Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
File: P9WU69efjdhbR5LpUzvkaBaohgY.mft (raw, json)
Hash identifier: yVp+s+416iBqHbo/thBjhcdLozJ4OG94L5lMODdPjU8=
Subject key identifier: F5:C4:45:55:F8:98:A8:94:18:0D:CA:98:0D:7A:95:71:03:E2:ED:E4
Authority key identifier: 3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06
Certificate issuer: /CN=3fd594ebd79f8dd85b4792e9533be46816a88606
Certificate serial: 019686C940570AAF36B7557C210EBB2F432E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
Manifest number: 1096
Signing time: Wed 30 Apr 2025 13:00:58 +0000
Manifest this update: Wed 30 Apr 2025 13:00:58 +0000
Manifest next update: Thu 01 May 2025 13:00:58 +0000
Files and hashes: 1: P9WU69efjdhbR5LpUzvkaBaohgY.crl (hash: FFF7W6OCDmSIhhSpKdtRutkQ3stmtWcmwBSjKbb+cHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c9:40:57:0a:af:36:b7:55:7c:21:0e:bb:2f:43:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd594ebd79f8dd85b4792e9533be46816a88606
Validity
Not Before: Apr 30 13:00:58 2025 GMT
Not After : May 1 13:00:58 2025 GMT
Subject: CN=f5c44555f898a894180dca980d7a957103e2ede4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:80:bf:2a:44:4d:0f:21:ba:73:59:49:82:
d4:8b:b1:28:c3:5f:b1:29:7c:d0:b3:a5:3c:56:fc:
a1:e5:21:2e:62:c7:07:76:97:10:8f:ed:fc:2a:7b:
28:55:8a:56:4b:af:ff:0b:8f:aa:fd:9b:2d:40:b4:
a5:e5:1c:d8:8f:e2:6a:87:7b:56:5e:a1:f1:2e:95:
30:97:cc:5e:7d:bf:cf:9d:d1:72:7b:16:9b:88:e7:
9d:b1:56:4a:ca:39:58:f6:b3:15:77:01:85:75:c0:
de:8f:f8:4e:27:15:0e:07:d5:47:42:df:66:46:99:
0a:87:e4:d2:d0:16:48:54:27:40:be:7a:e1:d3:7a:
92:ed:3f:2a:42:db:e8:6d:7f:fd:4a:f4:a2:0e:1a:
7d:2c:5f:60:e4:16:6b:d7:d2:21:56:79:3a:47:5a:
84:2c:7d:11:96:ac:29:ca:34:40:0c:84:ff:b6:78:
0d:9f:15:88:b7:7a:4f:7d:c8:0c:d1:1b:7e:c3:26:
e7:fe:e5:7a:f1:cc:c5:67:07:e3:17:ce:31:8a:b7:
36:a2:24:50:6d:d5:97:36:b4:12:f7:c5:96:93:42:
d6:11:02:cc:33:21:d6:6d:b4:45:9f:d9:d3:01:c8:
5e:9a:ba:a1:b4:0a:8e:b0:cb:91:ba:e1:09:6d:f0:
b6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C4:45:55:F8:98:A8:94:18:0D:CA:98:0D:7A:95:71:03:E2:ED:E4
X509v3 Authority Key Identifier:
keyid:3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d6:67:91:73:7e:38:ff:30:46:40:c2:31:41:e6:ee:66:63:
b7:52:5f:fb:1f:09:7c:72:e7:53:59:7e:19:f6:a1:bd:7d:bb:
92:2a:bd:2c:b4:e9:9b:a0:1d:13:89:f7:50:f7:41:28:34:a2:
21:ac:a3:38:12:84:86:20:e8:9f:b7:b8:91:a5:a5:56:58:1f:
d3:9e:d2:63:e7:35:89:ce:d6:59:81:99:91:cd:bc:b1:95:73:
cd:1f:ae:30:7a:43:d0:67:79:0d:69:3b:3f:c0:6b:7f:ff:c8:
ac:6a:d9:23:e9:aa:52:77:34:ac:18:b4:64:e9:2a:74:5d:55:
3f:97:5f:af:7c:5f:87:a4:93:c4:4c:f0:9f:5b:e0:69:ba:87:
91:9c:75:37:2a:51:56:97:9d:7d:cb:07:d3:2b:f9:e4:9f:4f:
18:0c:9e:e2:8f:63:25:2d:6a:16:16:e8:47:8d:9f:33:bd:e1:
45:7e:51:eb:56:25:4f:79:c4:39:50:1d:66:3f:a5:25:fd:7d:
c3:8f:94:38:35:0c:e3:23:5a:da:80:80:75:88:57:1a:5b:4a:
a3:23:bd:8a:97:3d:a4:6e:9d:2b:2f:1b:29:ac:7b:8d:69:05:
7b:ac:4e:fd:21:ac:09:9b:40:6f:1f:3d:f2:0b:31:aa:83:a0:
5c:d0:09:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:49 2025 by rpki-client