Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
File: idXRKIo8KuF_mcuxiRdwAYm9RyA.mft (raw, json)
Hash identifier: 8d8uJuZgiBaRNVpzHR4YubtDRK7I7f4p5xIzci8g5Do=
Subject key identifier: 03:A0:52:1D:F3:21:5F:91:DE:0C:AF:6E:DC:2B:76:2B:C7:58:25:3A
Authority key identifier: 89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
Certificate issuer: /CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Certificate serial: 0196A0F6E51A317EC2C7AE70BA13158E55D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
Manifest number: 0F76
Signing time: Mon 05 May 2025 15:00:57 +0000
Manifest this update: Mon 05 May 2025 15:00:57 +0000
Manifest next update: Tue 06 May 2025 15:00:57 +0000
Files and hashes: 1: idXRKIo8KuF_mcuxiRdwAYm9RyA.crl (hash: +OI2XknYlB5cUueaA+o8WBrPLQJvcsoD6ljL34/3ATc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:e5:1a:31:7e:c2:c7:ae:70:ba:13:15:8e:55:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Validity
Not Before: May 5 15:00:57 2025 GMT
Not After : May 6 15:00:57 2025 GMT
Subject: CN=03a0521df3215f91de0caf6edc2b762bc758253a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a9:94:bf:89:a2:b2:08:5d:d2:dc:dc:3c:7f:
4b:5c:e2:26:cb:48:6a:07:d3:47:70:af:8f:fa:9e:
1a:84:44:14:a4:62:2e:4a:45:ac:44:aa:05:96:61:
84:52:99:21:06:a6:21:74:bd:44:84:78:ce:ad:eb:
5a:96:d5:1e:e2:fe:53:f3:17:3b:5d:f3:96:32:a4:
19:6f:8a:76:18:35:77:6a:21:54:41:13:66:b8:05:
75:15:d1:e2:32:83:02:cf:e7:a6:7a:27:77:8d:53:
6e:71:0e:20:37:69:58:98:b5:ec:1d:2e:27:b2:80:
b8:eb:d4:af:ad:5f:56:89:3e:87:dd:12:bf:04:d9:
98:33:47:6e:93:9f:44:48:84:89:fb:87:c9:db:04:
93:05:61:96:34:b2:53:22:d9:9b:89:6d:24:51:da:
07:e1:0c:6d:d1:e9:77:c1:5e:7b:b5:01:5e:3b:5f:
22:f0:84:66:c1:9b:0e:ad:ac:de:2f:ce:82:61:fa:
4a:fd:4f:00:5c:1f:a0:8d:cf:e4:be:9b:7c:66:ac:
eb:bd:76:28:2e:22:20:39:4e:04:8b:8f:8c:d4:de:
06:57:2d:e9:a1:60:04:95:f6:01:7a:54:aa:fb:cc:
ff:ff:f5:70:f1:52:04:f7:b2:74:5e:8d:6f:81:3b:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A0:52:1D:F3:21:5F:91:DE:0C:AF:6E:DC:2B:76:2B:C7:58:25:3A
X509v3 Authority Key Identifier:
keyid:89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a3:3a:bb:79:d0:d7:9c:9b:18:98:1c:1c:0e:29:39:e7:32:
ae:a6:30:79:64:58:9e:be:b0:7e:31:e0:41:44:c7:1a:71:09:
ca:4c:99:42:58:59:ad:67:61:62:e4:c7:34:36:83:87:8a:c9:
e1:b5:b8:90:58:db:91:78:6a:c5:01:91:31:8c:15:6a:c3:30:
19:f0:a1:78:a9:a7:f5:d5:18:33:f2:68:1e:14:62:df:32:34:
7a:8d:df:e8:6a:ad:46:78:e6:1a:63:e7:19:43:46:74:21:b9:
63:b0:5f:7e:dc:f1:97:b5:17:3e:77:89:ad:4f:7e:98:57:59:
06:7b:b2:18:fb:c2:8c:e1:33:16:2a:db:a6:42:38:b4:c5:dd:
37:f1:0a:2f:87:9d:57:ff:f3:99:fa:7d:37:22:b9:d6:06:51:
d5:fe:04:f5:f2:0d:7f:46:11:0f:ef:d8:88:75:75:2a:91:10:
d8:f9:ce:d5:1b:a3:15:0b:bc:3a:6e:cc:fe:2b:a8:bc:23:df:
4a:f2:26:ae:03:6c:71:e2:68:2b:10:0b:c4:79:5a:41:09:97:
97:ba:f4:a7:cc:a5:82:c4:c1:11:3e:44:74:3e:9c:68:3c:2a:
06:b6:98:38:02:46:8d:6d:ea:1e:d3:48:e3:da:bf:54:d0:26:
5d:e5:bf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:05:45 2025 by rpki-client