Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
File: 9GRgXq8UuLXSjujQdsHjc491glM.mft (raw, json)
Hash identifier: w3K5ciaB6iPMpjaLYL6oJwryxqUMypWaHZpYvA0QUKA=
Subject key identifier: F8:B7:AE:36:B3:C4:68:6D:2B:3D:BB:B6:FC:0C:5C:63:CB:D4:C8:F6
Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
Certificate issuer: /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Certificate serial: 01968B4B527F7666D4A22A1308BD4DA47655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
Manifest number: 0FD8
Signing time: Thu 01 May 2025 10:01:31 +0000
Manifest this update: Thu 01 May 2025 10:01:31 +0000
Manifest next update: Fri 02 May 2025 10:01:31 +0000
Files and hashes: 1: 9GRgXq8UuLXSjujQdsHjc491glM.crl (hash: WzvrGZmpYO3IcsEhsZkNEcTqeWqIokHn8s7gjDXa6Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4b:52:7f:76:66:d4:a2:2a:13:08:bd:4d:a4:76:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Validity
Not Before: May 1 10:01:31 2025 GMT
Not After : May 2 10:01:31 2025 GMT
Subject: CN=f8b7ae36b3c4686d2b3dbbb6fc0c5c63cbd4c8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:11:e5:5e:87:1a:93:af:eb:98:3f:8d:88:
8d:e4:f7:75:48:4e:bc:14:8e:58:66:d5:76:bf:38:
a4:78:b8:6f:59:65:97:21:0a:92:e3:21:a0:d7:37:
a7:7e:4c:74:4e:a6:bf:ad:7b:d7:06:8a:0f:87:64:
ab:5a:35:c8:8d:e0:45:fa:84:83:a1:5e:3c:3e:ea:
37:92:98:1d:84:01:e5:0b:49:67:d8:57:a3:0f:fb:
c7:5f:6b:e3:3f:52:33:af:0c:c6:87:30:7e:9d:aa:
1d:d4:15:69:c6:6a:56:90:cf:ee:39:8f:1f:01:5b:
ab:93:12:5f:be:7d:4b:77:ce:2a:3e:df:43:f1:f2:
bd:0c:b6:00:49:53:09:3c:48:d8:8d:a3:82:7a:fc:
47:e5:1a:d3:8f:35:df:4f:78:1b:2c:f3:5a:42:aa:
f1:c4:66:9d:ce:ba:12:70:45:b8:f5:0b:01:a8:59:
c9:71:ed:e4:ea:d1:dd:98:d6:05:4a:5c:71:70:09:
61:75:50:96:ba:94:a0:72:01:aa:e5:33:54:b9:65:
5a:a4:25:bd:09:92:d2:81:c7:d2:b3:db:9f:e7:f1:
4f:27:6a:2b:77:d0:b8:4c:2e:48:f3:bc:ad:cf:9a:
41:57:e3:18:cf:e3:c7:fe:26:0b:29:fc:bd:a3:bf:
d1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B7:AE:36:B3:C4:68:6D:2B:3D:BB:B6:FC:0C:5C:63:CB:D4:C8:F6
X509v3 Authority Key Identifier:
keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cf:82:ab:b2:00:65:81:5b:ff:38:43:d4:56:93:5c:a7:8c:
f3:86:16:53:15:f6:6b:81:37:ba:db:c8:2f:18:46:44:d2:e0:
bd:7d:bd:78:b7:0a:43:e9:a0:bd:cd:3b:df:fb:22:16:86:89:
99:c3:d0:e2:9f:67:c0:95:f9:a8:f2:11:04:07:2a:f1:56:85:
87:48:ce:f1:3d:7a:13:a1:ad:4c:a0:56:3c:5c:a1:13:a4:f6:
c3:e8:7d:c6:3f:67:35:bc:f4:95:fa:c2:77:e9:eb:09:7c:46:
63:64:a4:bd:06:a4:d0:09:6d:c8:0a:04:37:88:c4:69:b2:92:
cd:47:22:52:97:53:4a:68:03:63:12:30:31:45:79:ba:4a:fd:
e2:e9:04:cb:98:8c:a9:cf:5f:a0:3f:5f:14:76:20:df:d8:c9:
ec:26:67:75:8b:af:78:66:e5:94:23:a3:50:5e:5e:60:11:e4:
17:c3:f6:fd:eb:bf:6f:63:d4:15:34:eb:f4:d7:2e:6e:01:de:
2e:a1:13:87:44:58:6b:02:eb:94:06:95:49:2e:34:8e:93:0c:
12:ff:0c:d5:f1:c9:0f:c2:05:2e:fa:72:06:22:bb:2d:9b:2b:
65:42:dd:d9:6b:e6:cd:51:6d:5b:38:cf:19:10:d6:3d:e5:41:
4d:aa:79:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:05:25 2025 by rpki-client