Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
File: 15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json)
Hash identifier: raZ12A1VO3IFBMY/4Dcdf4BVDjbF/E+dmrdscAq+B1Y=
Subject key identifier: E9:00:F4:1F:0C:3C:69:72:88:01:95:67:DD:99:96:9C:1D:B9:DB:37
Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
Certificate issuer: /CN=d7958a94503a70421749def05efe63a317d18ac2
Certificate serial: 019676E7CC2804194794F5B65B2C11EFF96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
Manifest number: 061E
Signing time: Sun 27 Apr 2025 11:00:24 +0000
Manifest this update: Sun 27 Apr 2025 11:00:24 +0000
Manifest next update: Mon 28 Apr 2025 11:00:24 +0000
Files and hashes: 1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: AebIkEPGzFKV48o/7YfMHT4lA9l5jEyT2XpSOn0CASE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:cc:28:04:19:47:94:f5:b6:5b:2c:11:ef:f9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2
Validity
Not Before: Apr 27 11:00:24 2025 GMT
Not After : Apr 28 11:00:24 2025 GMT
Subject: CN=e900f41f0c3c697288019567dd99969c1db9db37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bd:1e:ee:a8:74:d2:0b:1d:97:14:26:bd:3e:
d4:b5:a9:fc:bc:93:8a:63:80:b5:4b:3b:04:4b:ef:
db:23:e4:f3:f3:f3:93:1a:86:17:0d:b9:00:0b:61:
01:89:85:ff:11:80:c8:c8:62:53:e7:fb:01:d7:de:
19:18:9d:80:27:f8:0e:df:84:ce:7c:78:84:69:77:
46:3c:b6:66:fb:7d:0a:6f:c0:ad:74:a6:27:64:5a:
e8:74:da:2b:9f:8c:2a:8d:8a:dd:35:f9:9b:3b:b4:
05:07:87:86:3d:e1:88:eb:99:f3:4b:09:ee:50:f6:
c5:d7:ff:16:47:b0:7d:32:32:0c:e8:68:6e:96:74:
c7:03:49:27:7c:09:64:b8:c2:6d:38:fd:88:84:2b:
cd:35:a0:ee:64:28:da:87:64:55:1e:09:fc:e2:d6:
f7:88:91:3d:dc:b1:1c:c8:91:54:cb:62:44:dc:16:
e8:ad:85:b8:ee:75:76:d4:65:3d:02:89:58:40:d2:
0f:55:b9:ee:83:84:03:de:0f:e6:22:01:eb:85:6e:
00:77:73:dc:7c:bd:8e:25:c0:05:cb:80:0f:f8:53:
82:f4:6d:a4:75:7e:15:6e:2e:38:a6:0e:f5:ca:02:
43:40:7a:9e:4f:31:17:d4:16:22:bd:e9:c5:18:17:
5d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:00:F4:1F:0C:3C:69:72:88:01:95:67:DD:99:96:9C:1D:B9:DB:37
X509v3 Authority Key Identifier:
keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ec:cd:2c:f9:b4:b3:02:5a:62:b8:ad:24:58:94:b9:f1:63:
c9:85:24:c7:bc:7b:22:c3:6c:4c:68:ad:68:84:3b:42:16:44:
e6:74:d0:01:9c:2b:5e:d5:06:06:7e:ed:ee:f5:1d:1b:f0:d2:
97:68:51:14:4a:a3:31:32:5b:b6:b9:14:bf:9a:19:3a:9e:0a:
75:1b:a4:89:61:14:98:2f:7d:9d:4c:e1:59:45:fa:bb:b9:df:
f9:78:e2:a9:15:9f:34:84:95:66:fb:73:bf:6b:b5:15:a3:d1:
72:39:16:b4:6f:a5:1c:f4:0f:52:75:3b:d9:61:94:da:d9:df:
d4:00:1c:ec:cd:d2:90:fa:d7:1c:78:aa:b5:3b:15:30:e4:1d:
5e:25:ae:67:35:97:c9:96:1f:9f:47:db:89:ec:1e:12:c4:dd:
e8:cf:63:4d:b6:8c:1b:f2:b8:22:94:1d:be:02:95:25:32:f1:
8b:11:06:bd:86:ec:67:d1:8b:31:17:c1:58:b8:a4:75:56:d9:
7f:85:36:c9:f7:fe:dc:fc:ba:3e:a2:16:00:7b:60:1f:4a:37:
1d:d8:b6:60:20:d8:2c:9c:f2:52:c3:23:c4:2a:59:3a:39:7a:
f0:6e:85:f0:bc:6a:04:d4:78:ba:20:8b:1a:f7:77:eb:2a:44:
bd:5c:59:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:05 2025 by rpki-client