Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
File: r1UJ13Yi0who8jYTxagW5ySEAWU.mft (raw, json)
Hash identifier: u/qaOAHKA7tBaJsMxVeVOix3Jtn7sWeU58I/XSMaSnc=
Subject key identifier: FC:EF:56:99:E0:F7:4F:3B:50:92:02:5E:FA:6D:DA:17:4B:B0:6D:01
Authority key identifier: AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
Certificate issuer: /CN=af5509d77622d30868f23613c5a816e724840165
Certificate serial: 01967DC5EE80E325891636AE938F6955BBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
Manifest number: 05C7
Signing time: Mon 28 Apr 2025 19:00:45 +0000
Manifest this update: Mon 28 Apr 2025 19:00:45 +0000
Manifest next update: Tue 29 Apr 2025 19:00:45 +0000
Files and hashes: 1: r1UJ13Yi0who8jYTxagW5ySEAWU.crl (hash: c6OQby3mR7KqGOhffO9Y3c2wquSaITxtLH1vArKS3yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:ee:80:e3:25:89:16:36:ae:93:8f:69:55:bb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5509d77622d30868f23613c5a816e724840165
Validity
Not Before: Apr 28 19:00:45 2025 GMT
Not After : Apr 29 19:00:45 2025 GMT
Subject: CN=fcef5699e0f74f3b5092025efa6dda174bb06d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:04:94:d8:e1:c2:a7:8e:46:35:7a:ee:d4:
62:db:53:cd:e0:f3:07:85:25:07:0b:24:55:73:46:
28:99:13:ba:43:3d:11:c7:76:8d:af:3f:41:a2:07:
d3:4c:3f:f7:84:94:26:dd:d6:d8:36:7f:2d:b2:f5:
c9:c9:e1:2f:ca:67:c6:7b:30:35:77:58:66:5f:82:
19:15:b0:29:5a:5f:f6:03:c0:e0:1b:bd:4d:4b:5f:
d8:45:8a:5a:e2:15:fc:76:80:fd:33:e3:3e:df:7b:
3b:b8:f7:78:42:d3:10:af:a2:24:77:66:58:7c:29:
5c:c2:ce:5d:8f:0c:6e:2a:00:3a:89:d2:06:f3:d7:
32:74:d0:4c:66:71:94:7a:2d:40:49:42:5a:3d:e3:
cc:36:81:e4:89:d1:62:a0:02:7a:40:99:86:e4:43:
95:fc:ec:92:51:a4:e0:42:c7:7e:7e:db:fe:a0:de:
44:d5:2b:15:90:10:3b:48:08:47:ca:5b:b4:5d:20:
ab:9a:0f:c6:da:d3:70:c8:b1:f5:fa:35:8a:59:ae:
35:4c:62:98:da:db:11:9d:89:1f:64:7d:80:b7:21:
6f:4c:d6:13:a6:0e:c0:44:9f:14:79:1b:d5:85:00:
5e:ff:bd:76:a7:ed:ae:71:17:34:95:57:64:45:77:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EF:56:99:E0:F7:4F:3B:50:92:02:5E:FA:6D:DA:17:4B:B0:6D:01
X509v3 Authority Key Identifier:
keyid:AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cd:28:45:27:16:f8:17:9e:26:76:30:aa:7f:c4:43:b0:ff:
94:c5:58:13:c9:b8:d6:6a:04:26:4a:74:b8:78:d1:09:21:dc:
29:04:05:61:2b:00:30:8a:60:be:a7:fe:6c:ab:75:23:29:a6:
a3:28:3c:ef:f2:2c:62:f5:0c:ab:ad:56:2d:92:bd:35:8d:63:
86:f5:44:9e:96:40:2b:6e:cc:32:f3:4e:02:e3:7e:b1:42:01:
38:88:e4:35:2b:4e:50:22:1f:ab:7f:77:49:11:70:83:c7:70:
04:87:dd:ae:eb:cb:fb:31:f0:3a:13:7e:d3:52:6f:84:e0:0b:
d9:78:7c:d3:56:b0:2d:52:70:34:2b:fa:e8:cc:9c:ef:b3:28:
f2:6c:56:18:72:4e:73:dc:ee:9b:cd:71:8c:d4:92:73:9b:b0:
af:e4:69:53:c4:2b:d0:e4:e8:9d:73:d4:67:57:e4:93:ce:a9:
ec:2c:80:47:99:78:90:f6:4f:46:97:5a:63:1f:5c:79:d6:71:
e7:84:22:8f:ee:02:8a:3e:ca:9c:24:b1:d5:15:d3:2c:08:0e:
ff:bc:7e:76:6d:bb:71:af:da:d0:98:53:52:8a:79:24:da:d9:
39:d7:84:97:3a:94:6b:aa:2c:ab:73:45:9a:52:35:4e:dd:46:
6f:5f:b8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:23:48 2025 by rpki-client