Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft
File: urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft (raw, json)
Hash identifier: +t8sM+Uox+PqyTrhjvM9t/onOhZVWxl4jPnHTBqNjLI=
Subject key identifier: D4:A1:35:8C:3A:0B:AF:95:B9:71:14:32:E0:BE:29:F0:BA:C8:0F:61
Authority key identifier: BA:B9:BB:C2:4E:9A:C3:D9:EC:7E:10:BF:95:74:7D:AB:5C:45:DD:2B
Certificate issuer: /CN=bab9bbc24e9ac3d9ec7e10bf95747dab5c45dd2b
Certificate serial: 0196741D811D36A06B4DF8A9633161C94454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urm7wk6aw9nsfhC_lXR9q1xF3Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft
Manifest number: 0A2B
Signing time: Sat 26 Apr 2025 22:00:12 +0000
Manifest this update: Sat 26 Apr 2025 22:00:12 +0000
Manifest next update: Sun 27 Apr 2025 22:00:12 +0000
Files and hashes: 1: urm7wk6aw9nsfhC_lXR9q1xF3Ss.crl (hash: pVlBtVfAF9tU0IKfKkUnIZooIsvVg8bKuzHAPgDKaOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/urm7wk6aw9nsfhC_lXR9q1xF3Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:81:1d:36:a0:6b:4d:f8:a9:63:31:61:c9:44:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab9bbc24e9ac3d9ec7e10bf95747dab5c45dd2b
Validity
Not Before: Apr 26 22:00:12 2025 GMT
Not After : Apr 27 22:00:12 2025 GMT
Subject: CN=d4a1358c3a0baf95b9711432e0be29f0bac80f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5f:12:a3:14:0b:ec:0e:d0:14:70:6d:99:f4:
df:ca:32:a6:98:d4:20:b4:04:28:eb:f3:a2:ed:5d:
a2:d5:f1:f4:cb:25:cd:7d:ee:f9:3c:55:89:ac:8d:
11:54:1e:66:7a:af:db:e6:63:5b:ae:5f:f9:b6:e8:
50:c8:b6:3a:ab:6f:ee:ea:88:f9:ba:64:c4:be:36:
8c:41:96:a8:bf:ce:ba:17:23:00:f2:d7:1f:0f:c7:
4c:44:17:b8:43:95:0c:97:1b:b2:3f:e4:dd:37:05:
85:db:40:29:0e:56:aa:f0:de:0e:cb:10:9f:15:8b:
79:29:4a:23:46:c9:b4:8c:5d:5d:1e:20:07:c9:0a:
9b:ce:f8:ab:a6:98:a0:f3:e3:e9:ee:82:1a:59:da:
5c:2f:0a:66:26:32:7e:4c:27:a0:d2:b7:68:53:58:
75:90:4e:a9:2a:6c:ba:ff:3a:40:2f:80:ec:1c:da:
b2:b9:e7:c8:5d:70:8e:f0:47:74:b0:25:f3:30:32:
9f:7b:8b:84:4e:c5:80:6c:c7:68:a7:7c:7c:aa:09:
1a:78:d1:4c:04:28:6f:9c:05:96:b1:f4:9a:55:52:
a7:6b:9a:9d:96:a1:51:ce:ea:b7:31:ac:e3:37:74:
3a:c3:ca:31:73:6d:dc:af:8d:2b:fd:bb:94:56:e5:
99:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A1:35:8C:3A:0B:AF:95:B9:71:14:32:E0:BE:29:F0:BA:C8:0F:61
X509v3 Authority Key Identifier:
keyid:BA:B9:BB:C2:4E:9A:C3:D9:EC:7E:10:BF:95:74:7D:AB:5C:45:DD:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urm7wk6aw9nsfhC_lXR9q1xF3Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7a:7f:29:78:20:83:b6:3e:6e:7c:49:8e:ac:d9:b3:23:a6:
01:9a:05:5e:ab:1f:77:14:de:dc:42:f3:5b:16:25:fd:07:d9:
1f:4f:54:77:21:dc:ca:79:24:ba:60:f5:8d:10:24:f3:e1:ed:
a7:b3:05:fc:9b:3f:f2:cb:2c:83:6b:79:7c:bd:06:45:01:f4:
aa:89:1d:04:8d:af:19:8f:06:d3:16:60:ba:df:50:ad:a0:df:
3b:75:f6:8f:fe:90:9b:ee:25:0b:25:d5:35:57:70:5b:da:63:
4d:1f:14:cb:4c:36:f4:6f:b1:5b:96:da:cd:d0:91:f8:c8:95:
05:b6:40:bc:a3:e6:45:79:dc:0a:85:0c:e7:0f:df:fc:32:0e:
9d:f6:14:3e:b5:ac:5c:4e:b6:9d:e7:91:dd:2e:56:1d:7c:bf:
a1:9e:6f:d2:84:4e:5e:9d:94:19:70:51:cf:63:23:bd:77:66:
96:4e:b5:7e:52:22:4e:6f:95:1b:a5:2d:fe:d0:ba:81:6f:55:
f0:39:fb:69:11:c3:35:ff:a4:40:b1:ae:26:f9:f3:9c:f6:74:
1c:0d:bb:64:85:4b:b0:bc:79:bf:a9:96:b3:cf:33:85:17:70:
1c:98:9b:ee:cc:c6:1d:97:12:70:3f:fb:fa:c2:75:c8:da:7f:
01:4e:a4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:32:31 2025 by rpki-client