Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
File: g06Y-uclpT43QqjU7ehT9P9juRM.mft (raw, json)
Hash identifier: u9mDHlHox+4+OBvJMYCGjIPxshOhjMLgdhHDPVL7RyM=
Subject key identifier: 09:55:BD:95:61:8D:38:2C:24:3F:C6:94:BC:A4:CE:BC:A6:F9:8B:3A
Authority key identifier: 83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
Certificate issuer: /CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Certificate serial: 01967DC696DF17033D8F08D76744AB50C0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
Manifest number: 02C5
Signing time: Mon 28 Apr 2025 19:01:28 +0000
Manifest this update: Mon 28 Apr 2025 19:01:28 +0000
Manifest next update: Tue 29 Apr 2025 19:01:28 +0000
Files and hashes: 1: g06Y-uclpT43QqjU7ehT9P9juRM.crl (hash: RpJwQWp/yUaHiTNZbVo8z8l3uGf0TQEf1U2aqlmYNnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:96:df:17:03:3d:8f:08:d7:67:44:ab:50:c0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Validity
Not Before: Apr 28 19:01:28 2025 GMT
Not After : Apr 29 19:01:28 2025 GMT
Subject: CN=0955bd95618d382c243fc694bca4cebca6f98b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:ce:32:a4:46:60:44:c7:ea:7d:6a:48:01:
46:45:3d:8b:61:82:4f:47:89:a7:4e:9b:f9:ef:9d:
d5:b3:6c:7c:aa:45:79:58:bd:f8:99:11:b3:c9:7d:
4f:f7:5a:53:66:61:d0:bd:68:d3:8f:b5:e1:bb:1f:
00:60:99:e9:ea:b6:f5:12:c2:5b:c0:79:03:51:53:
6d:cc:f3:06:90:f3:9d:30:fa:a9:8f:be:d9:67:1b:
ef:81:8a:c8:65:6c:69:f5:cb:b7:d6:6e:e3:78:a1:
0f:fd:f8:08:d2:1a:24:36:dc:7b:f1:fb:58:86:08:
82:40:35:74:f1:ae:17:00:08:64:b4:93:99:c7:cc:
a0:55:16:46:f8:d2:4b:48:0c:b8:40:3d:bf:29:3c:
3b:6a:29:68:5e:10:57:a3:a1:14:b7:33:10:cd:93:
c4:0f:dc:25:5c:bb:27:9e:b9:7f:cd:76:d6:32:de:
5e:23:2c:32:a1:1e:de:08:52:69:62:68:85:a4:1e:
38:26:b3:01:b5:9f:f0:28:6d:25:09:93:fd:d5:ba:
17:b3:18:8b:b9:d1:39:d8:8a:c4:37:0a:a2:3e:ec:
cc:0d:44:12:5d:a4:79:7b:1c:0e:ec:6a:7a:58:4f:
4e:09:d1:1e:22:fe:f5:8e:6f:98:1c:42:79:98:40:
07:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:55:BD:95:61:8D:38:2C:24:3F:C6:94:BC:A4:CE:BC:A6:F9:8B:3A
X509v3 Authority Key Identifier:
keyid:83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c8:d0:19:43:c3:03:26:44:5e:aa:d6:b7:f4:5b:6d:9e:9f:
6b:cc:f9:a3:c7:00:fa:c9:ad:d0:f9:d3:79:60:19:23:e2:cc:
31:48:ff:98:39:ac:b9:2a:e5:f0:3f:aa:e9:4a:ea:f7:04:62:
cc:f1:6b:0c:95:00:96:51:79:50:1c:16:a7:58:72:47:3a:30:
d1:a9:1e:9b:e9:ef:5e:0f:bb:1b:ec:88:df:6e:22:ff:20:70:
e4:02:fe:f4:c1:0a:33:45:d1:fe:a9:bd:e3:2c:13:17:3a:d2:
8b:43:cd:4b:c8:bc:40:30:cd:f0:02:dc:8e:38:3e:4a:f1:e1:
bc:f1:8c:a1:d9:f3:19:16:aa:61:65:5f:41:da:8b:f7:55:ff:
93:d2:a0:c2:45:d3:12:83:f1:85:43:91:61:20:c4:31:ec:8a:
e2:f1:19:41:94:a8:6a:da:28:43:9e:3f:8a:24:5e:89:f3:12:
17:e7:e5:5e:d6:88:10:d9:0a:2a:77:9d:e3:15:57:28:65:65:
db:ea:9f:c1:d7:da:91:41:21:40:fc:3f:43:fb:fa:2f:74:d3:
02:65:84:0a:22:7f:22:cf:75:ec:f9:a7:c3:58:b3:67:3b:fa:
20:68:da:96:63:58:33:af:02:74:79:df:b5:7c:c6:a3:f4:f4:
d5:d3:0f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:17:39 2025 by rpki-client