Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
File: x9CAN66dCrMNEA0U2WFLeNY5Srw.mft (raw, json)
Hash identifier: kKNBaC6dYx51+5yrC5MI3zc7FY3n+ZThYExZeDyCv78=
Subject key identifier: 7A:42:4D:50:72:92:5D:78:C8:BF:4E:C8:44:37:49:9B:C3:CB:BB:2E
Authority key identifier: C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC
Certificate issuer: /CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc
Certificate serial: 019682EC0E298EE8827BB145FB421F34FC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
Manifest number: C4
Signing time: Tue 29 Apr 2025 19:00:30 +0000
Manifest this update: Tue 29 Apr 2025 19:00:30 +0000
Manifest next update: Wed 30 Apr 2025 19:00:30 +0000
Files and hashes: 1: x9CAN66dCrMNEA0U2WFLeNY5Srw.crl (hash: iooQd2vo7jnS0DWxhWds7RK/l7dxWp7JcOoB1Q3pOQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:0e:29:8e:e8:82:7b:b1:45:fb:42:1f:34:fc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc
Validity
Not Before: Apr 29 19:00:30 2025 GMT
Not After : Apr 30 19:00:30 2025 GMT
Subject: CN=7a424d5072925d78c8bf4ec84437499bc3cbbb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:41:72:f8:58:ed:cf:23:99:17:8a:2d:7f:
b0:57:19:54:55:4d:dc:d7:36:4b:05:6c:06:be:ee:
63:0b:a9:b9:30:5e:08:f1:40:4e:0b:c1:d6:7e:08:
67:87:11:86:99:d5:56:7a:cd:41:4d:1e:2d:f7:37:
74:59:57:ab:8b:45:51:09:b2:61:da:9b:3a:f0:c4:
ce:96:78:a9:24:82:ba:35:0f:08:b6:8d:23:a2:8d:
2b:f4:78:29:ac:77:24:8e:1a:64:c2:be:56:d4:24:
00:83:47:b6:23:ce:b3:d6:b6:ca:c6:b7:cb:68:11:
ac:b2:60:3d:17:3e:d0:31:7c:f7:e6:fa:14:7e:05:
a6:b6:5f:b2:92:31:9f:71:39:e4:b8:ed:80:66:28:
bb:a0:6b:8f:00:cb:03:6f:d5:71:62:2e:69:07:b5:
1b:72:ca:0f:45:a1:31:2e:1a:b1:c0:e2:7c:fe:68:
9b:a4:90:68:9a:13:2f:5d:f8:3c:84:a1:4f:0a:71:
26:d9:a5:fa:03:eb:c0:19:44:ec:6d:7f:a3:a6:fe:
66:b8:f8:a5:90:18:bd:a1:c3:b0:11:fb:d0:d3:9f:
7b:1f:ba:1a:c8:2a:67:f3:58:d7:77:25:fa:aa:4c:
83:c5:c9:39:26:d5:0c:28:ab:f9:1a:5f:ef:eb:3e:
e1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:42:4D:50:72:92:5D:78:C8:BF:4E:C8:44:37:49:9B:C3:CB:BB:2E
X509v3 Authority Key Identifier:
keyid:C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cb:15:e0:b0:01:c6:ba:39:06:d9:de:af:bb:47:33:58:ff:
7c:e2:5b:25:58:73:c3:0f:75:d5:89:97:50:c5:d8:b6:7e:89:
55:4c:f7:38:e0:19:f4:9e:04:d1:cd:87:28:94:79:9b:52:f1:
1f:33:da:2c:4c:1f:9f:13:6c:20:b0:78:4c:0a:12:28:fb:18:
06:61:66:ed:bb:6a:2b:b7:58:45:8d:d0:af:f3:8a:3d:82:0c:
cd:a1:cf:cd:84:19:dd:95:12:71:47:2c:a0:1e:85:e5:1d:af:
4a:34:19:84:78:20:98:18:e3:9d:91:80:0e:8e:36:12:b9:cc:
1f:09:7f:ba:75:98:95:df:03:da:00:0f:03:fe:79:09:7f:b7:
1e:de:01:ae:29:5f:fd:6b:45:1d:08:fd:13:7f:b1:2e:ab:94:
28:6b:ae:9c:01:25:66:45:e8:60:6c:52:42:9b:fe:36:12:f9:
96:61:8f:be:b5:42:c8:a8:07:c4:61:15:0e:6e:76:a5:f7:45:
a8:e9:60:b0:f8:1d:d1:87:9a:24:67:e6:3a:e7:5c:fd:7b:f1:
56:c2:c0:c8:09:d0:93:6e:e5:cb:5d:24:a5:fe:ab:bb:6f:c0:
f6:b8:42:ee:5b:ba:2c:b1:25:27:4b:c6:4e:5c:37:eb:dc:13:
46:42:e1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:40:46 2025 by rpki-client