Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File: r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier: lVlfzQN7XaR3m1InzpmCCK6tJmaLhXI08dfCPjm9pUA=
Subject key identifier: 4A:B4:A4:FD:FA:31:15:D6:CF:6E:F9:39:87:FB:58:09:78:49:9C:BD
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer: /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial: 019674C2B97CA130FBA1CB1B8C025F0B2FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number: 150A
Signing time: Sun 27 Apr 2025 01:00:40 +0000
Manifest this update: Sun 27 Apr 2025 01:00:40 +0000
Manifest next update: Mon 28 Apr 2025 01:00:40 +0000
Files and hashes: 1: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: iY4TDSpLUf3Z9HJzrksbJ//uk6hRR0pCOPXcHDec8mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:b9:7c:a1:30:fb:a1:cb:1b:8c:02:5f:0b:2f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
Validity
Not Before: Apr 27 01:00:40 2025 GMT
Not After : Apr 28 01:00:40 2025 GMT
Subject: CN=4ab4a4fdfa3115d6cf6ef93987fb580978499cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dd:bc:59:0c:3e:50:91:cb:b0:4a:dc:68:21:
26:6b:97:41:4c:1c:a1:f8:50:a3:4b:48:19:92:c0:
fb:d7:53:50:a5:09:09:59:3b:44:7d:8e:97:2d:ce:
90:01:1a:fc:b0:33:c9:9e:23:35:c4:75:a4:ee:49:
8c:ee:2a:be:53:87:6a:db:9d:a8:5d:bc:4d:2f:eb:
29:b5:ee:3f:af:bb:af:48:5b:52:ce:92:39:42:3e:
6e:5f:ac:b9:35:4e:c7:44:a3:3d:c5:dc:88:da:12:
5b:b0:1c:90:5f:78:2f:58:5e:29:0f:1d:80:fa:0c:
1c:ec:5a:98:da:77:58:d1:73:50:88:e2:07:37:09:
f9:0a:08:6a:03:32:2d:a1:09:2a:c0:78:ae:0e:ba:
59:fe:02:4d:e8:81:05:a0:9d:85:97:cd:fc:d6:82:
fb:ba:92:31:29:e6:13:b1:dd:ec:95:1a:71:74:3c:
8e:ff:d0:4c:07:b4:f3:3f:64:cd:39:7f:c7:9b:45:
97:72:09:c7:92:e4:97:fd:e3:f1:5f:9f:64:df:ef:
4c:08:3b:78:a5:c5:80:a0:c1:8e:6e:c8:2f:ad:1a:
50:01:c5:fb:e1:81:bc:32:40:84:a4:dd:28:fc:9e:
b9:93:2c:b7:ca:e9:68:8a:c0:e3:98:4e:d7:b9:12:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B4:A4:FD:FA:31:15:D6:CF:6E:F9:39:87:FB:58:09:78:49:9C:BD
X509v3 Authority Key Identifier:
keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1e:f8:47:80:eb:04:75:41:96:9d:16:59:47:d6:89:cf:ee:
0b:05:c0:68:f6:39:3c:b5:a8:c4:c5:a5:0a:e0:73:94:84:30:
b5:d6:88:92:7d:9f:2c:79:f1:8f:8e:20:b7:1a:cc:70:63:f1:
76:97:2a:17:55:d2:1b:95:7f:81:0e:5b:60:45:33:7b:6f:9f:
35:b8:aa:32:2f:1e:d0:76:f2:82:1b:3a:a9:e1:af:17:3d:b3:
61:f0:0c:62:9e:62:29:57:ab:08:1f:3e:80:a9:b6:01:f7:da:
f6:7c:da:23:a3:2a:19:56:a7:ee:bd:37:c3:77:63:d8:23:33:
b0:79:8a:d0:54:f0:f9:3f:e8:c6:13:98:87:8a:41:86:c3:f1:
d2:98:c8:64:10:53:11:8e:e2:cc:6d:68:db:a9:b3:af:b2:16:
99:1d:97:fa:90:e0:98:86:79:19:2b:bb:59:0c:ba:9a:45:f5:
af:ed:0f:05:c5:a1:27:41:5e:69:c8:a0:fe:f6:1c:c1:66:bd:
38:b7:f9:aa:b2:0d:2f:51:72:ea:3e:bb:73:c6:61:30:55:f0:
f7:60:59:b1:17:8b:67:9d:45:0f:42:e3:6c:38:44:89:53:13:
3f:ab:e5:c1:3d:96:68:06:af:ae:e2:a3:be:9c:74:4b:2f:47:
16:ea:84:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:44:40 2025 by rpki-client