Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
File: C4K9iLuhoX0siu9h3sHaxmFe75A.mft (raw, json)
Hash identifier: p/o0WCW081LGpws/H6ugMPLNwlpE5Sgjx3RjOKHBY6E=
Subject key identifier: CA:46:D6:8D:35:50:79:B1:0C:B3:4F:06:1D:EC:B9:3D:CA:8E:3D:2D
Authority key identifier: 0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
Certificate issuer: /CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Certificate serial: 0196876EA0ABE48C38A97C88FFEA1938AD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
Manifest number: 1515
Signing time: Wed 30 Apr 2025 16:01:36 +0000
Manifest this update: Wed 30 Apr 2025 16:01:36 +0000
Manifest next update: Thu 01 May 2025 16:01:36 +0000
Files and hashes: 1: C4K9iLuhoX0siu9h3sHaxmFe75A.crl (hash: KOd4co09vdaAicKmydCvZiHm3zCV4RYoFXiIJVgizlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6e:a0:ab:e4:8c:38:a9:7c:88:ff:ea:19:38:ad:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Validity
Not Before: Apr 30 16:01:36 2025 GMT
Not After : May 1 16:01:36 2025 GMT
Subject: CN=ca46d68d355079b10cb34f061decb93dca8e3d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:b6:e7:f6:0c:9b:2d:78:15:cb:fb:38:31:
77:f5:64:f0:f5:4d:73:f4:5e:ac:04:1e:52:51:6d:
95:0d:ac:53:f3:36:bf:3b:2e:ef:6b:d5:78:e4:a8:
03:e7:00:52:49:8f:a9:20:5c:1c:cc:8d:d6:43:8b:
b9:6c:ca:14:84:ea:2b:18:d5:eb:19:26:b9:b4:42:
d9:37:10:a1:aa:e4:5f:fe:29:04:b6:05:d0:56:2c:
17:f2:ec:d4:4f:b1:1f:97:0d:be:76:6c:66:e4:30:
e0:d0:a1:fe:35:d8:0f:ba:33:40:26:f1:ef:af:95:
21:db:69:41:dd:a8:67:99:df:b5:98:47:40:b7:29:
ec:9b:e3:fd:db:bd:05:98:31:8e:e3:7e:7b:d3:22:
b8:ef:69:2b:b1:f7:39:ef:2d:52:a5:a0:34:a8:36:
78:6e:3c:21:f3:87:7e:53:87:9e:0f:aa:c9:82:14:
0a:8e:4f:6f:36:53:d4:f3:92:2b:2d:47:6c:e6:db:
cb:fa:b7:35:09:7a:d2:ff:9c:a3:da:c7:c6:a5:87:
f5:73:12:42:60:e1:e5:ce:d9:a1:91:bf:1b:54:c6:
0e:e9:54:87:e0:e0:29:a1:bf:ea:68:13:e1:e5:bb:
49:ab:02:a6:03:2a:51:a2:85:5f:1c:a5:d5:4a:f0:
85:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:46:D6:8D:35:50:79:B1:0C:B3:4F:06:1D:EC:B9:3D:CA:8E:3D:2D
X509v3 Authority Key Identifier:
keyid:0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:48:19:c0:9a:36:e8:4d:eb:49:d5:87:c1:d7:db:f4:88:15:
d8:d2:2e:9e:17:df:c8:f3:88:31:05:c9:22:d5:da:51:e6:cb:
e9:da:98:57:3d:0f:a8:a0:45:b8:6e:cb:7b:4d:90:d4:74:37:
df:f9:a7:b3:b0:30:60:7e:ad:d5:0b:4b:eb:71:19:17:35:65:
e5:fb:2b:37:a6:1a:6a:71:18:dd:0a:fd:1f:f3:aa:33:f5:53:
4d:52:2c:ac:95:aa:ff:c3:76:ef:2f:be:2b:23:8f:fa:a1:9d:
c2:89:b0:58:bf:36:8d:25:d8:48:59:55:b3:22:31:7e:8b:98:
3b:4d:fa:98:fa:f3:e3:ca:92:d3:4b:1b:82:31:19:79:0d:4d:
3c:41:8c:75:71:46:18:9e:f1:cf:9d:a6:6c:32:35:a7:f0:2a:
48:15:b8:bf:f3:df:d9:86:8d:5d:cb:ad:f9:b7:3c:da:ad:38:
54:e3:a8:74:6d:90:f9:0d:57:e0:eb:d8:8b:4b:37:94:d5:58:
e9:14:59:77:c2:17:fe:10:b1:a2:e2:7b:af:c5:f1:7d:37:bc:
5c:eb:a1:c2:8b:1c:34:20:e0:f5:10:00:97:95:2e:80:d2:76:
b4:27:27:4e:1f:b0:57:80:17:ae:77:a3:b5:a2:c7:a0:62:17:
de:41:57:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:46:10 2025 by rpki-client