Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
File: t5im6ZG5VaKTURGf9312hksNOEo.mft (raw, json)
Hash identifier: 3CPXZNbHu15BPSy3tF00Hxk4LrfFonTtAKIQrmhRmSw=
Subject key identifier: 15:97:A1:8D:EE:7C:85:B6:0E:46:C4:18:D4:E6:7F:C1:46:B9:F2:23
Authority key identifier: B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
Certificate issuer: /CN=b798a6e991b955a29351119ff77d76864b0d384a
Certificate serial: 01968D38F373292F560A193536013FCFF651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
Manifest number: 0C3E
Signing time: Thu 01 May 2025 19:00:41 +0000
Manifest this update: Thu 01 May 2025 19:00:41 +0000
Manifest next update: Fri 02 May 2025 19:00:41 +0000
Files and hashes: 1: t5im6ZG5VaKTURGf9312hksNOEo.crl (hash: fjheQPrbP7alAcmlJ5rAF89nzUh7uE3y9hpm9qqNJ8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:38:f3:73:29:2f:56:0a:19:35:36:01:3f:cf:f6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b798a6e991b955a29351119ff77d76864b0d384a
Validity
Not Before: May 1 19:00:41 2025 GMT
Not After : May 2 19:00:41 2025 GMT
Subject: CN=1597a18dee7c85b60e46c418d4e67fc146b9f223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:04:df:2b:51:3b:66:bd:36:08:0a:fe:33:
f8:e2:02:35:5a:e9:2d:b1:66:a0:9c:17:2d:b7:38:
32:59:78:1e:10:e6:e9:b0:59:bd:04:4c:9c:88:3a:
48:98:82:a3:6c:f7:04:ed:ef:ca:18:06:a0:5d:59:
65:39:64:6b:68:29:70:db:6d:4f:f3:bb:41:49:2c:
f3:79:56:e6:f6:93:a2:b1:cf:e2:65:6c:d4:2a:b1:
d8:28:eb:a9:16:18:6c:b3:a1:df:27:02:d8:df:4c:
be:73:57:aa:72:cc:66:96:f9:80:2c:70:68:e5:c3:
f3:04:1e:0b:2f:9f:9f:ea:73:8f:30:2f:0f:20:93:
14:5d:46:06:d6:08:ad:b3:7a:d2:65:08:4b:4e:c1:
4c:f2:4f:0f:6b:26:fa:8e:16:b2:e6:3b:e1:fb:86:
7c:bf:26:7b:ec:53:1c:d0:1b:58:19:c8:9f:78:8b:
b5:cd:6e:dd:9f:7c:20:b8:5b:3c:93:1f:b4:7f:98:
b6:34:a6:dc:60:f6:b5:c0:29:d6:7a:e3:19:58:27:
5d:ec:b4:a7:23:d2:26:63:ab:41:e2:93:63:aa:3f:
df:05:57:82:90:0e:b6:68:3c:d5:0f:d8:59:19:46:
b1:9d:c6:8c:21:92:7e:38:37:1d:26:c1:78:be:b5:
6b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:97:A1:8D:EE:7C:85:B6:0E:46:C4:18:D4:E6:7F:C1:46:B9:F2:23
X509v3 Authority Key Identifier:
keyid:B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d0:0b:99:a3:d7:08:21:1e:c0:40:86:de:d4:25:fb:69:97:
a7:78:44:d9:e6:0d:15:11:df:e7:b7:64:05:a3:10:df:af:71:
f2:cf:3e:e7:5c:93:86:f0:3b:cc:6f:39:0a:98:a4:b5:56:ed:
d7:b9:95:a3:2f:24:8b:53:65:bf:e7:0f:6c:a9:62:cc:6e:e8:
1a:53:9d:3e:13:5a:ea:67:b2:f3:4a:f5:f5:5f:55:df:b2:32:
15:01:f0:a7:c7:76:4a:fe:57:9f:ac:97:75:83:4e:e6:5d:00:
b2:c5:a3:f1:4d:89:20:61:5b:01:69:0d:b6:4a:90:41:f4:6a:
35:38:3f:c9:47:97:48:16:db:2d:1a:94:b8:98:51:94:9c:53:
e2:23:33:ec:93:42:dc:c4:4e:83:e7:eb:05:a5:c0:3f:5f:f8:
c1:2c:de:7d:f2:35:ee:6d:b6:6e:6f:65:72:88:41:fa:68:8b:
46:0d:5c:70:50:d3:69:51:dc:0f:5f:bf:5a:72:d2:cb:71:80:
97:49:df:13:82:c3:cf:19:a7:5c:1b:85:d1:79:0a:1b:63:40:
a6:29:23:c8:b7:f4:b2:10:be:b8:12:41:2a:f0:05:c9:b8:c6:
1c:1f:41:ad:11:e0:5d:e9:47:7d:79:34:0a:d2:c8:3f:11:f5:
6d:82:19:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:02:38 2025 by rpki-client