Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
File: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft (raw, json)
Hash identifier: t2QVEMn3yuPVt7z/cK4gjoz1W3Hxj+vzSdzv3SDKhvc=
Subject key identifier: 0D:4F:6D:21:64:A2:1C:CB:56:80:36:A3:DD:0F:E2:A2:D7:85:50:3C
Authority key identifier: F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
Certificate issuer: /CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Certificate serial: 01968B4A93EADB4365099C159FAB034E2E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
Manifest number: C4
Signing time: Thu 01 May 2025 10:00:42 +0000
Manifest this update: Thu 01 May 2025 10:00:42 +0000
Manifest next update: Fri 02 May 2025 10:00:42 +0000
Files and hashes: 1: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl (hash: 0aSQXdVnS4OTaQve+GLTGqCVcPZ0L9hm6NrNTAOCLhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:93:ea:db:43:65:09:9c:15:9f:ab:03:4e:2e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Validity
Not Before: May 1 10:00:42 2025 GMT
Not After : May 2 10:00:42 2025 GMT
Subject: CN=0d4f6d2164a21ccb568036a3dd0fe2a2d785503c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bb:8d:b2:da:ab:3b:b3:9b:c7:ed:19:13:90:
51:ba:1c:86:db:84:ac:85:96:fb:31:9d:23:86:cb:
3f:63:12:c7:c1:94:7e:d4:77:70:fe:9d:49:b8:9e:
d0:33:78:d1:f7:58:ec:5a:c0:59:ca:58:ca:37:22:
42:14:3c:33:49:2c:50:06:06:ce:4c:6d:df:90:f0:
7e:85:cc:75:e6:31:8e:39:c5:63:22:85:ed:83:43:
91:16:d8:2d:e5:b8:39:c7:28:bb:f9:81:2d:85:88:
46:54:c7:30:8f:e6:51:a6:28:48:5f:25:17:d0:2b:
df:16:01:e4:d7:2e:ba:2b:4e:d2:cb:91:ac:f3:00:
79:e6:0a:a9:e9:e9:4b:60:c8:70:34:5a:51:fe:47:
dd:40:f4:d2:12:cb:53:b9:02:fb:66:20:b8:6e:7f:
1a:38:89:63:9b:66:b4:8b:ca:bb:19:e1:0b:27:55:
20:50:1d:b1:3b:90:aa:c1:31:3a:7c:fc:b2:0d:df:
1c:8a:c8:dc:34:2e:b4:0a:3c:2a:44:23:4a:b1:fe:
ab:bb:c1:8e:22:c5:d6:ea:39:32:78:97:42:ca:34:
91:53:06:99:1c:c8:ee:fc:69:b9:bc:90:44:da:cb:
cd:e2:e1:a2:04:80:c0:01:a7:48:5d:01:b0:d1:72:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4F:6D:21:64:A2:1C:CB:56:80:36:A3:DD:0F:E2:A2:D7:85:50:3C
X509v3 Authority Key Identifier:
keyid:F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:44:e1:9b:25:e5:ce:9e:e8:23:e9:e6:f6:cf:65:bb:e6:30:
34:39:d9:62:20:e8:2f:39:a4:36:48:80:54:93:60:bf:5f:13:
e9:e5:33:f4:b3:4d:ad:b8:ed:9a:65:40:d5:ef:f9:90:92:8d:
74:6f:67:0a:77:05:0c:3b:77:3c:3d:88:9b:53:0b:59:9f:61:
43:24:06:0a:ac:a3:cb:f2:83:19:f4:d0:13:6c:19:2d:c1:e5:
38:60:6d:f3:92:dd:65:90:4f:64:ef:ed:c9:35:78:58:cd:6d:
8f:0f:67:55:30:15:34:1b:3d:15:3e:40:04:42:58:1d:67:47:
28:00:05:b2:77:a9:9b:cb:47:0b:9e:6e:77:55:f0:56:aa:bb:
a3:55:52:3a:c8:bb:11:dc:73:fb:5f:95:60:ed:e7:8c:39:ef:
ef:49:ce:b2:c6:a3:a4:b1:53:2d:77:45:26:5a:5d:20:64:a2:
43:83:b5:a8:85:84:c1:ec:d6:79:27:28:cb:c3:c7:bc:71:38:
10:b2:c2:81:5a:77:9e:eb:0d:00:58:bd:72:33:bb:52:1b:a1:
16:4e:4f:f3:28:79:64:b3:c3:ed:ce:20:5f:35:35:41:83:c3:
35:d2:d8:35:d8:58:60:79:0e:bb:76:fa:39:5d:89:b6:30:c9:
b1:f2:b9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:15:46 2025 by rpki-client