Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft
File: ci0p5qil5cpi3rc-r_OrE95VBq0.mft (raw, json)
Hash identifier: ib/gAA/DFRSKntCCn725DEWoWtHDeYiSSH+az4PeZ6k=
Subject key identifier: 69:D9:71:16:0D:77:31:82:5B:BA:23:D8:C6:C9:59:69:AE:78:32:6A
Authority key identifier: 72:2D:29:E6:A8:A5:E5:CA:62:DE:B7:3E:AF:F3:AB:13:DE:55:06:AD
Certificate issuer: /CN=722d29e6a8a5e5ca62deb73eaff3ab13de5506ad
Certificate serial: 019686C8B852807D034F61990F3808FB68F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci0p5qil5cpi3rc-r_OrE95VBq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft
Manifest number: 1E
Signing time: Wed 30 Apr 2025 13:00:23 +0000
Manifest this update: Wed 30 Apr 2025 13:00:23 +0000
Manifest next update: Thu 01 May 2025 13:00:23 +0000
Files and hashes: 1: ci0p5qil5cpi3rc-r_OrE95VBq0.crl (hash: xwTVR+fIxfp19bJOTwsfTbEEm3c+D1fOQiMOb+XGwKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ci0p5qil5cpi3rc-r_OrE95VBq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:b8:52:80:7d:03:4f:61:99:0f:38:08:fb:68:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722d29e6a8a5e5ca62deb73eaff3ab13de5506ad
Validity
Not Before: Apr 30 13:00:23 2025 GMT
Not After : May 1 13:00:23 2025 GMT
Subject: CN=69d971160d7731825bba23d8c6c95969ae78326a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:30:f6:7c:54:f4:fc:56:fb:f2:33:99:9f:63:
90:6e:71:1f:14:3b:50:62:2d:bc:38:15:ae:e7:00:
df:e9:2b:c0:1d:a5:80:93:b1:a7:ff:6d:c8:04:77:
63:f0:de:04:bb:be:a1:e8:ba:dc:4c:2d:19:4c:52:
cd:51:cb:94:e3:90:10:ed:13:2c:f5:51:b1:8d:9f:
59:28:64:18:6b:87:43:c8:37:92:4a:42:57:61:8a:
b6:da:af:71:e1:16:74:c9:0b:d1:16:f9:90:b2:ad:
6f:fc:cb:5f:fd:d6:a2:c5:1d:7d:4c:21:9f:85:ed:
92:25:df:d5:cd:c9:60:e4:34:c2:84:c9:32:7b:d2:
4d:a2:d0:1d:2b:e8:14:3a:54:7d:8d:9c:4c:3b:f5:
82:e8:9c:d7:5b:07:38:c3:1b:ab:4f:37:7b:49:a1:
19:c9:24:a7:30:30:e6:36:58:47:db:bb:6f:88:2c:
8e:03:32:47:7c:51:64:72:c1:2d:35:1d:cf:c7:e1:
17:a9:c0:9f:0e:da:34:7f:89:60:91:6d:99:2e:49:
19:7e:20:98:80:6e:27:3c:e6:9e:37:00:b4:33:7a:
25:28:57:7b:b3:c3:b5:b5:56:69:ba:62:34:f4:fd:
33:9c:34:f1:31:10:d2:28:f5:6d:da:cd:da:b7:56:
b0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D9:71:16:0D:77:31:82:5B:BA:23:D8:C6:C9:59:69:AE:78:32:6A
X509v3 Authority Key Identifier:
keyid:72:2D:29:E6:A8:A5:E5:CA:62:DE:B7:3E:AF:F3:AB:13:DE:55:06:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci0p5qil5cpi3rc-r_OrE95VBq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:37:a5:8a:47:7a:c8:33:bb:d6:d5:93:77:61:e5:00:98:19:
eb:ce:b6:51:5b:c0:ad:2f:15:7f:df:be:5a:d7:42:95:f9:45:
3d:70:06:da:06:07:10:95:a2:66:18:71:41:92:98:08:58:df:
4f:b4:44:24:f6:c5:09:e9:fb:ae:36:2f:6b:62:84:ae:cb:c6:
05:ed:93:14:75:62:6c:71:70:29:4b:46:ee:60:ee:09:83:15:
b4:8d:75:8e:4b:ba:91:53:06:f0:9f:5e:33:4f:b5:8d:ff:b0:
47:87:bb:a5:e1:29:b5:17:81:8d:b5:a8:2b:43:cd:1a:18:f0:
11:09:7e:97:60:8a:19:89:65:21:3f:10:91:fc:d4:6e:c6:91:
5a:5d:db:0f:93:83:7b:39:70:8b:9b:a3:b3:5b:30:fb:11:a0:
de:bd:46:3d:49:e1:62:f2:47:2e:00:af:2d:ed:b7:72:0c:2c:
2d:54:b7:e1:fd:18:f6:21:ef:21:f8:50:bb:a5:55:b3:fd:73:
15:48:2b:7a:1f:cf:28:76:f7:d1:e7:7f:dd:60:d0:16:65:be:
91:80:5b:dd:66:ad:7c:3e:16:33:95:d9:f2:72:f8:e4:ff:81:
42:18:09:d2:e6:99:19:fc:67:89:a1:c4:f8:ef:af:f2:44:bc:
a4:a9:03:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:51:08 2025 by rpki-client