Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
File: RtlEd8i1TRLsiz97bZrnjlELI9g.mft (raw, json)
Hash identifier: y6WrqKaKDJOwV4c+pcxyzfrOLhtpMD6gd8hlFTCNLYw=
Subject key identifier: B9:66:23:38:C3:AB:24:4C:5B:F0:B8:C0:83:4E:DB:1A:81:2E:F1:D9
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 01967DC58D3A70A9A661621D59FE756BA6C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
Manifest number: 150F
Signing time: Mon 28 Apr 2025 19:00:20 +0000
Manifest this update: Mon 28 Apr 2025 19:00:20 +0000
Manifest next update: Tue 29 Apr 2025 19:00:20 +0000
Files and hashes: 1: RtlEd8i1TRLsiz97bZrnjlELI9g.crl (hash: AVEUFQuWFu5KHM/HDLzOd7YeFlU17P67yrOwvccGJSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:8d:3a:70:a9:a6:61:62:1d:59:fe:75:6b:a6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Apr 28 19:00:20 2025 GMT
Not After : Apr 29 19:00:20 2025 GMT
Subject: CN=b9662338c3ab244c5bf0b8c0834edb1a812ef1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:2c:a2:92:f1:1d:ba:8f:84:83:8e:ab:29:
c0:85:05:fd:a8:8e:9d:32:c2:46:bc:12:56:43:29:
0d:02:e1:14:90:19:a5:2b:69:08:fa:b4:dd:d8:09:
5e:36:26:f5:92:b7:a1:59:fc:c3:54:4d:43:83:6d:
31:8f:3e:a3:18:57:ad:b8:f3:8f:bb:96:51:9f:eb:
b3:c3:38:59:6b:bb:f9:fe:23:73:46:1c:b2:62:41:
25:a3:56:9d:a3:80:44:1a:7e:b2:c5:6e:4d:48:64:
44:e0:cc:ba:e5:d6:1a:a3:06:8d:f6:e3:52:84:f1:
e7:6a:ce:63:17:d4:17:ad:d0:c3:72:de:90:96:ec:
6e:08:72:82:28:2a:9d:6a:6a:ff:37:3b:f1:3f:61:
4e:8e:bd:72:ae:1f:c8:03:47:21:5e:c1:f9:32:cd:
52:05:61:75:1e:62:0e:bb:e6:94:44:f7:83:49:86:
ca:d1:10:e6:d2:23:e2:57:8b:c8:b1:99:e7:c2:5b:
04:f3:e1:68:13:79:a3:5e:92:09:39:f6:5e:cd:8e:
f8:0b:66:4b:f2:96:81:57:18:8c:a4:e2:02:34:81:
fd:0c:4f:2b:6b:ad:7b:9e:28:22:dc:52:2d:01:7c:
1d:b9:06:90:7a:2d:43:16:4b:aa:6e:dc:89:4e:3b:
d7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:66:23:38:C3:AB:24:4C:5B:F0:B8:C0:83:4E:DB:1A:81:2E:F1:D9
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:96:35:9c:69:f5:5d:04:21:68:ce:38:4f:ff:4e:7f:e0:58:
96:ce:0e:ac:63:9b:48:7e:10:ac:be:0d:ad:5e:49:2f:af:8c:
77:d1:31:7c:e2:89:d7:7a:1e:4d:3e:37:a7:f2:15:e3:7f:71:
a7:8f:ab:47:9c:3d:68:83:f2:cc:e9:38:df:9d:f4:25:b2:7c:
6b:45:3b:fd:bf:c0:3b:31:4a:a1:54:b3:6e:be:d9:c4:ea:87:
ac:de:9d:af:79:e7:31:f9:30:da:75:ba:c2:1f:4c:65:d6:0c:
15:b5:19:19:a8:08:62:76:c1:14:87:71:fd:2a:57:fe:f1:a8:
13:43:be:bb:89:80:90:fc:b4:f4:94:d7:12:75:04:e4:37:53:
f8:bc:a7:df:c5:11:59:63:0a:8e:06:37:3f:39:08:06:8a:20:
be:93:7c:53:86:f8:86:a2:14:5a:c5:af:52:d2:41:0f:13:39:
6c:5f:d8:f9:49:73:85:67:b8:c9:43:98:c4:ca:a9:00:06:47:
86:18:41:7d:91:3d:b9:a8:70:6b:4e:15:67:18:18:43:b5:76:
97:8a:4c:96:5e:92:d8:30:39:93:92:0e:f9:ef:c0:63:14:3a:
99:a3:c0:60:b9:ff:a5:77:a8:83:af:31:aa:87:64:d1:b5:97:
04:f1:8f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:33:27 2025 by rpki-client