Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
File: r5aNFt0rQdNStf0zxJs-xP2tQlg.mft (raw, json)
Hash identifier: xW2fRS4XZoRLWm+BOVJFhKXKK5h8sjfZyCJybILF44w=
Subject key identifier: 76:26:88:2E:09:F9:C6:18:5F:49:4C:6A:96:29:0E:5C:87:11:15:13
Authority key identifier: AF:96:8D:16:DD:2B:41:D3:52:B5:FD:33:C4:9B:3E:C4:FD:AD:42:58
Certificate issuer: /CN=af968d16dd2b41d352b5fd33c49b3ec4fdad4258
Certificate serial: 01967944169808590CAB342ACDEB7CC649B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5aNFt0rQdNStf0zxJs-xP2tQlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
Manifest number: 0E21
Signing time: Sun 27 Apr 2025 22:00:27 +0000
Manifest this update: Sun 27 Apr 2025 22:00:27 +0000
Manifest next update: Mon 28 Apr 2025 22:00:27 +0000
Files and hashes: 1: r5aNFt0rQdNStf0zxJs-xP2tQlg.crl (hash: rN9uvivj6OlqisAtjQf0RCVvnEJR7G3Pmq5d7js4cl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5aNFt0rQdNStf0zxJs-xP2tQlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:16:98:08:59:0c:ab:34:2a:cd:eb:7c:c6:49:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af968d16dd2b41d352b5fd33c49b3ec4fdad4258
Validity
Not Before: Apr 27 22:00:27 2025 GMT
Not After : Apr 28 22:00:27 2025 GMT
Subject: CN=7626882e09f9c6185f494c6a96290e5c87111513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c9:5d:ba:45:8b:ce:83:ea:58:3d:a1:ee:28:
b6:82:1e:da:c5:f2:a8:bc:ca:6c:51:14:72:72:ef:
2e:b9:c8:ac:1c:b6:2c:59:94:c1:05:b7:26:9c:2b:
a0:73:ec:dd:43:e7:99:d2:b1:d8:97:3f:bd:eb:5c:
03:49:64:a7:f3:cd:de:d7:d0:ef:12:99:29:ec:c9:
b3:6b:83:0f:39:55:6a:ce:a3:41:6c:b5:8b:3c:ea:
cd:5c:dc:31:74:31:80:25:70:78:35:e3:ac:cc:91:
51:cd:dc:a5:be:e6:e9:1a:a1:bc:9e:6c:f6:61:27:
fc:ad:b0:c7:5f:e9:74:e9:ee:29:a7:ef:ad:9e:89:
0b:75:69:9a:77:1f:9d:5b:a3:31:6e:e3:46:a4:4f:
78:b9:1f:a1:ec:9b:3c:64:89:08:8b:8a:30:c5:af:
08:23:b7:a9:90:c7:12:ae:6a:1b:99:d0:14:b0:54:
82:9d:7a:d9:ae:fd:9a:fe:c8:13:09:60:5f:45:e9:
29:85:2d:70:9b:5a:e6:22:ff:5b:93:87:ba:73:59:
dc:a4:67:b8:bd:44:7f:11:29:8e:27:7a:78:ec:09:
40:6f:7b:75:4c:a3:f0:d4:36:08:e3:6a:80:68:06:
60:c3:6c:74:9b:a0:6d:fb:95:14:59:7c:ea:0b:55:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:26:88:2E:09:F9:C6:18:5F:49:4C:6A:96:29:0E:5C:87:11:15:13
X509v3 Authority Key Identifier:
keyid:AF:96:8D:16:DD:2B:41:D3:52:B5:FD:33:C4:9B:3E:C4:FD:AD:42:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5aNFt0rQdNStf0zxJs-xP2tQlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5e:37:aa:58:50:4d:f0:01:59:23:1d:7d:b2:06:d9:bc:72:
56:30:b7:f2:ed:1d:d5:4b:6f:77:36:4a:87:01:65:f5:27:6a:
83:e4:01:2c:67:bc:46:b9:ce:31:80:4a:75:17:81:61:73:0f:
44:62:b3:d1:4f:f3:b9:91:cc:59:33:ce:74:d7:1a:a4:52:8e:
70:e7:be:fe:30:64:79:23:b9:5d:6e:09:15:2f:ee:5c:36:91:
b0:d8:ae:d6:52:5a:1b:9c:e6:3a:a0:50:c1:69:c7:a3:de:a1:
3c:ca:b9:60:df:9e:2a:86:fd:e4:83:2c:be:e2:13:d6:2f:09:
21:00:82:97:fc:65:47:c6:00:e3:4b:54:a5:04:7b:4c:95:2f:
82:07:bf:ba:35:b6:cc:ba:b9:58:48:5a:4b:b6:f2:08:77:8f:
66:ea:5d:45:df:fe:34:4c:5d:14:03:1d:38:8d:92:f1:73:89:
4d:02:74:69:54:5c:1a:55:9e:99:2d:e1:78:ca:c9:ed:5a:20:
93:2d:ea:6e:45:2b:53:27:9d:4c:62:e1:ef:19:06:14:75:2a:
ba:ca:b6:2b:36:97:bb:cb:3b:95:c2:8c:01:90:c8:a4:48:1f:
10:a9:57:34:6a:47:a8:e3:51:ed:29:ef:e5:06:55:4a:dc:32:
97:8c:7b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:48 2025 by rpki-client