Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
File: x9CAN66dCrMNEA0U2WFLeNY5Srw.mft (raw, json)
Hash identifier: /B7WpD+0/qUxGaFYs0DRdcbK6BMz1mTvQ7slKK0tYFU=
Subject key identifier: 21:DC:AD:4A:AD:AD:7A:E3:77:39:D2:9B:72:B2:D3:32:73:44:0E:88
Authority key identifier: C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC
Certificate issuer: /CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc
Certificate serial: 019684DAC0E2FA182741F29FE7F9C836B5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
Manifest number: C5
Signing time: Wed 30 Apr 2025 04:00:50 +0000
Manifest this update: Wed 30 Apr 2025 04:00:50 +0000
Manifest next update: Thu 01 May 2025 04:00:50 +0000
Files and hashes: 1: x9CAN66dCrMNEA0U2WFLeNY5Srw.crl (hash: erkYWfdyhYzwzetUxRLsarnMCjJXwlli1JBVB/866Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:c0:e2:fa:18:27:41:f2:9f:e7:f9:c8:36:b5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc
Validity
Not Before: Apr 30 04:00:50 2025 GMT
Not After : May 1 04:00:50 2025 GMT
Subject: CN=21dcad4aadad7ae37739d29b72b2d33273440e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:db:03:36:18:2a:f8:03:e7:f0:26:97:c5:
2d:a1:e0:0c:1a:d7:e7:61:1c:63:fd:12:98:bc:a6:
32:0e:c1:a2:44:78:68:48:a0:9c:3c:26:eb:e0:18:
c7:1e:1d:4e:32:ea:56:a9:26:9b:f6:7b:36:af:cb:
a5:a5:b8:fc:c1:da:aa:c5:8e:92:51:98:83:44:f2:
98:2e:9f:d6:d4:41:d2:d5:4c:ee:bf:59:e2:f7:4b:
c4:dd:6e:63:5f:69:a8:20:42:e1:c1:bc:8e:b2:52:
12:69:22:cc:1e:17:9a:47:af:46:07:41:a1:68:fb:
69:71:c5:cc:79:a4:e4:da:5e:d2:cd:2a:a8:5a:5c:
b2:a1:fc:bd:c8:55:52:d2:24:f2:9e:45:b0:fc:90:
32:38:2c:70:83:2b:7a:dc:7d:92:1a:f3:ef:78:53:
62:d3:c5:d2:e3:03:19:f2:12:c0:36:0c:89:cf:be:
59:a9:58:7d:b8:8c:19:55:7a:aa:2e:81:c1:da:e8:
af:7c:6c:86:f3:0d:da:b0:b8:1f:0b:aa:30:b3:8a:
ee:26:e6:e9:49:bf:e5:b4:da:5c:81:e2:56:aa:18:
68:0c:1c:2e:2a:e5:0c:c9:85:21:ae:bf:6c:3b:b5:
bb:5c:83:87:01:70:69:44:77:ba:2e:1b:e7:2c:b3:
05:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DC:AD:4A:AD:AD:7A:E3:77:39:D2:9B:72:B2:D3:32:73:44:0E:88
X509v3 Authority Key Identifier:
keyid:C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:5a:bb:bc:a4:02:95:5c:f5:bc:a3:de:af:2c:48:3e:2e:ef:
77:df:36:39:be:02:ed:63:75:49:86:0b:78:24:8f:ad:b8:77:
d1:40:3e:9b:48:21:11:f4:3e:d0:37:59:83:e3:98:0e:f6:ef:
f0:f8:d1:dc:11:14:17:cd:75:7b:71:ef:94:53:fc:ea:8e:8b:
4a:93:11:6e:cf:a8:f9:31:31:76:61:c1:39:bf:00:b4:9a:c4:
4a:92:28:bd:ee:82:f9:e9:ad:5a:47:88:19:f8:b0:d3:1f:42:
10:1d:f8:ae:8b:d8:8b:9e:93:ce:73:1a:21:10:c0:fc:08:7a:
9c:1d:b2:71:2b:c6:0a:66:41:a4:0d:04:e4:8f:12:2a:66:3f:
e2:64:ca:99:8d:85:31:82:16:05:d5:78:e3:08:c4:c0:52:aa:
fd:f5:aa:f2:7b:41:54:9d:4e:07:70:cd:0d:03:e4:52:df:61:
b8:40:a5:b9:57:72:46:9e:36:6d:97:5c:4c:e2:3a:6b:55:87:
3c:15:5d:50:22:34:8e:73:cc:f3:97:c4:4a:d4:cd:0b:69:ad:
03:37:b3:a2:96:cb:81:f3:46:7a:b4:0a:88:2f:f3:d7:ff:30:
f1:32:a0:34:ce:d8:bc:1b:5d:2e:17:f7:5b:d6:1e:4e:53:ee:
f4:94:20:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:40:04 2025 by rpki-client