Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
File: cUKDDu7SiwS83QP6P9pIxUha_P4.mft (raw, json)
Hash identifier: d/yDBXcapuvNIURR8y9D2q/N+Z59s9SjhumW0vMFxuE=
Subject key identifier: D4:7C:5C:6C:38:5F:CE:7B:05:7F:D4:18:99:BD:F9:0B:C3:6A:02:30
Authority key identifier: 71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
Certificate issuer: /CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Certificate serial: 019694F30B5992DBB44A330AA6144B624E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
Manifest number: 0DF2
Signing time: Sat 03 May 2025 07:01:18 +0000
Manifest this update: Sat 03 May 2025 07:01:18 +0000
Manifest next update: Sun 04 May 2025 07:01:18 +0000
Files and hashes: 1: cUKDDu7SiwS83QP6P9pIxUha_P4.crl (hash: CQkHlrgrYbxL0EvRiQi1l0tiQeTbKVJzstvNJUrF2Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:f3:0b:59:92:db:b4:4a:33:0a:a6:14:4b:62:4e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Validity
Not Before: May 3 07:01:18 2025 GMT
Not After : May 4 07:01:18 2025 GMT
Subject: CN=d47c5c6c385fce7b057fd41899bdf90bc36a0230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8d:25:79:69:78:40:15:47:de:55:f4:45:36:
f6:fd:82:46:5c:1b:15:10:62:e8:7d:16:97:5a:bf:
86:58:c6:76:43:83:9c:ff:38:1f:81:20:ca:c9:ca:
d4:fc:cc:39:8f:85:84:e4:e4:a8:a4:85:30:89:f6:
c5:1f:58:7e:cd:5d:7d:56:a7:9d:df:92:c8:bd:43:
e5:fc:bc:f9:40:44:02:3d:2c:73:70:1f:32:09:65:
73:df:7b:1b:f2:f3:d6:04:10:94:2c:a4:39:0d:7d:
75:82:80:df:d4:71:83:9f:f9:64:8b:e6:57:97:b6:
47:af:46:ff:e5:f2:fc:38:d0:a8:98:de:f5:55:7f:
50:84:d0:85:3e:72:81:73:55:74:6a:c3:f1:df:c4:
06:34:ac:37:ac:43:a3:02:18:8b:a6:bc:50:60:25:
63:64:e3:3e:c0:4d:d6:31:aa:55:15:a2:71:a5:37:
5c:62:fe:06:48:b1:9b:1b:80:00:00:dd:a0:6c:ab:
72:0b:92:64:db:e2:27:12:60:a3:c8:fe:45:5f:6f:
ea:ad:8e:b7:f7:97:25:d2:36:c5:de:e8:01:6d:ea:
bd:a6:00:56:dc:b3:22:70:bb:db:4e:4a:42:1c:43:
9e:4e:6b:d9:2a:20:e3:fc:f4:21:c9:f1:c0:69:98:
8f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7C:5C:6C:38:5F:CE:7B:05:7F:D4:18:99:BD:F9:0B:C3:6A:02:30
X509v3 Authority Key Identifier:
keyid:71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:46:ba:e9:0a:74:05:63:d3:28:7a:bf:58:e8:3b:5d:43:4c:
da:d8:ae:93:b0:43:fb:e2:74:48:99:9d:c5:95:a5:78:2e:2f:
80:1a:69:56:8a:3a:5b:f0:cb:d5:30:4c:d9:c2:6b:cc:35:4c:
5c:f7:46:e0:cb:f2:0e:63:f7:85:6a:5a:eb:99:eb:f8:e1:8a:
a2:59:cd:62:a6:e4:97:25:d2:e8:65:86:df:f1:14:f9:ab:51:
91:96:db:8b:a3:e7:5c:8f:06:28:10:3d:fe:21:c5:02:73:a3:
b9:2e:43:04:04:e7:a9:51:70:88:c9:1f:ff:94:ca:8b:7e:ed:
bc:8e:aa:3c:8f:ea:9c:58:b5:aa:b0:d0:57:15:b0:04:35:03:
37:86:1b:5f:a1:22:46:5d:88:97:c8:12:20:6d:13:19:36:8b:
d8:8e:40:31:1d:82:63:b9:f5:88:65:13:8e:ed:2e:35:43:7d:
97:0e:da:9f:b8:1d:6b:d9:49:41:d8:2e:b7:86:53:e4:6d:dc:
9a:28:85:52:d9:42:14:55:31:b4:42:3d:2b:19:3f:0e:b1:3b:
25:85:06:06:11:ea:38:9f:85:34:75:cb:e8:86:89:29:41:12:
03:f0:27:68:66:5c:7b:2a:57:96:bf:22:ca:12:98:1e:cd:ae:
23:2a:72:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:14:32 2025 by rpki-client