Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
File: idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft (raw, json)
Hash identifier: MC9HIk8m70AYYTEMOKgvFpx2n3OCmR8UY5w5RMEAWNs=
Subject key identifier: 68:81:DF:81:AE:E9:10:6E:D5:D2:10:A9:C5:92:71:BF:C9:1D:F9:2A
Authority key identifier: 89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
Certificate issuer: /CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Certificate serial: 01968F272161954E6EE8B964954AC8DA60CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
Manifest number: 0E3B
Signing time: Fri 02 May 2025 04:00:28 +0000
Manifest this update: Fri 02 May 2025 04:00:28 +0000
Manifest next update: Sat 03 May 2025 04:00:28 +0000
Files and hashes: 1: idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl (hash: Dp9qVuZ7GJr7+ruqFMP1MiaSSteZcWpgkrT0hMhU8Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:27:21:61:95:4e:6e:e8:b9:64:95:4a:c8:da:60:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Validity
Not Before: May 2 04:00:28 2025 GMT
Not After : May 3 04:00:28 2025 GMT
Subject: CN=6881df81aee9106ed5d210a9c59271bfc91df92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e0:04:6f:64:1d:b3:31:30:56:54:67:40:1d:
9e:ec:79:40:e3:26:35:6f:69:81:8e:9b:72:c6:2d:
8b:9b:51:33:56:13:4c:5b:82:d2:90:18:10:63:74:
47:54:9e:ad:e1:6c:48:9f:07:03:12:a7:00:f3:5e:
ed:44:9b:bf:82:67:ed:26:3d:22:38:e2:11:63:bb:
44:8d:8d:e3:29:e1:f1:a5:e0:3c:c7:f9:3d:c9:41:
82:6a:58:d0:e5:4a:f9:43:a8:6b:ab:a5:70:83:90:
7e:f4:9e:8e:1f:f4:9d:c8:f7:0f:ed:19:16:9d:67:
67:20:23:57:eb:03:10:61:4e:50:b6:45:04:16:31:
81:27:72:18:30:ff:79:93:f7:12:20:01:19:5c:dc:
85:a2:29:59:20:0d:e9:bc:80:80:c9:c2:3f:0c:44:
4d:86:43:93:e8:04:88:37:f5:2e:4e:97:53:19:b9:
6c:fb:60:78:10:10:b2:dd:06:3d:25:49:85:82:db:
10:ff:29:45:18:ae:31:dd:80:ca:07:94:24:a0:f1:
3f:90:a6:31:97:00:53:f8:73:2b:b5:c6:11:16:01:
07:8d:42:b2:a1:55:12:f1:d6:4a:9a:37:33:cd:52:
de:38:ab:d0:63:40:37:74:66:ed:c2:75:ef:26:69:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:81:DF:81:AE:E9:10:6E:D5:D2:10:A9:C5:92:71:BF:C9:1D:F9:2A
X509v3 Authority Key Identifier:
keyid:89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:67:29:e0:28:63:28:a4:d8:c0:a1:12:63:97:5c:e5:f8:b7:
f9:ff:96:d1:e9:cd:0b:2f:50:cc:ae:a4:39:f4:b5:f0:b3:bf:
cd:f0:fc:e5:6f:f0:32:12:2d:34:25:65:5b:a6:c4:6f:a4:01:
35:a1:36:2b:ed:ac:5f:e8:23:78:24:f1:57:62:6e:0f:70:c1:
a3:6f:4c:ae:27:6c:c5:06:1e:29:0f:e9:ae:b4:70:9f:85:7a:
63:7c:fe:59:a4:fb:fd:cf:70:33:07:fc:08:13:e6:3a:4e:07:
c8:a4:20:a5:6f:23:5e:bc:a1:59:9b:35:3b:34:b4:42:22:8e:
35:c0:f1:e7:29:15:67:89:4b:e8:2c:ec:09:97:b0:83:f6:b6:
5a:3b:02:6b:91:a6:8b:92:ec:00:a0:fe:63:5d:b7:96:84:7f:
85:70:a4:a7:90:13:e8:00:85:98:ec:a4:75:29:a8:50:de:92:
27:e4:f8:2d:19:a9:b6:82:21:ff:90:f4:7e:09:93:47:6c:48:
80:2f:9b:13:30:29:a8:4a:b5:c8:99:cb:15:13:fb:c6:4f:72:
0c:ee:c7:7d:5d:f3:41:d1:7b:89:d2:c2:5d:a6:17:ab:d5:fc:
30:b6:48:0c:7f:8a:da:49:83:5a:c0:8d:af:9a:d4:8c:1d:b0:
a5:a6:4a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:17:53 2025 by rpki-client