Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier: IotWLuwTdEzf2ChHfdGqRn7zlt/Zmz4GEOWCsoVJETg=
Subject key identifier: E0:97:F3:16:78:37:9B:74:FA:E8:77:FB:BD:33:11:19:59:F8:69:5E
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer: /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial: 019681A25C97B69839C97C79FC5E45E4A8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 13:00:23 +0000
Manifest this update: Tue 29 Apr 2025 13:00:23 +0000
Manifest next update: Wed 30 Apr 2025 13:00:23 +0000
Files and hashes: 1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: JXgkae5E/QRedGx0rvv4Zy0aLUcju8rdGwQmTGOTH5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:5c:97:b6:98:39:c9:7c:79:fc:5e:45:e4:a8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Validity
Not Before: Apr 29 13:00:23 2025 GMT
Not After : Apr 30 13:00:23 2025 GMT
Subject: CN=e097f31678379b74fae877fbbd33111959f8695e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:cd:41:6d:88:32:60:41:f7:24:87:03:bf:
7e:ee:de:15:a6:bc:d2:15:bb:6f:50:6b:07:d6:83:
47:ea:02:2d:2f:10:f1:32:c0:45:bf:8c:67:36:22:
d8:05:16:32:e3:11:73:27:1c:6c:e4:62:ad:27:e5:
39:f2:3e:b8:41:e9:b0:32:45:cd:55:d1:72:9d:5a:
bd:83:2a:e5:e9:82:7a:b6:4b:00:05:0a:4e:c3:a6:
37:eb:8a:42:bd:88:71:b7:44:92:80:29:ed:63:7d:
41:82:df:8b:08:77:1f:99:4f:04:c6:c6:0f:14:63:
66:62:23:a2:4a:9c:02:53:ad:0a:69:10:19:d0:a2:
9b:fe:98:40:fc:63:42:01:d8:75:d4:40:2e:a0:01:
e5:c4:68:f7:f4:9b:d3:1f:6a:4d:05:69:1c:6c:b7:
b1:a0:56:ee:5a:73:73:33:1c:9c:7e:5f:3e:bb:a1:
da:3d:de:94:0e:ef:8e:15:dc:87:ba:46:8b:1e:a7:
a8:48:76:48:81:be:f0:97:78:c2:03:94:50:23:c4:
0f:a9:68:a1:25:80:2f:8d:20:45:64:36:88:b6:99:
d5:52:66:6e:0f:64:9e:9e:66:c4:47:6c:79:32:a6:
b9:79:d7:82:22:68:1f:36:9d:53:f3:8e:3c:1b:cc:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:97:F3:16:78:37:9B:74:FA:E8:77:FB:BD:33:11:19:59:F8:69:5E
X509v3 Authority Key Identifier:
keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:08:9d:df:6d:94:ff:50:62:a6:3a:02:7c:d0:79:1b:39:5f:
0b:bc:6e:f8:39:30:da:c8:26:76:70:19:07:d9:b9:84:b7:0e:
6a:cb:35:9b:e0:c9:af:e2:a7:75:b3:ec:fd:12:64:04:85:ef:
23:bc:39:bb:01:a1:9e:c2:95:65:4c:51:ae:d9:44:21:42:11:
91:f0:48:77:bd:fc:b8:7e:74:9a:16:b1:6c:27:1f:43:ea:c0:
77:7d:c2:82:fd:fc:6a:18:40:b9:12:26:b3:a4:71:bc:c1:df:
f2:78:17:bb:b3:99:d8:1b:5e:0e:a2:67:41:ab:16:b1:e9:18:
1a:01:12:67:a9:78:99:35:92:f7:03:0b:cf:c0:35:b9:c8:3a:
b5:4b:60:c8:f4:c6:ca:67:3a:66:2d:21:e3:47:9a:b9:7b:4f:
f4:26:7d:1c:5c:b6:13:71:f5:76:f3:ed:de:df:e9:6d:d0:29:
52:4f:56:d9:1c:d0:9e:44:35:34:64:00:02:9b:15:d7:de:72:
94:7b:e3:66:eb:6a:0d:12:82:6c:8a:a0:e6:ed:60:48:04:05:
61:97:4c:de:2b:e6:14:ae:02:e3:c7:cc:36:f5:62:92:cc:84:
6c:b2:b3:af:50:fc:1d:30:7a:76:02:36:13:cb:73:e0:6a:41:
c2:da:83:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:16:17 2025 by rpki-client