21:93:08:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:17:25 2025 by rpki-client