Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
File: SpR3QFKci4QPf4kzCXmshyyj-rg.mft (raw, json)
Hash identifier: GjfIPB02hopc3haXYs5Axft0By1+NF6RWFgPqFTbsTk=
Subject key identifier: 2F:AE:24:F5:75:87:D5:AC:FA:7C:19:C6:B9:46:C4:53:8F:F7:0D:30
Authority key identifier: 4A:94:77:40:52:9C:8B:84:0F:7F:89:33:09:79:AC:87:2C:A3:FA:B8
Certificate issuer: /CN=4a947740529c8b840f7f89330979ac872ca3fab8
Certificate serial: 019694F213A7C05BEED5A6716216C9AAB8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
Manifest number: C9
Signing time: Sat 03 May 2025 07:00:14 +0000
Manifest this update: Sat 03 May 2025 07:00:14 +0000
Manifest next update: Sun 04 May 2025 07:00:14 +0000
Files and hashes: 1: SpR3QFKci4QPf4kzCXmshyyj-rg.crl (hash: 8QsTiY39yhn34T+Nwushuq+mUnZU8U4jnAOS30A/z1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:f2:13:a7:c0:5b:ee:d5:a6:71:62:16:c9:aa:b8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a947740529c8b840f7f89330979ac872ca3fab8
Validity
Not Before: May 3 07:00:14 2025 GMT
Not After : May 4 07:00:14 2025 GMT
Subject: CN=2fae24f57587d5acfa7c19c6b946c4538ff70d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:07:f5:10:b9:09:11:aa:26:80:a6:d3:c3:
3f:b4:bb:b8:58:a1:0a:a4:e1:47:f3:b9:be:83:f3:
97:17:e1:0c:b2:f9:71:98:c6:2b:56:85:9c:1c:8a:
9c:20:bd:ad:2f:bf:29:17:d3:f8:92:fa:f7:b0:38:
3b:38:12:4b:2b:6c:e6:aa:5e:8f:43:29:9b:44:b5:
96:e8:ce:86:92:1a:b6:00:57:80:81:b2:d1:48:12:
db:38:90:17:02:94:9e:e7:fd:52:17:4a:69:ae:84:
46:b0:e6:ff:c3:48:83:50:99:0a:e9:95:77:aa:3a:
62:33:bf:06:e3:f3:db:70:90:26:ba:8a:e4:7d:92:
d8:da:68:fc:2f:57:5d:e2:fa:ca:d3:0f:fa:c3:5b:
d1:15:bf:03:4b:83:bc:db:12:15:00:bb:b9:80:c5:
9e:cf:89:7a:a9:cf:9b:94:99:65:57:06:27:da:3a:
c1:96:c7:0a:46:36:e4:cf:be:a5:6a:ae:07:1e:d9:
8b:2a:a8:14:4d:56:ac:fc:42:b9:4a:d1:1c:e7:dc:
a6:de:b2:e3:58:42:50:ce:55:68:e6:61:64:bc:2f:
9b:9e:05:cc:86:0c:e5:4d:75:dd:1d:ea:46:be:76:
07:dd:be:ca:25:7b:5e:e0:5d:b8:cb:fc:97:c5:da:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AE:24:F5:75:87:D5:AC:FA:7C:19:C6:B9:46:C4:53:8F:F7:0D:30
X509v3 Authority Key Identifier:
keyid:4A:94:77:40:52:9C:8B:84:0F:7F:89:33:09:79:AC:87:2C:A3:FA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fd:54:0a:be:f3:54:99:e0:d9:45:0f:8f:fa:41:c3:0f:33:
a5:5b:e1:1e:a2:08:a3:b3:b6:fb:94:07:2f:d2:18:fd:65:7c:
79:20:ef:c8:b0:a6:55:29:ec:da:47:30:92:a2:9c:ac:c5:b1:
44:ae:37:c8:d3:a9:c8:04:8d:b8:53:ef:b8:ff:b4:7a:9c:3a:
ec:91:2d:f1:88:3c:5d:29:d3:ec:71:0e:a0:95:ce:b1:a1:32:
d7:4b:0c:22:97:5f:40:14:b3:ab:53:28:ae:87:2d:69:f4:ae:
72:0f:be:2b:e9:fc:e7:eb:b3:19:b0:fb:ee:4e:e3:ee:86:37:
db:56:09:12:fc:97:fe:4c:23:d4:b1:12:b3:eb:39:2d:85:1e:
e2:a1:82:16:bf:1d:e6:19:f2:47:06:e6:f2:61:20:21:6f:78:
c5:a8:93:25:fc:7f:e7:fe:f9:7f:23:f6:e7:7e:69:bb:e4:22:
bb:99:f4:02:b2:9e:87:80:54:37:37:a8:02:27:f4:7b:5d:2e:
5d:c3:2e:cc:8e:8e:38:f3:5d:89:4d:03:f9:a4:4f:09:b9:e8:
9b:d8:05:68:46:5c:33:7c:51:35:7f:d1:5c:6f:84:c7:09:6d:
34:89:6e:3c:cf:1f:e4:4e:ac:85:66:4a:15:1e:7b:10:12:72:
9c:a7:f2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:20:09 2025 by rpki-client