Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
File: 10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft (raw, json)
Hash identifier: WPEWYMqov194PactNeox5FZwNtDu1+ZgMg/B8vjgHgg=
Subject key identifier: A0:1C:17:F2:F0:67:D7:33:4A:45:FA:CE:F2:5E:2E:83:86:99:95:65
Authority key identifier: D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
Certificate issuer: /CN=d74794f996ac5a3f02b56a75c14949403d02ac64
Certificate serial: 0196B6355B7020FA003CE21BFD279D21D04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
Manifest number: 152B
Signing time: Fri 09 May 2025 18:01:12 +0000
Manifest this update: Fri 09 May 2025 18:01:12 +0000
Manifest next update: Sat 10 May 2025 18:01:12 +0000
Files and hashes: 1: 10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl (hash: UCuMEhGvr2jxEU8tHft3Hz+0Dul4OpQ6rVRchQoSXno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:35:5b:70:20:fa:00:3c:e2:1b:fd:27:9d:21:d0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d74794f996ac5a3f02b56a75c14949403d02ac64
Validity
Not Before: May 9 18:01:12 2025 GMT
Not After : May 10 18:01:12 2025 GMT
Subject: CN=a01c17f2f067d7334a45facef25e2e8386999565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:c9:cf:00:36:f1:0e:e9:4d:73:50:ca:42:
db:63:64:9b:41:3e:2d:ff:5e:e1:96:da:11:42:cb:
2b:98:06:aa:4d:f8:95:1a:86:d6:51:69:3a:47:13:
63:25:87:80:13:8d:9e:e4:c5:f8:77:4d:71:47:f8:
27:35:7c:c4:eb:fd:98:c8:80:a6:b1:14:ea:64:6b:
f8:b9:9b:31:2f:c7:38:53:32:dd:32:ef:7b:b9:81:
ef:9e:4e:34:8a:62:f0:11:6c:30:32:18:cf:13:90:
a3:0d:c2:18:b6:cf:b0:1e:0e:f7:6c:97:40:b5:f2:
8c:77:d4:d9:f0:80:9c:98:37:12:9e:c6:56:5b:c5:
54:df:1d:d3:ad:fb:5c:73:43:51:ae:4f:3d:c6:6e:
88:11:e2:6a:48:c0:18:31:87:66:43:3c:66:ff:af:
6c:46:1e:87:b4:62:c0:45:69:da:0e:f2:39:2e:ff:
08:af:7c:71:1f:89:9f:e7:fb:27:b0:93:41:ad:15:
3f:99:8b:48:ff:8a:01:e1:9b:fe:e8:7e:7a:9f:df:
29:38:09:7e:5f:59:82:ab:3c:31:a6:2d:42:73:72:
9e:25:44:6b:1e:c5:d0:88:45:6d:1f:a4:d5:e8:84:
72:67:63:51:75:9b:8a:b6:94:a0:16:8d:08:3f:88:
24:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1C:17:F2:F0:67:D7:33:4A:45:FA:CE:F2:5E:2E:83:86:99:95:65
X509v3 Authority Key Identifier:
keyid:D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a5:62:fc:d8:48:62:65:c9:ea:d1:1e:24:bf:3f:c9:4b:e7:
1b:39:a3:d0:10:65:e2:c2:44:3a:54:79:90:3c:4e:12:a7:1e:
f9:1b:d4:b1:94:43:6d:f8:1f:35:09:2c:9b:6c:28:89:51:05:
d4:65:79:0f:29:f2:7e:93:0c:38:27:2f:c7:21:80:81:85:8b:
7f:e4:8c:37:1e:d6:be:23:53:45:cb:21:92:cb:62:b9:a3:f3:
77:ac:3d:4e:fa:7d:33:e7:00:c6:53:81:62:08:b1:7b:df:51:
70:30:1f:f9:ea:76:aa:3e:ce:83:b0:65:eb:8f:bf:fe:17:17:
5a:2b:77:35:b9:4f:32:f3:83:ed:69:59:f5:e7:7f:12:c2:63:
67:78:81:b4:7c:60:e9:86:f2:ff:97:b5:4e:5f:c9:8e:2a:34:
03:ee:9d:45:42:55:e1:96:60:e6:dc:8d:95:fa:c3:8b:82:bb:
b6:24:94:24:c4:59:57:88:26:3d:e0:1f:ba:0d:85:25:a8:ed:
6c:77:82:f9:8a:1c:77:83:22:f4:be:e7:21:29:ad:a9:dc:12:
3a:b6:5f:2a:ff:4b:16:c5:b7:8a:30:8f:fe:d9:09:b0:bb:e7:
0b:75:c5:84:f4:3b:28:31:16:24:f7:64:58:03:01:73:83:de:
98:c7:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:12:51 2025 by rpki-client