Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
File: U1wJpqvN8dobR6tK8_-O_KWBRF0.mft (raw, json)
Hash identifier: bYax76we85Ck/z11WPAucFIopioGWLk3A61acJ4sgDQ=
Subject key identifier: 25:A5:6C:65:5A:AA:FD:62:DB:E3:84:87:D8:65:F7:D9:E4:30:FD:A4
Authority key identifier: 53:5C:09:A6:AB:CD:F1:DA:1B:47:AB:4A:F3:FF:8E:FC:A5:81:44:5D
Certificate issuer: /CN=535c09a6abcdf1da1b47ab4af3ff8efca581445d
Certificate serial: 019681A399D26AC7BDBED83B94D4754DA0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
Manifest number: 0479
Signing time: Tue 29 Apr 2025 13:01:44 +0000
Manifest this update: Tue 29 Apr 2025 13:01:44 +0000
Manifest next update: Wed 30 Apr 2025 13:01:44 +0000
Files and hashes: 1: U1wJpqvN8dobR6tK8_-O_KWBRF0.crl (hash: PDyVyTEvMNItPUwkNc6MZ5iGPWPaavcPD0Y7/7osomM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:99:d2:6a:c7:bd:be:d8:3b:94:d4:75:4d:a0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535c09a6abcdf1da1b47ab4af3ff8efca581445d
Validity
Not Before: Apr 29 13:01:44 2025 GMT
Not After : Apr 30 13:01:44 2025 GMT
Subject: CN=25a56c655aaafd62dbe38487d865f7d9e430fda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:db:64:15:94:66:58:29:ee:b3:85:f0:29:
0a:ac:20:7b:1a:8f:78:32:4c:20:10:85:78:43:ae:
8a:6f:8e:1f:8c:ee:dd:f4:4b:c2:36:e9:a2:23:4a:
8b:36:01:29:1f:8a:a7:b0:e0:d7:b6:93:e5:d7:30:
b6:ab:11:d4:88:10:0a:17:e5:2f:c3:07:41:29:98:
1b:b2:b1:c6:50:02:88:b8:e9:a2:d4:a2:91:31:35:
0c:7d:94:b7:01:a7:cc:f4:c7:37:a8:ed:8e:bc:17:
23:24:de:ac:89:87:96:44:20:fe:5e:03:d0:3a:bf:
1c:76:7d:6b:32:88:4f:68:9e:cb:e2:ca:25:9f:de:
09:6f:25:72:de:fe:9b:d1:33:95:21:3b:6f:88:3d:
a6:ef:26:16:91:4b:e5:ca:66:58:6f:f9:66:b1:36:
42:b6:7b:3e:d6:84:e2:2f:f9:5a:0e:88:8a:a3:15:
23:0b:a3:bd:d0:03:9b:65:f6:94:c5:86:26:88:9f:
6f:40:10:a5:44:d2:48:d4:0d:c3:17:02:1d:ec:c2:
7b:cb:ba:ab:49:ba:ad:f0:ac:b5:a8:d8:e7:f8:e1:
69:05:e0:e8:5f:60:6f:e4:e6:ed:0e:95:c3:29:75:
73:fb:bf:07:46:af:14:2d:d8:8d:56:f7:59:d0:48:
a6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A5:6C:65:5A:AA:FD:62:DB:E3:84:87:D8:65:F7:D9:E4:30:FD:A4
X509v3 Authority Key Identifier:
keyid:53:5C:09:A6:AB:CD:F1:DA:1B:47:AB:4A:F3:FF:8E:FC:A5:81:44:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c4:e4:a1:0b:3c:f1:f3:6f:0c:be:27:54:df:33:a6:29:53:
eb:8e:a4:47:97:2f:7a:f3:eb:63:47:dc:6b:e8:eb:b9:19:4f:
47:87:7b:1a:fb:40:f7:9e:e4:e6:ce:65:6e:85:ec:45:c1:16:
23:fa:36:10:ca:9d:c3:9e:3a:43:b8:3e:02:6b:de:df:c6:20:
ba:11:92:5a:86:47:94:09:fa:0c:5e:2f:ef:39:b6:fb:c7:0f:
ab:2d:af:fe:9f:48:a5:f1:96:c5:ab:5b:ca:b9:7a:d0:21:c2:
9d:17:3d:0a:0a:df:7f:f5:44:87:09:cd:6d:cd:bf:bb:41:39:
db:4e:e3:42:c5:d8:bf:36:07:41:4f:19:b1:d0:64:b3:df:b2:
ca:a8:56:5f:a7:fc:9b:93:a5:7c:2f:a2:2a:b3:f6:37:99:d2:
63:be:4b:26:81:f7:58:c6:4b:cc:72:dc:51:32:e6:5f:5c:13:
de:e3:9f:03:6e:69:bf:92:05:de:6b:fa:33:1e:2f:10:27:9e:
e0:71:3a:f8:a9:2d:6e:d8:ed:43:98:08:c7:da:54:d5:3d:b1:
6a:8d:20:d3:0e:9c:20:1a:ac:79:3b:c3:64:7d:c5:e9:e5:f5:
c3:76:e2:60:1a:f6:2a:74:6c:8e:8a:5d:ec:4a:82:59:06:e2:
22:6a:75:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:19:40 2025 by rpki-client