Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
File: 9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json)
Hash identifier: J8t4Jon8umU1+vUbCOlkiZau5Zkgr8MXieHvlrvXJXI=
Subject key identifier: 60:B4:28:F9:17:3C:40:11:0B:33:D8:16:94:CE:45:D0:DE:3C:0B:B7
Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
Certificate issuer: /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Certificate serial: 0196827E6520AAC8EDC81138284F6EDF3D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
Manifest number: 1512
Signing time: Tue 29 Apr 2025 17:00:43 +0000
Manifest this update: Tue 29 Apr 2025 17:00:43 +0000
Manifest next update: Wed 30 Apr 2025 17:00:43 +0000
Files and hashes: 1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: mCfKKFWQaURaLPXiuzgP1k77p8VdFe0Z2RHZLHfLnCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:65:20:aa:c8:ed:c8:11:38:28:4f:6e:df:3d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Validity
Not Before: Apr 29 17:00:43 2025 GMT
Not After : Apr 30 17:00:43 2025 GMT
Subject: CN=60b428f9173c40110b33d81694ce45d0de3c0bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:56:00:be:d5:3d:41:ab:a5:3a:31:55:ea:
21:40:95:f1:a1:d3:54:6d:a7:f6:6b:7f:7f:91:ff:
33:89:dc:67:b2:c9:3b:14:d4:3c:fd:28:02:36:87:
5e:a1:49:e0:04:30:a5:73:6c:18:2c:45:58:69:04:
63:d7:a4:b5:80:93:ea:8b:52:97:69:6d:77:11:76:
4f:e2:03:1a:81:37:49:ff:59:1d:89:7b:5c:86:49:
17:05:a9:db:79:ee:a4:08:c7:d4:06:ff:e3:a4:4a:
cb:b5:6d:4e:10:56:5e:6e:11:29:04:40:11:3e:74:
61:8a:31:6d:a4:72:08:83:c1:cf:8d:ae:2a:27:90:
a6:2d:f9:45:2e:d2:24:99:8b:04:a6:7d:cf:f1:9c:
c1:95:bd:39:0a:7b:38:60:76:e9:2a:4f:16:81:0c:
67:48:41:b6:41:26:f2:10:4f:87:17:ab:dc:22:7c:
95:a6:4a:c6:ef:1e:16:bf:83:36:de:bc:68:93:96:
8f:b0:85:f2:6e:f3:9d:c6:52:04:da:86:51:5c:7c:
2c:2e:a5:6c:01:85:65:7a:5b:66:92:f1:dc:b7:c4:
62:fa:f1:02:8e:7f:ac:a2:b0:9a:d3:8d:91:61:c9:
76:af:89:09:41:3e:01:d5:f4:98:55:6c:e5:ac:33:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B4:28:F9:17:3C:40:11:0B:33:D8:16:94:CE:45:D0:DE:3C:0B:B7
X509v3 Authority Key Identifier:
keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:63:8b:e8:85:ab:8e:01:9e:f7:b7:61:82:27:c6:9c:d1:21:
bf:e4:53:09:ed:7c:f1:12:e5:17:0c:29:d4:89:a0:d4:c0:eb:
14:d7:30:31:29:e8:4a:87:a3:df:d5:55:82:e2:0a:c6:98:6e:
c7:d1:2a:e9:42:57:1c:34:9f:97:b5:d7:9c:64:a4:b3:b7:ef:
6b:8f:05:7b:f4:34:7d:ad:28:e4:ef:ea:a7:99:3f:ad:7d:8b:
3d:64:87:a1:10:4e:95:26:dd:4d:1d:18:67:ce:44:61:e0:af:
77:0a:a5:21:d8:f9:57:4b:16:71:7f:48:2e:8b:38:e3:67:ef:
a3:b3:7e:37:be:4c:64:62:61:f8:27:28:aa:e8:e8:02:6a:89:
05:9e:b8:2f:d3:0f:35:49:b9:89:13:1a:7e:5f:12:94:44:4d:
04:12:ca:fa:5b:c9:ca:b0:67:7d:b4:9d:af:ff:37:55:35:c7:
e1:b3:46:1c:af:2b:e0:d1:7e:d9:fe:ab:f1:dc:e1:d9:81:a1:
ed:5f:0f:61:9f:d5:1a:5b:06:2f:e0:4b:95:02:72:33:01:56:
3f:51:51:d6:26:59:50:18:d3:f4:33:b6:79:96:d2:26:22:68:
2e:8b:13:2f:5e:38:73:44:ac:49:43:21:8f:2c:73:43:69:c7:
cf:d8:0e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:02:00 2025 by rpki-client