Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
File: cVYaucXzkpItp8rhgMMwc2XwI4Y.mft (raw, json)
Hash identifier: eIaH2A5kNgIfhaoZ8MyiKiSg9qLyckME0uo/HIIn1o0=
Subject key identifier: AF:0A:F5:F3:C8:7E:DC:FA:55:38:7B:4C:6E:CD:CA:05:26:8D:40:9E
Authority key identifier: 71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86
Certificate issuer: /CN=71561ab9c5f392922da7cae180c3307365f02386
Certificate serial: 0196741D8FD5076270746501AEB4976B6877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
Manifest number: 0E3F
Signing time: Sat 26 Apr 2025 22:00:16 +0000
Manifest this update: Sat 26 Apr 2025 22:00:16 +0000
Manifest next update: Sun 27 Apr 2025 22:00:16 +0000
Files and hashes: 1: cVYaucXzkpItp8rhgMMwc2XwI4Y.crl (hash: xBVufBKmZf7kSTNgCao8WmlpuzX1yTiaW8zxzzX81WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:8f:d5:07:62:70:74:65:01:ae:b4:97:6b:68:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71561ab9c5f392922da7cae180c3307365f02386
Validity
Not Before: Apr 26 22:00:16 2025 GMT
Not After : Apr 27 22:00:16 2025 GMT
Subject: CN=af0af5f3c87edcfa55387b4c6ecdca05268d409e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c1:bf:3f:c5:3c:f5:04:0b:c9:e0:d7:e4:8b:
b6:4f:4b:5c:71:eb:63:7d:19:cd:2a:76:51:57:ec:
b4:2e:08:e8:bf:c0:28:03:4b:1c:cc:4b:cc:c8:3f:
e3:c1:fd:39:48:85:9d:33:14:87:0b:af:02:02:89:
05:be:6e:bf:88:c8:7b:64:fa:4a:9f:68:9a:29:95:
39:d1:e8:e6:8f:e9:27:f5:70:6c:f7:90:d9:0c:81:
14:c3:f7:29:e9:49:98:82:f1:54:51:74:2f:08:c9:
17:d6:13:dc:74:ef:73:d5:21:cd:0d:76:3b:45:9a:
e9:5e:e7:99:0e:c3:e4:5d:3a:6f:f4:f5:00:47:82:
27:b7:7f:8b:1b:a9:eb:4e:10:71:a3:9b:3d:ee:f8:
27:0f:fa:68:51:a3:77:3f:3c:60:03:aa:d2:f8:e0:
05:69:c3:e6:6d:e9:33:86:dc:27:39:35:22:18:a7:
8c:df:8e:ed:f0:f9:4a:4e:ea:2f:3d:05:f8:a9:76:
da:47:db:22:4f:6b:7a:93:ac:4e:1f:30:bf:e3:58:
74:d9:8f:5e:36:46:ac:f4:fb:26:9d:e9:42:40:e6:
91:57:fb:69:6a:11:88:32:87:5d:4d:b8:17:8b:f3:
4b:90:83:07:c6:0c:14:3c:c3:e7:6c:ec:13:4e:78:
fb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0A:F5:F3:C8:7E:DC:FA:55:38:7B:4C:6E:CD:CA:05:26:8D:40:9E
X509v3 Authority Key Identifier:
keyid:71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:19:88:91:57:a5:3c:82:b4:d7:7e:aa:2b:6a:f7:06:0e:e5:
c7:24:74:e3:2b:08:74:7f:f0:0a:72:91:3b:56:ef:9f:e6:f7:
a6:17:e3:18:72:63:20:1f:50:db:0b:7b:c0:fe:bd:74:c5:24:
fd:52:d0:d8:5c:12:c0:b0:3d:8e:c2:42:4f:c5:8d:db:c6:6b:
03:06:b7:82:d7:29:f0:82:08:8f:95:45:29:e9:ff:7b:fd:44:
47:02:f9:6d:a1:b4:fb:46:60:16:71:2f:21:66:32:98:06:a4:
d2:fa:ec:11:0d:e4:c8:f2:98:cc:ed:e3:d7:87:9a:cf:5d:71:
c5:ce:c7:9a:82:cd:2c:4f:fc:b3:ac:59:61:35:ae:2d:8c:8e:
3c:09:ac:93:a9:85:89:51:d6:a4:76:2e:2d:a8:72:4f:49:47:
d3:46:bb:33:5b:b5:02:bb:5d:30:4c:ea:a7:bd:e0:81:39:e6:
f5:ad:98:93:c1:ee:31:53:fc:60:36:ab:98:94:3f:b6:88:1a:
e4:1d:13:c7:aa:17:52:59:04:84:ac:19:35:53:6d:d7:16:85:
aa:5c:01:a9:49:8b:22:f8:c0:b0:6c:d3:a9:10:d1:b4:dc:68:
36:82:66:99:21:8a:7f:99:9c:95:35:f3:98:dc:e8:68:51:90:
f4:7c:32:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:05:58 2025 by rpki-client