Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier: fmRhTt1ZuWOj6LN7Tys92yjzquLf8QyeudoMqowZLUs=
Subject key identifier: 3E:E1:B4:4D:B3:8D:66:FD:F9:2C:4A:47:47:F2:E4:88:5C:E4:C4:B1
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer: /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial: 01967E3432E808EB0B154DC75B011FABE50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number: 0AED
Signing time: Mon 28 Apr 2025 21:01:12 +0000
Manifest this update: Mon 28 Apr 2025 21:01:12 +0000
Manifest next update: Tue 29 Apr 2025 21:01:12 +0000
Files and hashes: 1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: 5Enpjh79JvMjktyoobpN9NYF74ruHab6DLyBcmzLzvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:32:e8:08:eb:0b:15:4d:c7:5b:01:1f:ab:e5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
Validity
Not Before: Apr 28 21:01:12 2025 GMT
Not After : Apr 29 21:01:12 2025 GMT
Subject: CN=3ee1b44db38d66fdf92c4a4747f2e4885ce4c4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:c9:d8:a2:c4:b9:5e:cb:52:02:a8:99:f5:
f2:4f:fe:c9:65:97:0d:35:f4:57:ee:21:ce:ac:2f:
c5:48:8f:2c:86:81:17:9f:b4:ea:4c:43:24:d7:d5:
80:50:2f:14:6b:7c:23:1c:3c:00:11:95:ef:70:79:
b9:1b:ee:63:f3:8d:91:08:56:2d:58:7b:eb:ac:5a:
99:d5:e3:34:f1:30:dd:e8:f9:2b:62:26:0a:24:7d:
b7:ac:2c:95:99:cc:91:65:fc:b6:5a:f2:6e:75:5d:
bb:ca:43:13:38:08:4f:00:29:6c:df:eb:5f:52:30:
a3:a3:c2:94:c6:3f:7e:b4:42:4a:80:a1:61:21:99:
76:d8:e1:e3:bb:b0:19:47:13:94:cc:49:f5:dd:35:
90:22:26:5c:e0:24:56:b5:c9:45:b8:81:b9:e9:0f:
00:37:66:94:1f:fb:77:3a:b9:1a:39:60:8d:9f:3a:
6d:21:87:60:c8:21:8a:38:bb:93:7b:aa:8f:e3:e5:
b7:46:49:94:c4:51:a2:50:74:45:13:00:76:19:0d:
ab:15:6e:84:ed:b3:27:bf:71:a9:e9:fc:a3:0e:04:
e1:62:56:28:c5:c3:c6:97:ca:e7:2d:04:36:ba:56:
0f:da:a6:6d:a9:87:76:df:6b:be:33:e7:40:fc:c4:
28:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E1:B4:4D:B3:8D:66:FD:F9:2C:4A:47:47:F2:E4:88:5C:E4:C4:B1
X509v3 Authority Key Identifier:
keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5a:3e:2a:37:2b:e1:34:ae:27:7a:7b:89:99:88:d2:6e:d6:
1f:0e:27:59:2a:5a:54:f0:66:a8:99:56:22:53:55:42:6c:e3:
c4:34:06:99:8a:09:e1:e9:d7:74:ca:0f:f1:6d:6a:09:7d:89:
a9:b6:7d:f8:9d:b8:31:55:11:22:e4:32:dd:ac:33:28:56:aa:
86:fd:85:b6:ae:6d:0e:35:0b:cc:bd:52:dd:b6:ca:1d:09:d1:
59:68:6b:26:eb:33:31:b1:be:93:e5:33:36:5a:34:a8:1d:97:
78:ee:16:c7:b1:74:47:ee:5e:0f:dc:8c:07:16:87:3e:15:31:
1c:36:f3:86:c2:d4:15:88:8c:5e:22:5d:f2:6e:68:d5:44:d6:
5f:3b:68:1c:f0:2d:f1:7e:19:db:51:14:ca:fe:91:70:fc:ea:
a8:56:ec:78:6b:6d:4d:2c:1c:4b:67:08:5e:3b:6c:1f:3d:04:
6e:15:9b:60:8a:4d:19:7c:64:f0:27:2f:07:9f:ed:ea:f0:6b:
63:e9:b7:21:a1:4d:d8:4b:f2:92:53:1c:33:14:17:13:4c:d6:
82:08:ae:3b:13:3d:67:1a:92:94:43:03:48:85:4e:0e:52:e4:
99:75:41:53:41:59:7c:c1:68:94:7a:bd:75:21:70:50:83:50:
79:82:00:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:01:52 2025 by rpki-client