Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
File: rb65YXJeTVu08lSJhtlvzG00nmQ.mft (raw, json)
Hash identifier: uMpg0hS5nnDxUnQ9ygq8pocJIFoTqi9Bs05Z4OCuKB0=
Subject key identifier: 40:56:D9:FA:32:9D:A3:3B:53:A4:37:B7:AC:25:42:57:00:35:FA:06
Authority key identifier: AD:BE:B9:61:72:5E:4D:5B:B4:F2:54:89:86:D9:6F:CC:6D:34:9E:64
Certificate issuer: /CN=adbeb961725e4d5bb4f2548986d96fcc6d349e64
Certificate serial: 01968623D71ABDF7C9D8E7AB142360BEF0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
Manifest number: 014F
Signing time: Wed 30 Apr 2025 10:00:17 +0000
Manifest this update: Wed 30 Apr 2025 10:00:17 +0000
Manifest next update: Thu 01 May 2025 10:00:17 +0000
Files and hashes: 1: rb65YXJeTVu08lSJhtlvzG00nmQ.crl (hash: 87hzuXD+WJRsQLv262rY0eSZ0gotxPTNMCdNSJjIQKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:23:d7:1a:bd:f7:c9:d8:e7:ab:14:23:60:be:f0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbeb961725e4d5bb4f2548986d96fcc6d349e64
Validity
Not Before: Apr 30 10:00:17 2025 GMT
Not After : May 1 10:00:17 2025 GMT
Subject: CN=4056d9fa329da33b53a437b7ac2542570035fa06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:c7:69:94:26:b8:08:8f:91:2d:40:fb:e2:
09:9b:4d:2f:3f:d0:6f:be:1e:65:2c:2d:18:b7:e1:
8e:9e:7c:62:55:10:54:ee:01:4e:9f:92:7d:d0:bf:
0e:02:7f:80:70:59:3f:63:9c:43:7d:9c:48:21:68:
bf:9e:8c:0f:4d:a5:50:75:30:54:ff:83:68:35:ba:
0e:0e:ce:fa:42:76:9d:3b:e2:d4:03:f2:26:1a:37:
6b:a6:57:58:fa:54:19:46:f6:f6:0e:3c:5d:3b:04:
bf:29:32:8b:63:14:00:8e:93:00:3f:02:b0:fe:bf:
02:9d:55:40:3a:0e:67:23:71:2a:ac:50:25:fa:ef:
23:51:1c:4b:65:e6:7d:d8:ac:28:c5:13:f9:65:24:
64:fb:3a:3c:6e:2c:c6:14:d4:f3:3b:7a:5f:00:c3:
e4:05:2b:2e:f8:f3:a9:6a:fd:20:60:e0:36:fb:56:
db:5e:b2:85:aa:da:04:fd:e1:96:9b:13:58:ed:67:
9d:be:50:f2:d9:7c:e1:a0:9e:69:90:91:24:03:7e:
2b:b9:14:d0:81:9a:0e:43:8d:c7:87:6c:1f:c6:44:
f6:68:63:60:39:8f:f4:6e:d5:5c:16:8e:21:cd:48:
80:1b:20:a6:1f:34:15:31:38:a8:10:b5:1d:80:49:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:56:D9:FA:32:9D:A3:3B:53:A4:37:B7:AC:25:42:57:00:35:FA:06
X509v3 Authority Key Identifier:
keyid:AD:BE:B9:61:72:5E:4D:5B:B4:F2:54:89:86:D9:6F:CC:6D:34:9E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:70:00:5c:79:af:5a:6d:ae:81:ff:8e:41:41:bf:77:aa:c8:
ba:15:de:8f:45:c5:86:5b:5e:02:91:bf:e2:69:b6:63:11:6a:
82:ab:37:ae:73:b5:d1:35:29:64:bf:d8:81:ac:b6:2c:ca:ac:
b0:da:54:ff:02:a8:0e:9a:e6:24:d8:f8:11:f2:8e:67:d4:c4:
e0:9e:ca:47:1c:38:47:ec:f4:aa:64:ad:08:28:6b:85:cf:cf:
da:3a:9b:89:63:6b:ce:50:3a:55:47:f7:d1:a2:82:e6:c2:da:
c3:03:fb:98:6b:75:36:d3:71:f3:bd:3c:04:9b:8b:8b:3d:d6:
10:cf:63:43:76:3f:38:36:22:c6:56:74:98:53:00:04:ef:2d:
ed:58:17:b3:4d:97:98:17:df:62:f0:6f:44:50:bc:a5:55:7a:
3f:0d:4c:10:b4:66:9c:f3:59:dd:b6:d1:b7:aa:fe:17:cf:d0:
ae:7f:ce:31:42:c6:48:5d:84:4e:65:1c:89:0c:42:3f:f0:3b:
7f:34:e4:27:47:99:6b:61:5f:47:bd:af:87:e2:ed:55:a9:11:
25:b1:60:8d:23:96:0a:cf:8f:1b:17:db:f4:30:50:7b:73:f1:
54:77:23:ec:4b:c3:d8:ca:8a:5b:46:1d:a7:10:e1:7b:fb:cf:
1b:0b:b0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:09 2025 by rpki-client