Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
File: 9M3Ux8i_hxhwMKZEcCColvQeSZM.mft (raw, json)
Hash identifier: l/HudP3LGOZbm5GSb0AmrlCjaVWTA7fOvCNjIvP5Mjk=
Subject key identifier: 0D:44:DA:71:7D:D6:84:5A:0A:BB:37:C2:60:2B:AC:73:75:B1:EF:33
Authority key identifier: F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
Certificate issuer: /CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Certificate serial: 01968391A0629A43BF5A4B86F1AC3599D435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
Manifest number: 11A4
Signing time: Tue 29 Apr 2025 22:01:21 +0000
Manifest this update: Tue 29 Apr 2025 22:01:21 +0000
Manifest next update: Wed 30 Apr 2025 22:01:21 +0000
Files and hashes: 1: 9M3Ux8i_hxhwMKZEcCColvQeSZM.crl (hash: FLjQtJQwdAv9cpC1nkjWYaL+z/vhDUV2vsep63TOH1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:a0:62:9a:43:bf:5a:4b:86:f1:ac:35:99:d4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Validity
Not Before: Apr 29 22:01:21 2025 GMT
Not After : Apr 30 22:01:21 2025 GMT
Subject: CN=0d44da717dd6845a0abb37c2602bac7375b1ef33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:56:68:46:3d:20:d9:0f:5c:6d:d2:4e:d3:
11:50:de:00:f8:2e:5b:a0:1c:30:02:df:2b:42:d2:
97:3b:f5:2c:7c:68:a2:5a:72:62:dc:c4:06:e0:2a:
a5:87:71:53:a8:12:dd:d8:ef:13:9b:36:0a:23:85:
7a:0d:51:05:c0:60:fc:a9:6e:e2:97:05:76:6c:f3:
b5:d6:22:3b:75:ea:c0:ba:f8:75:7a:fc:19:f9:b6:
99:76:60:f5:59:bc:fd:04:b5:28:7b:68:28:27:a6:
6e:42:c1:38:d4:be:eb:c2:b1:a1:db:1b:d3:ee:df:
54:6f:c7:4b:a1:9f:99:cb:ca:6c:29:c3:64:74:3e:
19:6a:d1:7e:89:e1:30:07:9e:0e:ff:53:41:c3:2f:
08:10:e7:1f:d8:92:d6:01:3b:47:e8:20:88:00:a1:
c6:c6:67:46:c1:8d:7a:fc:0f:47:e8:5d:9e:07:a9:
6c:b8:fd:eb:fd:ff:73:fa:12:13:3d:2a:cc:ac:fa:
38:7a:c3:6f:b5:e3:5c:72:ab:d6:2e:27:b5:fc:79:
97:0b:48:3e:93:7e:0e:35:ad:58:c6:a7:38:2f:5f:
f9:33:05:ec:00:5f:48:97:c0:cc:77:b1:7e:1f:1c:
30:6b:4f:25:47:79:56:fe:cf:ae:89:f3:59:ba:bc:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:44:DA:71:7D:D6:84:5A:0A:BB:37:C2:60:2B:AC:73:75:B1:EF:33
X509v3 Authority Key Identifier:
keyid:F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2f:2c:25:c7:ad:fd:ce:68:a3:d7:e0:42:ac:69:e0:c6:62:
91:20:99:90:45:dc:cf:7e:69:1f:09:b2:1b:ff:d4:43:88:65:
99:3d:3b:47:21:37:b1:38:8e:ad:7a:32:ad:13:69:5f:42:53:
f6:5e:3f:5d:1e:08:cf:bc:f2:d0:9d:51:8f:96:99:15:79:cf:
d7:5c:03:7c:33:97:80:2c:85:96:5e:d6:2d:1d:38:eb:66:cb:
e3:05:bf:8b:cf:c6:ff:94:28:c3:83:c5:78:34:f6:d1:f1:f0:
60:cd:b5:30:a6:4f:2d:d4:4e:d7:c0:ac:2a:ba:59:ac:84:36:
4e:7d:e6:fc:90:59:4d:db:52:65:a3:5c:e1:f7:8a:f3:a9:b9:
7c:19:93:16:62:bf:9e:b8:bc:e5:13:4b:d1:1b:30:d7:ef:04:
c1:b1:f3:9d:ca:eb:15:90:db:66:7d:e5:e8:73:18:43:11:7d:
22:03:23:1c:9e:c1:d7:28:9d:d9:f6:03:35:a3:77:73:89:c6:
a8:12:df:32:7e:4b:8a:02:e1:6b:02:d4:71:05:fd:36:b1:da:
55:5f:1d:23:8a:9c:54:00:6a:a6:8d:d3:d1:46:80:7e:45:a0:
3e:f0:b8:fc:9f:77:da:2b:15:91:4a:a2:c9:14:d8:8b:5e:23:
7f:4d:2f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:51:27 2025 by rpki-client