Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
File: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft (raw, json)
Hash identifier: a6rSRjcnrHFkqiKLeKmhjNJoBNrZYuWnfXCRugtFp70=
Subject key identifier: E7:A3:57:D8:43:18:3D:76:15:A2:A3:CD:3B:6C:D8:41:B0:87:B8:61
Authority key identifier: A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F
Certificate issuer: /CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
Certificate serial: 01968247274C2A8697F42415C88F68DBD6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
Manifest number: 016D
Signing time: Tue 29 Apr 2025 16:00:23 +0000
Manifest this update: Tue 29 Apr 2025 16:00:23 +0000
Manifest next update: Wed 30 Apr 2025 16:00:23 +0000
Files and hashes: 1: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl (hash: Jr96uQ/ky5jTgbuFvsc8DxC7tc+w5y4DOjOvdQBm1Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:27:4c:2a:86:97:f4:24:15:c8:8f:68:db:d6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
Validity
Not Before: Apr 29 16:00:23 2025 GMT
Not After : Apr 30 16:00:23 2025 GMT
Subject: CN=e7a357d843183d7615a2a3cd3b6cd841b087b861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:41:e9:ff:2e:ad:34:5f:3e:6d:f7:6d:8e:
77:cd:4c:31:3d:a3:e9:38:f3:30:56:95:9c:ce:76:
6b:b4:62:a9:86:47:11:a1:1e:be:31:73:07:01:fe:
36:b8:0b:9f:7b:85:66:82:39:2b:42:a7:b3:34:09:
83:c3:eb:56:40:4c:f8:80:94:a7:35:3a:4a:af:45:
9c:5c:ed:04:fd:3b:07:dc:6b:a7:12:a5:c8:41:d9:
bf:9f:3c:af:66:73:95:c5:a3:3a:43:a2:d8:6a:76:
4e:a9:ab:e8:8d:71:1b:1d:4b:5a:20:24:07:ea:b1:
d5:f1:ce:37:01:e5:c5:e5:31:36:ad:eb:dc:b5:81:
2e:22:01:e4:8b:e1:82:53:19:df:00:5e:e3:62:de:
cd:53:6d:5b:2a:6c:72:99:11:95:92:2b:99:59:82:
a0:20:d6:8d:15:b4:07:6e:09:19:71:41:c7:72:37:
31:34:f8:d1:5f:46:17:85:7b:42:c1:26:52:49:78:
8b:35:53:fa:20:6d:32:05:fa:f5:ae:1b:2d:2d:5f:
71:0e:b1:0d:b4:28:1f:ec:2d:f6:c9:01:48:a1:f8:
d3:0a:c6:c6:84:0b:3b:ee:d4:21:a6:6b:e2:8e:11:
00:25:33:8c:0d:45:f8:16:75:34:02:cd:cd:df:aa:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A3:57:D8:43:18:3D:76:15:A2:A3:CD:3B:6C:D8:41:B0:87:B8:61
X509v3 Authority Key Identifier:
keyid:A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6d:fe:dd:b2:60:70:9d:39:fe:2f:d2:6d:19:c5:d4:40:68:
c0:f8:64:7c:92:a5:51:c3:c2:99:6b:4d:67:83:0b:41:96:bc:
8a:b6:15:ad:b5:8b:51:94:ac:0f:96:8e:0d:0c:48:6b:5f:12:
e5:4e:ab:37:48:41:4c:5d:38:de:0e:9c:31:f6:3b:b5:92:da:
5c:6a:ce:03:49:27:c5:02:95:4a:c1:1c:15:44:ca:e4:e5:c0:
6e:28:2a:ef:ec:3e:3c:24:73:85:ab:16:18:cf:80:a7:9c:69:
84:a5:82:a4:a5:da:92:70:06:4f:c5:8d:1e:cc:63:06:cf:70:
4e:21:c0:2e:ac:77:a4:a1:58:92:26:5c:64:ba:bd:67:0e:b2:
ac:5f:33:fb:14:82:be:db:b0:87:2b:d9:77:46:23:36:12:77:
e1:4d:e1:d7:28:c0:55:4a:fd:21:7b:73:6b:06:ca:88:ae:15:
38:e0:35:91:c7:85:7f:49:6e:96:c5:a3:0f:68:b4:06:73:44:
c5:4d:ca:2e:7b:e1:ac:44:1a:72:5c:4d:5a:f7:38:a7:ca:c6:
ac:9b:ed:28:fe:2d:6c:9f:58:c6:78:c9:42:00:fa:9a:7a:13:
91:46:bb:7a:c6:77:5b:c0:0c:43:54:87:a7:ee:b1:b1:84:bf:
e5:40:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:15:55 2025 by rpki-client