Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
File: 2u6A610wBIVU0K79Q7zu0z791Kk.mft (raw, json)
Hash identifier: nsAXdBUQ5pa0dA3A2UvgiAJTP3/MmqqfgJD1U+LFqoA=
Subject key identifier: 42:77:DB:96:AD:40:98:92:35:85:23:01:31:77:7F:8A:7D:16:30:E9
Authority key identifier: DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
Certificate issuer: /CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Certificate serial: 0196876D88BD00CED7B6EA8DA70933865714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
Manifest number: 11A7
Signing time: Wed 30 Apr 2025 16:00:24 +0000
Manifest this update: Wed 30 Apr 2025 16:00:24 +0000
Manifest next update: Thu 01 May 2025 16:00:24 +0000
Files and hashes: 1: 2u6A610wBIVU0K79Q7zu0z791Kk.crl (hash: n0w6uIarR8uyzyKjdvDqRmT/s4tu9lR84aYgvyNbLgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:88:bd:00:ce:d7:b6:ea:8d:a7:09:33:86:57:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Validity
Not Before: Apr 30 16:00:24 2025 GMT
Not After : May 1 16:00:24 2025 GMT
Subject: CN=4277db96ad4098923585230131777f8a7d1630e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:7a:82:4a:6e:8a:20:40:4c:78:59:7e:03:
85:74:c7:90:83:06:91:cf:d4:b9:2b:f3:b9:2c:2d:
a1:78:c7:f2:33:f0:4b:21:d8:00:ed:35:26:1b:2a:
98:b9:48:71:d4:52:3e:66:fd:cf:9c:f5:11:c3:0c:
86:1d:bd:bc:33:a1:61:ca:82:8a:42:07:0d:6a:3e:
37:bc:2d:a1:6e:da:25:fb:21:b2:db:ab:96:bc:85:
07:b4:08:65:39:18:71:ec:7d:eb:69:25:6b:03:1f:
7e:36:ca:d3:49:2f:f4:25:e5:cb:d4:5b:e8:25:57:
ac:2d:39:05:a6:ee:dc:68:90:8d:f3:58:2b:77:ad:
6e:db:3e:ff:c7:5d:6c:b9:cc:12:c2:7d:75:c3:30:
f4:3a:30:52:cf:00:26:6e:f1:38:14:5b:ef:63:05:
62:05:ca:1d:41:8a:97:f2:94:3e:de:e6:0d:42:90:
1d:7c:de:0e:d3:02:7c:44:c8:ee:6f:46:de:3d:91:
e3:b8:c4:c8:8f:43:c7:4a:28:f9:cf:a2:ec:4e:7f:
58:26:1a:a3:c9:0e:e9:0f:14:02:be:70:1a:9a:1f:
9c:0a:cb:b1:78:46:03:3f:7b:e2:0b:89:d3:89:4e:
57:e4:62:f9:73:ba:81:f2:fe:50:4b:89:99:6d:0a:
89:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:77:DB:96:AD:40:98:92:35:85:23:01:31:77:7F:8A:7D:16:30:E9
X509v3 Authority Key Identifier:
keyid:DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:94:1d:d1:3c:b8:ae:10:dd:4f:b4:41:ed:c1:12:05:0f:7a:
e0:8d:be:f1:2c:d2:b0:da:ed:84:45:e3:94:37:85:86:ea:30:
1c:b2:58:b3:50:30:6a:a7:68:44:7a:bc:36:9e:99:d6:c6:43:
ba:b5:ee:4b:a7:fe:20:59:78:db:2f:49:d0:e7:37:8e:3e:af:
2e:bb:e8:ba:45:02:ad:7c:40:6b:9e:95:b7:f7:45:2e:e3:6e:
32:10:a4:bf:8a:38:db:76:76:9f:0c:37:6d:e3:b1:17:ac:b0:
fd:f2:c5:48:73:ce:e2:73:1a:30:7f:c1:53:97:45:1f:07:51:
9d:fd:16:5d:58:3a:dd:56:c4:10:7a:df:72:a3:e7:81:36:4d:
a6:13:33:81:87:77:aa:b4:d4:9d:a9:a3:55:fa:65:02:2d:b3:
a5:62:50:4e:29:1d:7b:dc:91:5c:10:85:d8:96:7d:cf:5a:18:
7a:9a:01:b5:fc:be:17:94:db:ef:8d:90:e3:f3:15:d5:32:67:
24:b2:31:a2:77:56:51:ac:f1:9d:ca:0a:e6:ad:5f:6a:2f:de:
dd:34:18:f0:a3:4e:51:19:3c:99:61:64:2b:0e:89:d7:69:6e:
fd:87:1d:88:b8:c7:02:00:4b:cc:88:89:1e:54:6c:43:58:64:
b5:08:46:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:41:33 2025 by rpki-client