Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
File: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft (raw, json)
Hash identifier: Khy2vwRbmbSBRBwP38SBW0Q7LSyFsaON5c58NckF3p4=
Subject key identifier: 36:06:29:18:BB:2E:BC:95:F2:5F:88:E9:A6:69:46:81:ED:2D:FC:DB
Authority key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Certificate issuer: /CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Certificate serial: 01967CE9C6A7839531DE907036F16E02E593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
Manifest number: 0306
Signing time: Mon 28 Apr 2025 15:00:17 +0000
Manifest this update: Mon 28 Apr 2025 15:00:17 +0000
Manifest next update: Tue 29 Apr 2025 15:00:17 +0000
Files and hashes: 1: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl (hash: BSyI4jcHWHtfZRxiUbhvaqJOvs/6/D+kr1+cCTiTHBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:c6:a7:83:95:31:de:90:70:36:f1:6e:02:e5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Validity
Not Before: Apr 28 15:00:17 2025 GMT
Not After : Apr 29 15:00:17 2025 GMT
Subject: CN=36062918bb2ebc95f25f88e9a6694681ed2dfcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:11:9b:41:1e:a0:81:c8:8a:d7:44:45:8a:
ed:b8:8d:13:2c:f7:af:b9:63:e9:e6:d8:89:e6:d6:
49:39:3b:14:26:28:fb:91:9b:4e:ce:15:b4:ba:48:
df:68:dc:58:f5:28:5d:f5:fb:43:72:d4:b7:df:74:
ce:97:53:eb:c6:4a:a7:14:da:fd:ad:0e:d5:76:4f:
14:37:15:c3:62:8e:52:2f:66:3b:f0:84:b2:8d:48:
9a:f8:33:5e:77:c4:34:43:19:08:c1:8c:65:e4:b7:
e0:da:e9:3a:c9:24:1a:be:bc:7a:a7:5d:1e:62:98:
f5:70:17:a7:03:19:73:0d:94:16:04:73:27:e8:74:
33:1d:2d:13:39:c4:18:51:e2:37:82:cd:1a:f2:1f:
8f:09:c7:2f:df:96:ca:7b:d4:6a:2f:d5:30:cc:fd:
18:26:12:18:4d:37:83:2d:47:ee:a8:92:65:e8:43:
42:52:d8:d3:48:72:77:75:aa:00:43:18:a4:9b:ee:
3e:41:c8:80:d4:f3:91:fe:b4:4b:b4:75:5e:34:93:
cd:35:13:22:c1:70:1e:c7:3e:65:a3:32:8d:3d:9f:
ad:78:9c:6e:06:bb:1a:40:6a:c9:5e:a8:dc:b3:72:
ac:80:75:b8:3e:dc:38:28:6f:cf:fa:7a:d7:c3:56:
30:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:06:29:18:BB:2E:BC:95:F2:5F:88:E9:A6:69:46:81:ED:2D:FC:DB
X509v3 Authority Key Identifier:
keyid:F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ea:e7:08:80:d7:d0:54:ae:64:40:fe:3e:a6:58:f6:e3:83:
44:38:3f:37:6d:7b:8c:49:51:a2:ce:4e:6d:f6:f8:cc:77:f9:
42:d3:76:18:ef:10:df:f3:a7:61:16:fd:39:e6:6b:02:a2:d0:
9a:ff:20:28:cf:c3:7e:f7:ff:a2:af:92:f7:9f:60:64:c9:11:
6a:b3:c3:d1:58:75:1c:dd:42:77:a7:7c:7f:18:80:79:a4:2d:
7d:8a:bb:6c:c0:01:69:44:3c:9f:1d:18:cf:ce:7f:c1:f1:6f:
6c:85:fe:62:a2:8f:bd:87:50:88:b4:95:dd:17:a2:23:fd:f1:
8d:d9:b8:e5:d0:40:70:3e:12:d7:80:65:49:76:7b:fa:6b:16:
d3:26:47:0c:15:60:b4:b7:13:95:52:af:d2:46:57:32:a6:07:
90:75:28:43:14:77:38:6f:5d:06:1b:fc:81:ab:db:3e:d9:4e:
b1:36:a8:66:55:55:e0:87:cf:d2:fc:c9:d3:32:0f:93:42:d3:
c9:11:fd:36:45:eb:09:b9:ab:d9:ad:64:03:bf:a9:e7:e8:16:
d0:4b:c9:24:61:94:39:11:af:34:eb:b2:eb:c8:bd:04:48:6b:
66:25:6d:1c:ff:c2:ea:74:df:c7:c2:ab:54:97:e3:1f:51:4b:
d6:ab:03:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:15:42 2025 by rpki-client