Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
File: U9L19sohYsiL85oPnekm9CPlMQQ.mft (raw, json)
Hash identifier: UqWhBZKnd5+eeiifzJFqZ+yBR8nYJAHAEmCy/nRvc7U=
Subject key identifier: B7:90:B4:2E:7D:C8:56:31:B9:55:1A:37:34:AA:52:5F:5F:5F:F2:10
Authority key identifier: 53:D2:F5:F6:CA:21:62:C8:8B:F3:9A:0F:9D:E9:26:F4:23:E5:31:04
Certificate issuer: /CN=53d2f5f6ca2162c88bf39a0f9de926f423e53104
Certificate serial: 01967FB43E871257C5EA93C12CC7ED5283B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9L19sohYsiL85oPnekm9CPlMQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
Manifest number: 0E7B
Signing time: Tue 29 Apr 2025 04:00:40 +0000
Manifest this update: Tue 29 Apr 2025 04:00:40 +0000
Manifest next update: Wed 30 Apr 2025 04:00:40 +0000
Files and hashes: 1: U9L19sohYsiL85oPnekm9CPlMQQ.crl (hash: 70VjM0HYFlRdS4EpUWUM89OtUiaAVy3wFXtHQlYxuKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9L19sohYsiL85oPnekm9CPlMQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:3e:87:12:57:c5:ea:93:c1:2c:c7:ed:52:83:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d2f5f6ca2162c88bf39a0f9de926f423e53104
Validity
Not Before: Apr 29 04:00:40 2025 GMT
Not After : Apr 30 04:00:40 2025 GMT
Subject: CN=b790b42e7dc85631b9551a3734aa525f5f5ff210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:34:ff:56:a8:94:fd:15:50:c6:e8:4c:59:
3c:b0:6b:73:94:e6:cf:76:0b:1d:21:11:7a:78:51:
72:30:3a:af:4e:dd:7a:1d:35:68:96:0a:eb:3a:5a:
64:d0:1b:d1:ed:16:83:1d:a7:52:d7:31:93:b3:90:
bb:6b:1f:f5:dc:8c:86:04:8b:8b:bb:91:21:52:e5:
6d:d9:8e:e1:a9:bd:c4:27:eb:f5:c5:27:a5:90:da:
22:7b:eb:dd:0f:2b:ea:d8:09:a5:47:af:94:d8:05:
c3:5a:3d:3f:73:13:31:7a:6f:78:f6:bf:58:14:05:
3c:a6:bc:ad:0c:22:f9:2d:36:bf:7b:e0:f8:fc:a9:
26:13:62:f0:45:50:00:0a:1c:69:da:9d:05:f4:28:
2b:48:08:b3:c7:4a:0b:41:7c:5e:7a:76:71:f4:77:
6f:30:04:12:72:ed:21:a6:eb:3d:8a:f6:3c:2c:61:
34:a0:ff:dd:d2:53:86:90:70:af:31:bf:4d:17:83:
46:c5:ec:b2:b8:44:60:d8:ab:d0:d5:89:9d:af:cb:
bc:91:5f:3c:c1:ea:4a:82:f9:3b:9b:a2:6b:d0:1a:
75:99:35:aa:6f:6f:04:6a:7b:61:c5:dd:6c:63:7b:
1c:61:ed:a4:db:b1:03:ce:7c:03:4f:ce:c6:b0:7f:
ee:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:90:B4:2E:7D:C8:56:31:B9:55:1A:37:34:AA:52:5F:5F:5F:F2:10
X509v3 Authority Key Identifier:
keyid:53:D2:F5:F6:CA:21:62:C8:8B:F3:9A:0F:9D:E9:26:F4:23:E5:31:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9L19sohYsiL85oPnekm9CPlMQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:84:50:3e:3e:64:65:8c:5b:16:db:36:5e:d9:2e:95:20:b0:
3a:37:85:0d:bb:31:22:49:ce:f0:5a:68:71:9c:d7:36:1c:cb:
31:36:97:b5:03:c6:2c:94:5a:ef:9d:16:ab:af:1d:cb:cd:c8:
a7:d0:01:dc:f4:6e:07:4a:76:55:83:2b:72:67:d7:08:f9:71:
57:37:4a:3d:5f:2a:4b:65:b8:f3:0e:85:f5:d8:34:25:3b:2c:
7e:a4:a7:b1:85:2d:75:4b:09:c3:20:3e:14:86:19:e0:70:a8:
2b:e8:7e:7b:67:1c:35:e8:d9:5c:96:67:11:59:d1:ae:15:2e:
f2:6c:75:23:6d:b4:9e:cf:0d:7c:59:b7:eb:b9:a7:c2:2b:a2:
a8:26:71:34:b8:66:28:2b:0d:b7:7c:75:67:e3:aa:e3:9f:37:
98:98:83:25:85:ae:c4:60:e9:75:69:2f:33:bd:66:4d:cc:14:
17:94:61:1c:66:38:86:d4:82:df:0e:44:8c:13:cd:60:6f:c3:
09:d2:f6:62:cb:7e:1f:fc:5c:4e:85:f3:39:a4:84:b5:7f:13:
5d:57:ce:2e:20:41:eb:69:85:78:e6:50:3d:6d:bc:0d:32:d3:
e4:6a:2d:50:0c:71:e3:eb:82:a0:24:d8:2a:f8:3d:9b:2a:7e:
24:e8:76:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:06:26 2025 by rpki-client