Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
File: cdV4WLGdypZzvB9nIZ71Ab873Oo.mft (raw, json)
Hash identifier: nC+2XkYMOb3k+/IxcL2kZ1LrnC/jMSzs9AGqoOHwSJg=
Subject key identifier: 13:F4:39:BB:9E:DC:69:D7:EF:96:E7:B9:73:95:E2:90:C3:94:3A:6B
Authority key identifier: 71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
Certificate issuer: /CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Certificate serial: 01968F281C435BF60177B86AF64FE74509CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
Manifest number: 03FA
Signing time: Fri 02 May 2025 04:01:32 +0000
Manifest this update: Fri 02 May 2025 04:01:32 +0000
Manifest next update: Sat 03 May 2025 04:01:32 +0000
Files and hashes: 1: cdV4WLGdypZzvB9nIZ71Ab873Oo.crl (hash: XQRWivF+QAFV9CAOf1ip+tw2fGl1afXZbpe9A3ljy7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:28:1c:43:5b:f6:01:77:b8:6a:f6:4f:e7:45:09:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Validity
Not Before: May 2 04:01:32 2025 GMT
Not After : May 3 04:01:32 2025 GMT
Subject: CN=13f439bb9edc69d7ef96e7b97395e290c3943a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:af:c2:f8:6b:be:d8:60:39:7a:2c:70:a4:69:
88:91:84:c4:aa:52:f8:95:23:c9:47:30:f1:8d:99:
a6:9a:af:e1:5b:6a:a9:b4:f7:51:0a:60:58:b4:5c:
c1:6f:76:7e:5d:67:43:b5:ce:de:45:d5:83:77:72:
41:b0:f9:b4:53:ed:99:66:e3:f2:a6:37:8b:dc:b3:
14:80:c9:ce:69:7c:60:2e:3c:1a:0f:87:80:76:83:
94:dc:69:94:7c:8a:c7:e2:c2:6f:cd:86:c5:4d:41:
ad:24:6f:f8:c1:e5:42:b6:a0:cd:bd:70:8a:a0:d4:
6a:a9:c2:ed:a7:c1:c2:52:ea:d8:c0:16:f8:2c:d6:
44:bb:83:16:80:5e:10:25:17:3c:2a:06:4a:b0:31:
d7:84:b5:95:1b:38:6f:96:16:37:f9:5b:4e:bc:c2:
94:82:ae:ef:06:36:6c:fb:ce:51:f2:9c:f4:2d:75:
89:dd:da:88:c9:dc:14:5f:9e:1e:a2:38:dd:61:3c:
d7:d8:06:e8:a0:a7:6b:e1:1a:64:c5:66:56:6f:95:
f1:6a:c7:2f:19:f7:bf:0a:a8:76:8d:aa:b4:7e:53:
10:79:65:b4:ea:30:9e:4c:df:77:ae:0a:13:de:a3:
ee:bb:6c:a0:d3:fc:ff:7e:9b:91:62:cf:27:f3:55:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F4:39:BB:9E:DC:69:D7:EF:96:E7:B9:73:95:E2:90:C3:94:3A:6B
X509v3 Authority Key Identifier:
keyid:71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e7:63:ea:f7:6c:c3:f3:b6:da:61:36:a0:5a:72:9e:a6:86:
e6:b4:84:f0:d2:50:f2:23:ad:4f:99:c9:28:63:65:9d:9e:3b:
a8:f9:1a:e4:c1:16:d7:f3:3d:e4:ab:1b:83:5b:0c:cf:56:4b:
22:18:d2:2f:9f:26:36:bf:d6:45:0d:b8:44:46:e2:0b:9e:6a:
68:33:c7:aa:e2:2f:98:34:dc:ee:9e:62:c7:f4:25:55:fc:db:
b7:c8:46:b1:b3:fe:7d:1e:18:b3:c3:55:9c:da:20:69:9e:54:
e4:a1:35:fb:73:1f:55:f4:21:3b:b2:55:8e:0a:51:31:86:04:
00:88:0d:fc:2e:dd:b5:b7:61:ec:15:41:a4:2b:1c:cd:3f:66:
77:8f:8b:8c:6c:03:0a:0e:39:2e:eb:33:8a:e7:24:22:78:48:
34:9c:7f:e4:e9:9b:ea:56:21:8d:0d:7f:51:e1:07:f3:2f:c2:
66:00:4f:bb:47:2d:80:ac:cc:44:e2:f0:6c:9c:57:c7:a1:4f:
b6:82:3c:5c:54:28:c3:d6:83:d8:4c:52:6d:f7:d9:35:c2:9d:
8e:ce:7f:ed:b1:50:2a:63:da:89:0e:c7:5d:32:7e:a2:20:56:
db:48:36:5a:7f:27:27:d5:c5:e1:d8:56:86:3e:e8:ca:bd:f4:
82:d0:6e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:07:04 2025 by rpki-client