Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
File: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json)
Hash identifier: VLaIjupieYJM0Fe3wlTnMhdwryIIE5Gfb93GbGK3C5k=
Subject key identifier: C2:2C:85:8E:0E:94:3F:D9:38:2F:96:3D:3F:2B:22:F5:4E:BE:83:5B
Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
Certificate issuer: /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Certificate serial: 01968391B75A2C36ED7B1237BC3FF7D7EBD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
Manifest number: 01B5
Signing time: Tue 29 Apr 2025 22:01:26 +0000
Manifest this update: Tue 29 Apr 2025 22:01:26 +0000
Manifest next update: Wed 30 Apr 2025 22:01:26 +0000
Files and hashes: 1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: hjmaJkzPk1BWi/9+1Ey4zw2lh3p+z72JfaNpJPQTDmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:b7:5a:2c:36:ed:7b:12:37:bc:3f:f7:d7:eb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Validity
Not Before: Apr 29 22:01:26 2025 GMT
Not After : Apr 30 22:01:26 2025 GMT
Subject: CN=c22c858e0e943fd9382f963d3f2b22f54ebe835b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:be:e4:92:0a:fa:b6:59:72:34:31:b1:92:
b0:13:20:67:db:7e:54:fe:bc:94:c3:06:75:bc:e1:
62:b0:30:1b:1b:b0:f8:2d:63:ec:fe:50:37:2a:1c:
d7:7f:75:47:3f:87:f6:10:cf:cf:b0:98:d0:d6:0c:
6b:c4:57:da:c5:65:03:73:ca:4a:ee:f5:cb:62:0f:
93:e9:15:a4:b8:fc:c8:60:19:b5:8c:00:5a:b4:bf:
12:ba:bb:28:51:25:55:03:1a:d6:16:bd:5a:4c:23:
21:aa:0f:34:09:50:4b:e3:79:11:15:ac:8b:9a:69:
44:79:ef:84:c9:04:d7:af:db:71:f8:5c:f1:ec:19:
23:72:56:66:4b:4a:f3:c9:01:85:4e:09:89:8b:94:
b7:bc:9d:c4:50:9b:ef:4a:63:cf:52:ba:69:3a:48:
7e:6a:66:64:40:63:8c:23:fc:7f:d9:54:5c:bf:0f:
bf:93:62:0c:05:a2:6f:59:31:0a:c2:35:e3:e1:ca:
ad:7d:f4:45:4e:89:86:b4:52:dc:20:ff:68:5a:9c:
45:b3:b4:06:9c:a5:f0:c4:f9:b8:41:22:f2:75:60:
1b:35:19:0c:e2:6b:e6:58:b1:19:79:36:8d:b3:0e:
77:2b:e3:4c:70:96:0c:6b:8b:1b:4d:4a:0e:49:14:
f1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2C:85:8E:0E:94:3F:D9:38:2F:96:3D:3F:2B:22:F5:4E:BE:83:5B
X509v3 Authority Key Identifier:
keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:08:97:04:a2:63:1c:9e:df:ff:8b:5b:07:34:ec:ab:37:06:
a9:da:a7:60:fb:4f:36:5d:57:68:33:85:6b:31:72:38:57:9e:
55:a7:d9:1f:93:16:d3:6f:2c:e9:f6:8b:35:44:a7:2f:be:a7:
a5:ee:15:6d:0a:f0:17:71:6a:b4:52:63:df:db:2e:99:52:24:
1f:3f:e9:8a:f6:15:83:2a:aa:4a:ec:ee:10:c5:94:7f:81:7c:
2f:b0:eb:6f:97:a7:fc:16:c7:1c:69:89:d3:dc:45:85:ee:6f:
b7:95:d4:96:2d:b6:7d:6b:9d:c2:4d:90:45:e6:37:7d:fb:5a:
d1:47:84:18:c8:b6:2d:24:e5:21:f4:a5:00:24:cb:88:e6:46:
a3:4e:bd:f0:a7:86:a7:c4:5f:0a:5f:37:b0:03:69:57:08:c3:
08:a8:76:48:03:3a:a4:47:cc:db:3a:c5:10:a5:c9:94:ff:7c:
9f:ee:4c:04:5a:39:c2:7a:ab:a8:c6:3d:02:ba:18:be:70:92:
2c:03:89:f0:12:7a:04:d0:df:ad:83:57:4d:6a:75:5e:60:e3:
2b:0d:8c:0f:77:8d:b1:35:42:72:6d:9c:be:d9:eb:48:4a:ef:
8d:e3:0b:4f:7c:34:7f:39:03:b4:4d:05:c8:6c:cf:3e:08:04:
60:1a:2f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:29:36 2025 by rpki-client