Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
File: Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft (raw, json)
Hash identifier: 2mRqRyqmCpJ4aHPcrjEzkt9c5yMGxIvSeLy1dyqqFrg=
Subject key identifier: 65:2D:0D:6B:F2:CA:17:06:AC:23:FB:CD:A8:32:12:6C:7E:99:57:F3
Authority key identifier: 46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88
Certificate issuer: /CN=46eea05ddbd389decaf18db80e3e11bf9c285a88
Certificate serial: 01967944885C64D363389E9AD494349FE8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
Manifest number: 11B8
Signing time: Sun 27 Apr 2025 22:00:56 +0000
Manifest this update: Sun 27 Apr 2025 22:00:56 +0000
Manifest next update: Mon 28 Apr 2025 22:00:56 +0000
Files and hashes: 1: Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl (hash: xItNnYhzwIdsxbYQXfKOYiTKx6Yc4wqP5pRI0P9M41w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:88:5c:64:d3:63:38:9e:9a:d4:94:34:9f:e8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eea05ddbd389decaf18db80e3e11bf9c285a88
Validity
Not Before: Apr 27 22:00:56 2025 GMT
Not After : Apr 28 22:00:56 2025 GMT
Subject: CN=652d0d6bf2ca1706ac23fbcda832126c7e9957f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:e7:fc:51:11:9a:2b:c3:93:d5:6b:f1:01:
fe:fe:4a:98:bc:4e:64:25:d1:80:8e:ae:5c:b7:ba:
2b:e5:a0:23:ca:16:12:1d:db:e5:56:a6:64:a8:9d:
1b:47:79:db:83:12:2f:77:63:87:fa:40:a1:e1:a5:
79:11:ac:e0:4f:5d:b8:85:d6:84:7c:d5:3e:60:58:
8a:00:8e:c1:3c:68:70:05:dd:78:ef:17:5f:d2:30:
90:c3:97:4e:3b:fd:26:48:0c:58:5b:2f:2d:c5:f0:
9c:76:06:55:d4:08:67:a3:72:10:38:42:54:59:07:
d2:67:e0:bf:12:c8:4b:3e:41:1e:93:79:f3:2b:88:
31:cd:b9:17:2a:6d:85:f5:78:a1:fd:87:a4:84:08:
23:fe:f9:fc:1c:58:f6:01:e5:dd:a2:53:23:45:c1:
63:96:a3:3c:b3:26:3e:7a:a3:1c:df:4f:42:31:89:
12:1b:31:46:ba:28:1f:00:78:1c:17:8f:40:ed:a4:
0f:87:2c:20:cf:f1:77:ec:21:cc:07:31:27:93:50:
97:03:6e:08:33:43:e7:70:97:3e:06:ad:40:c2:a6:
fb:0f:2a:ed:fd:eb:cc:00:ae:25:40:57:e1:28:ed:
80:22:48:98:e7:5d:f6:3a:a7:74:dc:90:d8:d5:46:
f9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2D:0D:6B:F2:CA:17:06:AC:23:FB:CD:A8:32:12:6C:7E:99:57:F3
X509v3 Authority Key Identifier:
keyid:46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b9:c5:02:7f:b7:21:02:d0:71:54:bb:44:40:97:e2:35:c6:
9a:47:d9:c5:e2:18:e3:51:c3:40:2b:81:21:d0:23:fd:ff:27:
b3:aa:df:ee:6d:ef:d0:82:b2:13:05:c4:80:50:27:7f:31:89:
33:61:f0:fc:65:10:0a:f6:d8:b2:54:bb:49:e4:a5:4c:60:3d:
be:3b:35:42:1f:96:f8:f0:8d:2f:0f:11:40:ca:41:72:52:51:
ed:98:e4:00:ee:d1:fd:96:e6:f4:33:bd:73:2c:ee:08:95:e0:
69:7c:b6:74:2c:86:ac:5d:24:2b:f2:46:46:27:79:e5:75:f4:
78:17:ac:01:7c:37:32:c4:f9:9a:d6:89:0a:35:99:3f:ff:ff:
45:de:43:0d:dd:8c:93:67:98:d1:20:d2:cb:97:5b:3c:5f:89:
84:ef:e5:13:28:a4:0a:1c:0b:94:53:c0:c5:29:62:d7:1b:ac:
14:ab:b0:9e:e9:67:a1:0a:77:98:97:35:2f:d8:31:3f:d0:40:
9b:dd:b1:7b:d2:5f:10:23:59:2d:7a:25:87:e4:52:65:85:37:
98:dd:fe:5a:4c:9d:b9:65:e3:7a:d7:22:c9:aa:ab:76:6c:60:
69:20:37:3e:c2:9a:32:8e:16:37:53:e3:ee:f8:1e:d2:b0:b3:
5f:8b:c8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:49:00 2025 by rpki-client