Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
File: _izVtrb_hGG7l5eGHJuBZ2oHU6o.mft (raw, json)
Hash identifier: 70S0Q0vgalKP+ZHbQzBKXPF2Uzin8xUWiGCH6I3wGu4=
Subject key identifier: A6:CF:6E:B0:EE:F2:B5:D7:82:F9:E9:64:CD:86:B1:78:CC:27:1B:E8
Authority key identifier: FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA
Certificate issuer: /CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
Certificate serial: 0196745486A8F04E3E70923D050FC5211C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
Manifest number: 04CA
Signing time: Sat 26 Apr 2025 23:00:18 +0000
Manifest this update: Sat 26 Apr 2025 23:00:18 +0000
Manifest next update: Sun 27 Apr 2025 23:00:18 +0000
Files and hashes: 1: _izVtrb_hGG7l5eGHJuBZ2oHU6o.crl (hash: X1ImxLoZZJGRU/ziY+lP/uHoDufjNY02m4E0eXQcQgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:86:a8:f0:4e:3e:70:92:3d:05:0f:c5:21:1c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
Validity
Not Before: Apr 26 23:00:18 2025 GMT
Not After : Apr 27 23:00:18 2025 GMT
Subject: CN=a6cf6eb0eef2b5d782f9e964cd86b178cc271be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:a9:00:75:a4:14:21:7c:84:33:86:b3:db:
d9:f1:40:c7:be:2f:53:75:de:6e:e5:38:71:c1:cd:
8a:12:02:ba:71:35:d9:84:e1:48:29:6f:54:a1:14:
f0:fa:12:2a:07:72:9b:22:99:26:a1:cf:a7:5f:0d:
18:04:4b:87:d8:21:db:1e:9a:e2:68:a5:a7:7b:cb:
33:67:69:bc:cc:d8:97:66:6e:88:a3:c9:b6:17:e4:
36:86:b9:6d:b8:c2:06:d7:c2:36:4b:ea:90:db:37:
2b:dc:bf:60:40:30:d2:3e:80:8e:db:44:c2:a4:d6:
23:cf:58:f0:a1:09:b0:37:4e:8e:20:10:8f:11:f0:
cb:e5:00:ae:a3:62:40:da:47:c9:71:91:a0:fc:1a:
ca:16:93:06:e3:f8:91:be:2f:f9:ef:51:5c:a3:94:
2a:06:06:40:8f:26:4d:62:39:9e:94:04:36:25:6c:
41:a5:a4:e2:62:88:9f:cb:b8:2f:02:78:1e:ff:a5:
dc:bf:6a:dc:bc:d1:c4:86:b8:76:b6:84:3c:e0:df:
b7:17:41:04:cc:63:2f:87:bc:c1:d5:8d:77:90:04:
95:a6:33:f4:d9:84:a5:14:c5:cd:e5:0f:e9:c4:f3:
25:9a:06:46:4e:17:fc:7b:8a:e1:ef:75:54:99:1a:
e6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CF:6E:B0:EE:F2:B5:D7:82:F9:E9:64:CD:86:B1:78:CC:27:1B:E8
X509v3 Authority Key Identifier:
keyid:FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:55:5c:b0:ef:5d:5c:80:ee:03:86:9b:b8:71:aa:6c:80:72:
65:e4:5f:a7:f3:d9:56:14:41:5c:f6:03:7d:c1:ba:9a:af:1f:
15:f8:d8:d3:8d:4c:70:b5:8b:da:63:3b:57:97:b2:c8:b4:2b:
b8:ee:41:34:2d:b8:f9:d2:d2:7b:29:2a:1f:a0:dd:30:c6:66:
78:4d:e9:f7:d7:84:44:7c:da:c2:09:15:68:3d:a5:f1:d9:7c:
40:fb:ff:74:f1:6a:ce:05:36:db:92:8d:e4:2d:f2:ef:8f:7f:
9b:64:af:06:8f:24:04:80:ea:70:b1:d9:bf:e2:03:70:8b:80:
a1:a2:27:09:22:2e:dc:b6:f6:da:9e:ff:78:69:c1:7c:b5:95:
78:78:b3:ad:08:f8:b1:85:b5:67:d8:a6:a1:c4:ca:1a:71:68:
b1:a4:ba:b2:bc:72:71:9e:49:cb:2a:95:a8:fe:f7:f2:70:18:
0f:ec:4e:0d:40:3c:11:6d:73:fd:80:f7:ab:02:05:b8:90:04:
18:4e:dc:41:50:e8:aa:e9:d2:fd:08:63:2b:72:8a:64:02:78:
9e:55:2d:b8:51:98:85:1b:e3:76:41:5e:de:e3:5e:a8:68:68:
1c:84:50:23:c2:b7:ce:2f:d6:85:4c:03:75:ec:95:a6:61:0b:
7b:fe:69:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:33 2025 by rpki-client