Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
File: D4jGhrHhIvzcFlwCN6D149mQvwE.mft (raw, json)
Hash identifier: YUM3i4/N6xDOfbJgkuGxEamppSfPv/gNxqv5ss0NHfQ=
Subject key identifier: 21:58:03:7C:2A:49:79:28:3B:62:2E:3F:2B:48:01:C6:DB:EB:5F:FA
Authority key identifier: 0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
Certificate issuer: /CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Certificate serial: 019675D589FD3C04441E6F5677362D1118FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
Manifest number: 0ABC
Signing time: Sun 27 Apr 2025 06:00:50 +0000
Manifest this update: Sun 27 Apr 2025 06:00:50 +0000
Manifest next update: Mon 28 Apr 2025 06:00:50 +0000
Files and hashes: 1: D4jGhrHhIvzcFlwCN6D149mQvwE.crl (hash: IF8vK4bi22HkQZ9f10+mQxxDGK08rOcOi1Ydecn7A7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:89:fd:3c:04:44:1e:6f:56:77:36:2d:11:18:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Validity
Not Before: Apr 27 06:00:50 2025 GMT
Not After : Apr 28 06:00:50 2025 GMT
Subject: CN=2158037c2a4979283b622e3f2b4801c6dbeb5ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:04:35:fd:8f:d8:7b:dd:eb:b7:00:31:38:
e4:9b:62:2d:d8:26:af:6e:2e:57:11:ac:8b:9b:d9:
f1:63:96:c2:a9:44:85:e5:68:bb:6e:3f:4c:be:53:
57:be:4c:b8:6b:36:f3:19:e5:57:c9:f1:4c:3d:40:
3c:fd:aa:23:2a:9c:12:de:db:ba:2c:51:f7:f5:31:
a4:03:1d:c3:43:43:99:40:eb:ef:29:a5:55:0f:b5:
b8:8b:48:fe:ca:dd:78:ea:38:a9:5d:98:c5:24:0f:
bb:08:7b:7d:8c:f8:11:4a:46:a9:6e:5d:15:be:36:
2d:2e:3a:17:aa:f3:da:4e:33:96:8d:93:b4:17:03:
46:e0:50:97:65:c2:1a:9b:ff:f6:16:9a:95:1c:c7:
26:64:59:8a:ab:98:54:c9:19:e3:de:19:b8:ee:41:
98:45:de:43:a0:6d:5f:0d:3f:0a:19:7d:1c:38:9d:
62:2a:12:65:2a:93:fe:0d:3d:2e:e6:33:2f:b5:54:
19:e6:91:36:4b:4e:db:f2:86:a5:cb:06:db:29:7b:
34:c9:02:84:92:64:80:0b:e9:65:d4:b4:af:22:f9:
36:f5:71:70:65:d5:75:d2:5f:df:1a:34:a6:00:81:
78:4d:1b:23:48:9e:89:f7:69:cf:1e:f4:b7:4f:19:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:58:03:7C:2A:49:79:28:3B:62:2E:3F:2B:48:01:C6:DB:EB:5F:FA
X509v3 Authority Key Identifier:
keyid:0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:65:13:a7:a5:89:8e:41:78:a7:1f:76:2b:b5:49:a7:96:17:
fd:3d:a5:cd:c1:6e:47:6c:6e:9e:e4:58:45:ff:88:f1:32:4f:
66:d2:02:a9:1d:2d:3a:d6:76:6c:2a:6d:0e:6d:5a:8f:91:5a:
b4:e8:e5:76:f0:af:7d:c9:4c:68:62:a7:50:c5:53:f0:e2:73:
6a:80:99:95:00:1a:38:1d:21:ae:bc:e3:c8:f4:10:2a:e8:5b:
65:03:e9:9f:3f:47:7f:e6:aa:b2:0a:45:db:f2:29:50:74:4a:
81:08:9d:f5:01:52:c3:26:15:55:ba:88:de:eb:2a:0f:c2:7a:
ea:9f:c5:09:bf:3c:2a:10:ad:bd:f9:b4:e4:58:d3:fb:cd:5b:
e9:00:3d:4c:12:0d:57:50:35:ed:41:aa:55:d3:91:92:f9:61:
e7:72:a3:7d:3e:5b:b8:30:f3:c2:15:45:44:2d:3d:3e:7d:9b:
ac:1c:1b:75:c7:63:ea:ce:4e:1e:af:61:6c:3d:70:d6:d3:77:
6d:ff:2b:f9:69:69:7f:f2:24:dc:9d:22:9d:34:a1:c0:55:d5:
83:b5:38:ad:ae:ba:a8:dc:70:a7:0c:d9:c0:08:9c:8e:6c:e0:
5f:73:ba:c6:9f:23:07:19:1d:18:a3:88:c6:dc:1c:5a:08:d6:
f1:d8:b2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:01:27 2025 by rpki-client