Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
File: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft (raw, json)
Hash identifier: 1uk2SiIqrLY3ShyDyEPBP5kc/gNy4EeuQFT84+i4XVE=
Subject key identifier: C3:96:A2:8E:46:F9:86:4C:3E:38:94:65:EE:FD:90:64:80:F8:D8:F0
Authority key identifier: D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
Certificate issuer: /CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Certificate serial: 01969303D21F5961438A6732E318B2E84C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
Manifest number: 14AD
Signing time: Fri 02 May 2025 22:00:23 +0000
Manifest this update: Fri 02 May 2025 22:00:23 +0000
Manifest next update: Sat 03 May 2025 22:00:23 +0000
Files and hashes: 1: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl (hash: QZC5wk5uUyVnMYq+y0BcmEk6p1v+ghIyZYa/Cv7+nrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:03:d2:1f:59:61:43:8a:67:32:e3:18:b2:e8:4c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Validity
Not Before: May 2 22:00:23 2025 GMT
Not After : May 3 22:00:23 2025 GMT
Subject: CN=c396a28e46f9864c3e389465eefd906480f8d8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:52:e6:ca:1d:31:66:1a:bd:9c:40:f0:d4:
41:2a:ff:73:37:49:53:24:ec:0c:b8:0a:75:49:4a:
b2:4d:74:43:bb:45:db:68:44:29:d4:e7:ac:78:b8:
bb:e8:b5:7c:b7:ad:94:c3:cb:28:f0:44:7d:a4:a2:
14:22:f5:2c:1f:bf:eb:b6:c3:1d:46:38:24:f3:2d:
f7:f4:dd:a8:c2:9d:7a:f8:78:48:3d:c4:f7:4e:61:
d3:08:f2:42:66:fc:86:b6:b0:7a:6d:f9:d7:40:fe:
cb:a5:3f:1d:81:fc:e6:fa:85:0c:a5:e7:fe:1b:23:
be:21:8d:87:4e:c0:6b:8a:4a:8e:1e:97:1d:33:02:
63:5a:85:81:7b:50:8f:50:6c:09:91:b8:29:3c:99:
9c:eb:ff:a6:7e:d3:fc:52:f8:63:1c:60:16:b9:76:
4d:e2:a4:75:09:b8:0f:f1:54:4b:9e:64:0f:51:c3:
5d:a1:22:ce:df:35:64:4f:14:d9:a4:28:2c:a6:c6:
01:69:00:70:44:87:bc:7f:b6:2d:28:c7:61:4e:c0:
80:15:97:df:8a:45:c0:38:f6:1c:7f:e6:49:40:ae:
8f:d1:d4:63:d8:37:9e:1d:67:65:a6:f2:55:9a:01:
b7:77:4a:30:4c:e3:d7:82:dc:1e:1d:e8:29:eb:89:
1f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:96:A2:8E:46:F9:86:4C:3E:38:94:65:EE:FD:90:64:80:F8:D8:F0
X509v3 Authority Key Identifier:
keyid:D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:cd:36:a9:a2:6c:ad:a7:61:ea:25:bc:7d:82:f2:3e:0c:d2:
24:08:0b:8a:b2:f1:4c:78:8f:f6:ad:bf:47:39:80:39:f6:c5:
60:02:f8:5f:87:df:be:f8:13:e1:2b:58:01:90:23:2c:34:ec:
6e:6e:85:e8:59:7b:11:c9:38:c6:96:ca:6e:0f:9f:b8:b0:aa:
3e:14:7b:a0:5b:60:52:3d:0c:f7:ea:52:e2:ca:6b:96:cf:e9:
6d:33:ba:b9:b2:eb:1b:4f:0c:95:47:06:ac:68:79:be:84:e7:
37:2b:79:17:68:d7:47:ce:fd:48:ee:16:53:c6:c7:f6:28:27:
86:24:14:ee:66:57:b0:be:eb:b8:61:74:f1:15:4a:3b:5f:10:
93:1d:17:4c:00:37:40:23:dc:4e:ae:a1:b8:7a:6b:f2:56:42:
10:0f:51:12:b1:53:03:7e:84:08:7e:52:e8:63:06:45:78:64:
9f:1d:57:8e:e0:d5:67:37:b7:e4:59:21:bd:63:9a:f0:6a:93:
ed:5e:41:3e:1d:2c:ec:d2:f5:38:30:e3:bf:12:bc:55:42:59:
0d:13:7e:f8:e6:17:28:1e:6a:56:4c:5f:8e:f3:05:de:89:2d:
3e:08:ba:3b:44:08:77:d2:2d:8c:61:08:57:1a:d1:a8:38:6c:
7f:86:e3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:26:49 2025 by rpki-client