Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
File: rh967y8S0HaqitWli8uNyvPwvUw.mft (raw, json)
Hash identifier: Zg2UeS1ZXJuwK4GXjXG/kQbIqQJVDCuspW5OWUgbY/E=
Subject key identifier: 4A:A7:F5:E3:72:28:8F:94:44:73:6E:D2:B4:4B:4E:42:04:49:2D:6F
Authority key identifier: AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C
Certificate issuer: /CN=ae1f7aef2f12d076aa8ad5a58bcb8dcaf3f0bd4c
Certificate serial: 0196AAD5317B9FA1963AC35B76AA04AA174E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
Manifest number: 1079
Signing time: Wed 07 May 2025 13:00:20 +0000
Manifest this update: Wed 07 May 2025 13:00:20 +0000
Manifest next update: Thu 08 May 2025 13:00:20 +0000
Files and hashes: 1: rh967y8S0HaqitWli8uNyvPwvUw.crl (hash: XRN6D4M9ebpH1oOPWrrvXu3Z4VisuEw8ClOWQeVMs5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:d5:31:7b:9f:a1:96:3a:c3:5b:76:aa:04:aa:17:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1f7aef2f12d076aa8ad5a58bcb8dcaf3f0bd4c
Validity
Not Before: May 7 13:00:20 2025 GMT
Not After : May 8 13:00:20 2025 GMT
Subject: CN=4aa7f5e372288f9444736ed2b44b4e4204492d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:bb:fc:cc:ab:0f:a1:87:a3:a5:0f:8f:52:
9e:7e:65:70:53:5a:60:07:89:bc:bf:59:be:52:d1:
df:d6:95:94:b5:de:6a:d7:e0:fa:c1:63:60:27:3f:
b3:97:a2:6b:9a:4c:65:36:a6:90:8a:fb:21:de:fc:
4e:b7:da:15:c4:a9:e6:d8:ee:ec:6f:8a:d7:5c:27:
e6:dd:39:07:8e:e4:6a:08:a6:87:2b:d8:fc:bb:e0:
ac:4a:58:78:6a:39:a0:48:54:6c:3f:24:87:e0:a6:
b9:c5:36:a7:00:57:70:05:a7:ed:89:ef:09:5f:c1:
06:81:6e:01:8d:87:3e:f8:bd:23:5d:8e:40:a4:57:
84:ad:a1:d8:2a:08:aa:c2:da:a9:0f:ea:44:ca:29:
d7:f3:e1:5f:98:7b:29:5e:2d:f4:4e:0a:90:41:a4:
e9:9f:7b:ff:65:96:fb:b9:48:09:31:e6:e2:c0:06:
60:8a:82:d7:0e:90:ff:8b:c6:ad:55:5d:2c:8b:c0:
fd:09:9e:39:56:e7:3b:c7:74:a1:0c:8e:1c:03:2c:
0d:03:de:03:ce:56:43:45:59:e3:6a:b0:0c:c3:b9:
3a:60:a1:3e:7b:56:9c:56:35:91:3a:6a:27:04:60:
9b:26:d2:81:53:e8:be:3d:02:97:52:83:04:83:81:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A7:F5:E3:72:28:8F:94:44:73:6E:D2:B4:4B:4E:42:04:49:2D:6F
X509v3 Authority Key Identifier:
keyid:AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:d4:15:04:08:25:3d:ef:2f:56:ab:99:2e:a8:cc:30:ed:d3:
a2:9e:a6:ae:aa:b8:26:cb:b0:02:cc:7b:05:13:5c:8c:27:1f:
9d:48:2d:64:57:30:2f:37:1d:9b:ca:a7:ba:4d:b6:31:49:8b:
c9:d2:4b:a4:17:25:c9:5b:90:76:97:ba:96:6e:6c:30:66:cd:
c6:40:08:97:a1:79:4d:2e:22:e5:09:1b:36:70:23:e0:83:b8:
bd:c7:2c:5c:36:fa:78:b9:d6:23:91:af:4f:23:72:5e:e7:13:
c6:4b:32:06:60:55:b2:53:7f:2b:66:19:20:cd:50:19:97:b2:
7a:bd:2f:bc:6b:7f:66:93:46:93:ed:b5:71:c3:fd:01:1e:fc:
bb:6c:5f:bc:6b:00:d0:92:e2:b6:22:56:30:0d:c2:69:bb:d3:
2b:f3:20:2c:9b:db:4a:7f:16:91:0d:2c:4d:e0:24:6a:91:7b:
f0:83:37:27:81:ac:85:ea:c7:a6:b6:84:d3:a5:78:6b:c2:eb:
78:17:71:d2:23:7a:8b:b8:af:ce:1b:02:d5:68:7f:15:da:5f:
7e:53:90:36:a9:ab:6d:f1:53:4b:6a:af:04:4a:42:43:17:50:
61:0f:c4:21:5b:1a:a9:23:69:d6:c6:61:0f:56:35:c6:91:b7:
d7:2a:44:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:33:26 2025 by rpki-client