Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
File: X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft (raw, json)
Hash identifier: Hqb9Mw9ONC4FBbrRMd0gteHLCWbdHbVJl9VbtDD1ouY=
Subject key identifier: 36:B5:62:B5:E0:85:F6:4E:AC:8D:69:D6:02:FA:41:28:59:16:7F:E4
Authority key identifier: 5F:B7:46:6D:8E:92:B2:1C:7B:1A:A1:35:F3:0E:FE:6E:73:E1:F8:6C
Certificate issuer: /CN=5fb7466d8e92b21c7b1aa135f30efe6e73e1f86c
Certificate serial: 0196771EF949C917E4581EC4F8D2B86B07EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7dGbY6Sshx7GqE18w7-bnPh-Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
Manifest number: 0B2A
Signing time: Sun 27 Apr 2025 12:00:40 +0000
Manifest this update: Sun 27 Apr 2025 12:00:40 +0000
Manifest next update: Mon 28 Apr 2025 12:00:40 +0000
Files and hashes: 1: X7dGbY6Sshx7GqE18w7-bnPh-Gw.crl (hash: 1PNQhs9u1avKoAAfGSoNJ9ph0X/LUFLimrZwZqIpcos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7dGbY6Sshx7GqE18w7-bnPh-Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:f9:49:c9:17:e4:58:1e:c4:f8:d2:b8:6b:07:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb7466d8e92b21c7b1aa135f30efe6e73e1f86c
Validity
Not Before: Apr 27 12:00:40 2025 GMT
Not After : Apr 28 12:00:40 2025 GMT
Subject: CN=36b562b5e085f64eac8d69d602fa412859167fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:a0:93:ff:8c:f2:f4:40:31:57:46:a4:4d:
0e:48:34:52:9d:1c:96:e7:a7:17:af:7b:7f:a5:38:
38:cc:28:7d:c5:8a:f8:6b:ce:44:6c:90:14:9e:08:
d3:5b:16:2c:03:b5:dd:27:ac:88:5a:4e:3d:e4:a0:
98:e3:3f:0b:75:72:c0:d5:22:ad:d8:e4:a2:c6:5d:
ba:95:b1:a6:3c:1f:fb:99:87:c6:24:7f:5c:1d:0b:
18:d5:5a:53:d1:cc:22:87:94:a8:db:3f:f0:a7:c3:
fb:3c:a4:94:56:3e:5b:25:46:2e:fe:48:0e:6f:25:
15:e1:db:5a:60:58:84:36:59:39:9e:c9:28:fd:13:
dd:8c:9b:7a:e5:09:99:72:64:ca:2b:a6:75:b4:09:
ff:6d:b7:4b:57:92:e3:3f:ec:5e:2f:69:60:e3:c6:
2d:42:0f:63:0d:ff:25:6c:28:80:2e:56:87:fb:d6:
9f:1c:15:e8:42:34:1e:ed:9d:44:db:1e:d7:78:74:
90:da:c2:f5:94:e3:6e:8a:76:65:ec:b7:04:c8:98:
fe:ae:b5:71:cc:b5:d7:7f:90:87:27:b1:59:fe:78:
9b:9a:56:b7:28:cc:6b:2b:e3:5a:3e:78:3d:d0:22:
02:6b:25:15:a4:83:2f:01:79:2b:46:bc:70:77:86:
66:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B5:62:B5:E0:85:F6:4E:AC:8D:69:D6:02:FA:41:28:59:16:7F:E4
X509v3 Authority Key Identifier:
keyid:5F:B7:46:6D:8E:92:B2:1C:7B:1A:A1:35:F3:0E:FE:6E:73:E1:F8:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7dGbY6Sshx7GqE18w7-bnPh-Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:69:a4:ad:06:26:21:63:43:f5:50:3c:cc:0c:0e:58:b5:c7:
cc:9f:4e:65:dd:74:7b:cb:e4:fa:52:33:d8:d6:fc:14:20:97:
87:cb:1a:77:15:e9:d8:50:35:32:61:86:30:f5:c1:53:69:10:
67:58:0f:59:21:eb:5f:f7:49:5a:7c:e0:74:ff:a9:b9:7e:bd:
15:1b:29:84:5a:27:1b:4e:33:28:a4:9b:38:c4:42:98:10:0b:
db:3e:0c:6b:b6:cc:4d:9f:81:b0:e7:62:13:df:ef:38:87:c3:
82:0b:74:b1:fe:b1:1a:66:99:50:24:09:9e:a7:4d:2e:cc:01:
90:c6:42:52:36:d9:ca:05:4f:05:50:d3:9d:12:88:5f:9d:d7:
fa:66:bf:e1:15:bf:ed:a9:4e:c2:db:98:90:19:8b:d3:62:28:
8d:2b:88:e5:fe:f6:d2:06:1b:da:5f:7a:b9:96:5e:dc:98:3a:
a8:1f:db:fd:1d:63:93:b2:cb:45:80:86:4c:40:cb:3e:c8:ac:
2a:29:8c:fa:a3:da:34:35:a3:13:39:62:5b:81:be:45:04:e8:
74:98:bb:17:58:76:28:a4:9b:b6:0a:20:de:88:2b:66:17:c3:
6f:91:60:3a:10:be:af:d5:34:a1:09:0e:19:76:21:c4:1f:53:
48:16:40:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:47:35 2025 by rpki-client