Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
File: 793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json)
Hash identifier: mmiVKbGpDsQXs275mjw1N6Vmcs8X97+0umBdQF2CwbE=
Subject key identifier: 0D:49:6B:7D:83:7E:DD:35:E3:E5:D7:DB:70:CC:57:3A:F9:F9:CC:38
Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Certificate issuer: /CN=efddc86b82005ff8c7c264a2e067037a608b481f
Certificate serial: 019679EA3041B461363BD32188C82245A256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
Manifest number: 150D
Signing time: Mon 28 Apr 2025 01:01:52 +0000
Manifest this update: Mon 28 Apr 2025 01:01:52 +0000
Manifest next update: Tue 29 Apr 2025 01:01:52 +0000
Files and hashes: 1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: nGqPCyF4BFnNhBOMjwLweYkfOFYHmpYZdfPTgqFUVJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:ea:30:41:b4:61:36:3b:d3:21:88:c8:22:45:a2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f
Validity
Not Before: Apr 28 01:01:52 2025 GMT
Not After : Apr 29 01:01:52 2025 GMT
Subject: CN=0d496b7d837edd35e3e5d7db70cc573af9f9cc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:e2:12:fa:76:d7:51:a0:89:9a:38:a7:94:
9d:a7:a6:0b:2d:f0:12:ce:2c:72:d6:fe:bc:e9:1a:
4e:e8:fd:2e:d1:0a:b9:e0:e2:e0:1d:91:c9:a0:6f:
99:17:1d:43:5a:3b:96:ea:67:98:66:d6:43:8f:c2:
e0:97:10:33:9a:38:00:26:e9:04:4d:87:a5:cf:34:
f6:dc:a4:6b:06:5c:8d:0e:a3:37:ff:2c:6b:a3:c1:
02:10:20:66:4b:53:46:d4:ad:28:5f:fd:a6:d7:ef:
9d:83:51:0c:54:95:9a:fd:cb:45:87:70:c6:99:72:
a8:2c:b4:56:ee:6b:71:c7:96:91:03:20:63:59:de:
52:be:0d:d6:57:a3:61:44:59:bd:6c:83:0e:ad:b3:
9d:de:95:f8:1d:be:ba:45:93:2f:ce:e3:01:4f:cc:
c9:d7:77:22:2b:2b:39:57:20:d2:09:93:59:2a:02:
aa:2d:c1:ff:6b:5b:ea:1c:78:4e:59:c8:ae:b2:43:
b4:47:d8:a1:cf:84:c9:2d:b4:e3:2e:ea:cc:f3:8e:
0d:6e:15:e0:9e:34:46:81:b7:0e:51:c4:83:af:dd:
f0:28:4e:b3:f1:21:9b:e3:da:ff:98:43:6d:be:7d:
da:97:18:8d:56:7f:dd:b5:e4:b0:14:2c:c1:4b:79:
1b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:49:6B:7D:83:7E:DD:35:E3:E5:D7:DB:70:CC:57:3A:F9:F9:CC:38
X509v3 Authority Key Identifier:
keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e9:c8:f0:2f:95:11:ac:3c:06:7e:e9:c2:dc:b2:08:2f:24:
25:06:37:a5:d8:21:35:3b:6b:9e:5c:d9:2c:89:32:17:ea:15:
3a:63:56:7a:17:07:d1:e1:04:4d:79:ae:f3:cc:1b:6b:31:78:
92:b2:67:cb:99:00:86:0a:a4:fd:90:cb:bf:66:ad:76:02:6f:
08:93:64:5e:4d:2d:aa:95:f3:5f:be:3b:27:78:aa:08:8f:a2:
95:e9:8d:c8:b9:8d:c2:e4:32:93:cd:f9:af:25:9b:4a:43:3a:
27:45:4e:97:6d:3f:e1:d0:d3:46:25:75:ad:ff:75:d3:18:0a:
c4:56:7a:9b:09:77:f7:7c:e0:54:f9:0b:aa:fd:d1:62:2d:43:
79:09:df:b9:b3:5f:fb:54:2f:41:fc:24:31:2a:2d:c6:fa:b7:
77:8e:fe:ef:17:01:17:8e:fa:24:54:b6:96:52:06:c6:2a:18:
f2:bd:7e:eb:f2:a1:61:c2:e7:45:4d:37:61:83:3d:1e:ab:d6:
45:1a:6a:dd:63:c5:98:a4:61:7b:bc:70:7a:c5:70:00:fb:07:
84:9a:dd:0e:82:f8:ad:8f:f2:03:7c:2b:d8:4e:1c:20:f9:a4:
af:49:65:8e:16:01:05:e7:01:b7:40:4d:2f:20:01:26:9c:d1:
f0:c6:82:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:51:21 2025 by rpki-client