Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
File: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft (raw, json)
Hash identifier: YOjTuQwL3BGDqJPsoQ1SgROD5lp2UmRuKB3xkKOogCc=
Subject key identifier: F5:7E:16:2C:D6:31:6C:7F:E1:37:19:9C:A0:AB:5A:9A:C5:FB:C4:DF
Authority key identifier: 52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16
Certificate issuer: /CN=52b8d3d330bd6620bb17d487e4055d95b274af16
Certificate serial: 0196741D7F4519D451A94034B4836FDE71BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
Manifest number: 0EF4
Signing time: Sat 26 Apr 2025 22:00:12 +0000
Manifest this update: Sat 26 Apr 2025 22:00:12 +0000
Manifest next update: Sun 27 Apr 2025 22:00:12 +0000
Files and hashes: 1: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl (hash: ZQChQWIvmQ8hkQ1SR9aIEKVGv5pzNQwGMeVQYSI0P1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:7f:45:19:d4:51:a9:40:34:b4:83:6f:de:71:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b8d3d330bd6620bb17d487e4055d95b274af16
Validity
Not Before: Apr 26 22:00:12 2025 GMT
Not After : Apr 27 22:00:12 2025 GMT
Subject: CN=f57e162cd6316c7fe137199ca0ab5a9ac5fbc4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:62:9e:ab:34:2f:df:e9:b7:c5:12:37:ee:
22:fe:4b:f8:8f:9b:a4:f6:2d:9b:7a:77:74:32:3f:
ee:8b:a9:7a:e0:0b:d7:f4:ba:f2:d3:31:10:9a:10:
91:8d:53:55:a2:da:e7:8d:cd:e4:fa:1b:6b:79:05:
fe:ba:7c:15:cd:31:37:f4:3d:fb:32:cb:2e:59:b5:
a6:aa:c1:e0:f7:e4:c7:55:ac:f0:df:8a:66:68:58:
08:ef:00:48:f6:e3:40:a7:9b:80:b2:f9:8b:de:82:
a0:81:95:18:b0:33:b8:95:bc:10:65:82:ab:60:ac:
bc:a9:7d:94:b1:57:db:fe:3d:01:31:80:7d:ec:ad:
95:99:83:d1:42:0d:9c:fe:54:c5:07:cb:2f:ae:98:
23:f9:49:cc:61:74:47:0d:65:1f:d9:a4:21:ee:eb:
14:b5:dc:55:73:eb:23:a0:5c:36:2f:ef:f1:92:bc:
c3:ba:7b:c1:35:9c:b0:25:2f:bc:98:36:cd:82:72:
2e:7b:6f:fc:33:09:9b:c2:be:fc:bd:21:4d:76:ee:
9a:8c:87:20:12:3b:94:da:ce:1f:2c:36:32:ef:f7:
81:17:2f:ea:48:f7:c7:f2:2b:83:da:e8:47:26:0e:
d0:c6:18:33:b4:01:cb:6f:a8:5f:73:9f:6e:67:d3:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7E:16:2C:D6:31:6C:7F:E1:37:19:9C:A0:AB:5A:9A:C5:FB:C4:DF
X509v3 Authority Key Identifier:
keyid:52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:88:d3:97:75:9e:51:ab:b3:5f:c0:2b:84:82:9d:70:15:a8:
00:0b:c8:f0:b7:81:d8:8f:a4:f8:75:f3:ca:cf:46:09:46:77:
85:98:ba:95:8f:b7:05:57:b8:70:ed:5f:a3:77:4e:fa:d7:86:
84:78:ae:93:8a:c1:42:b3:02:5d:06:03:0d:f8:ad:e3:5e:e6:
70:1c:a9:c8:6e:59:69:e5:6d:0a:50:32:e6:c3:a5:ff:99:67:
de:c3:16:83:d3:98:b8:f6:90:f3:89:4d:21:d3:14:0b:36:55:
c7:3d:fd:97:e7:97:e9:87:49:6c:67:82:29:36:7f:da:42:7b:
07:50:69:04:7c:f0:d5:68:33:1d:cf:40:c8:e3:2c:84:fe:77:
a6:29:52:92:b8:cb:b9:c0:23:93:30:28:78:d6:af:e9:43:df:
48:48:3a:92:bd:c2:0a:de:28:ba:02:ef:05:02:3f:c6:fd:60:
64:53:60:0b:3b:49:1a:54:69:15:9e:d7:b7:46:18:fc:f8:9c:
69:c5:84:83:6b:3c:79:ed:3f:ee:07:ad:01:24:13:cc:33:73:
63:81:b1:27:25:82:11:58:f0:7c:0b:9c:30:a4:0c:c2:71:31:
11:23:2c:4f:b6:f6:93:d3:ac:91:74:49:d4:ca:14:3f:1c:ec:
81:6c:07:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:56 2025 by rpki-client