Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
File: spuNaKggdWqqP4l5UdWv1n_bPbs.mft (raw, json)
Hash identifier: gqlYqyx5z/o9h1YhGyVmg371YKl6LJJv5YqSVvoOD2s=
Subject key identifier: 49:68:26:9C:A5:40:74:55:18:C4:3B:99:2B:44:C1:EE:A3:DF:6E:2E
Authority key identifier: B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
Certificate issuer: /CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Certificate serial: 0196AC1FEF55FCBE43DC4D968FDB5A0FF8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
Manifest number: 1529
Signing time: Wed 07 May 2025 19:01:36 +0000
Manifest this update: Wed 07 May 2025 19:01:36 +0000
Manifest next update: Thu 08 May 2025 19:01:36 +0000
Files and hashes: 1: spuNaKggdWqqP4l5UdWv1n_bPbs.crl (hash: uQbK8kIh1tDSYvQWkd1Dh5AsgcXiuee/Q0FIlcKCBpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:ef:55:fc:be:43:dc:4d:96:8f:db:5a:0f:f8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Validity
Not Before: May 7 19:01:36 2025 GMT
Not After : May 8 19:01:36 2025 GMT
Subject: CN=4968269ca540745518c43b992b44c1eea3df6e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ce:d0:d2:2a:43:f4:82:50:ad:18:6d:8a:cf:
1a:09:a3:47:d3:20:29:5d:f3:10:ff:17:f4:4f:6d:
99:92:29:a7:a9:b5:bd:7f:c6:8f:02:d7:39:6e:42:
e6:90:c0:3b:d3:66:ef:85:c6:26:a5:dc:bd:1d:b2:
b0:c5:91:25:df:ab:45:34:9d:8b:bb:c8:e4:01:01:
dc:55:cb:66:2d:88:0b:34:04:34:de:fe:ef:3f:36:
af:75:d7:49:61:51:a8:8a:18:de:63:b9:df:ae:e7:
94:24:19:74:a4:c0:49:74:5b:5f:5c:53:67:eb:f9:
31:18:13:fe:0e:31:a0:dc:77:20:e1:91:aa:b4:b4:
2d:fa:ad:23:f9:b2:55:98:aa:20:3b:0e:9e:3e:28:
53:ee:1e:52:8b:4e:bf:12:9c:56:ad:23:06:37:a7:
ea:0e:b6:7e:57:e9:7d:59:cb:8e:0f:68:5a:9a:99:
c9:be:79:93:39:ae:22:d0:9b:29:7e:a2:16:55:0a:
fc:fd:73:be:3f:b7:99:46:58:00:55:5e:3b:a2:49:
48:99:3c:e1:d4:cd:20:a9:02:f9:f4:42:c0:59:99:
a3:27:3d:29:29:1b:49:86:08:d9:3b:26:f6:ac:be:
9f:76:11:a7:d3:96:7f:74:4c:24:1b:c6:4a:bf:e8:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:68:26:9C:A5:40:74:55:18:C4:3B:99:2B:44:C1:EE:A3:DF:6E:2E
X509v3 Authority Key Identifier:
keyid:B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:99:31:da:f3:2b:cb:0a:af:00:36:95:c5:35:24:61:84:3c:
97:58:27:2d:bb:f4:bd:77:c3:49:85:9c:e1:f7:04:b1:b7:a8:
44:58:67:34:b8:7a:8a:a3:38:35:98:f8:d2:c2:15:e5:94:04:
28:76:25:d1:47:2b:67:5b:42:61:6a:bd:76:d5:00:ff:51:e6:
b9:f4:1a:ef:7d:be:ce:29:ed:df:5c:03:e0:9b:2b:d3:a9:36:
21:3a:f1:54:0c:52:02:da:64:57:63:81:1b:1d:c0:4f:0a:e3:
e2:50:b4:7f:54:dd:49:5f:8c:7b:6a:28:03:3c:42:3b:e8:27:
b3:db:10:17:9b:4e:4b:fd:8f:7a:e5:50:be:a8:8e:aa:fd:8d:
3e:f7:68:5c:dd:a6:4e:05:be:f1:dd:9d:f4:39:68:6b:b4:83:
f5:1f:2c:ec:80:8a:a4:ea:12:e3:fc:85:57:1d:49:7b:43:22:
a3:a0:8d:70:9b:0b:d6:7d:08:63:c4:c5:8f:22:87:7b:f6:4f:
87:7e:99:9c:c1:ef:5d:2a:81:50:f3:f3:8e:d3:18:fe:70:11:
0e:35:92:4d:00:61:4c:d0:31:26:19:13:31:69:59:bb:f8:6a:
aa:f1:90:90:84:9f:9d:83:8f:6a:85:7a:4e:5b:4b:38:18:56:
9c:c5:fa:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:35:35 2025 by rpki-client