Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: GXxhdobWqd5Ok/cfpVm9RWB8ZOWUWacQcf/btYHGzdE=
Subject key identifier: 81:9B:4B:92:67:EB:5E:1E:32:A1:93:F7:81:6C:0D:63:54:8D:83:08
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 019674C267B6619CB14FB7C8F162B155151A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 14D6
Signing time: Sun 27 Apr 2025 01:00:19 +0000
Manifest this update: Sun 27 Apr 2025 01:00:19 +0000
Manifest next update: Mon 28 Apr 2025 01:00:19 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: wz3F/53v8dtIm5udH04tbVlHuv/BpwHtURfZnmUFx6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:67:b6:61:9c:b1:4f:b7:c8:f1:62:b1:55:15:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Apr 27 01:00:19 2025 GMT
Not After : Apr 28 01:00:19 2025 GMT
Subject: CN=819b4b9267eb5e1e32a193f7816c0d63548d8308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:00:8a:fe:33:24:07:75:a6:98:72:86:b6:c6:
a6:c2:5b:a7:e4:b0:df:92:d5:cb:6f:c8:d6:a1:0c:
63:46:76:be:04:6b:29:87:30:40:6e:76:22:ab:70:
d7:eb:15:b0:f6:19:cc:8d:d5:8a:6a:2b:ae:71:80:
f1:51:cb:38:31:e1:7a:1a:d2:06:21:ac:ff:3f:d3:
03:18:fa:05:9a:43:79:4b:ec:35:ad:3b:6d:ef:71:
1a:ee:fa:89:e1:1e:d9:69:0d:a2:f8:1d:c2:9f:f7:
0d:cb:35:49:03:1d:26:aa:6e:69:dd:fb:32:63:ac:
f0:a0:aa:b2:1b:0f:ca:8c:98:42:c7:d8:df:75:51:
9c:01:34:47:be:23:9c:fe:bd:ff:30:e2:5d:41:d8:
1b:66:cc:ba:77:77:37:2e:8c:55:85:cd:a3:7f:8a:
66:0a:87:3e:b3:c3:2a:48:a8:05:16:51:53:83:1d:
fd:85:d6:cf:0e:d0:35:41:28:2e:1a:cf:73:2e:86:
3f:dd:8d:c4:fb:26:38:c2:b1:f5:b4:66:48:07:2c:
0b:1f:87:c4:34:0b:53:48:99:81:c6:fd:5b:c2:d9:
f1:54:ef:57:78:a5:3e:35:01:5b:27:40:89:5a:c6:
50:27:9f:9c:de:28:ac:d1:17:10:7b:1a:85:c1:a7:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9B:4B:92:67:EB:5E:1E:32:A1:93:F7:81:6C:0D:63:54:8D:83:08
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:20:91:54:25:2a:77:b7:ad:d3:bf:b2:2f:9a:ab:22:be:c1:
8b:a3:dd:67:3e:32:b7:09:d7:b7:1c:1e:1b:65:b8:35:51:a0:
ec:ed:7c:57:98:f2:31:1a:91:10:8e:fb:d5:f2:87:29:e7:52:
2f:71:84:b1:c2:23:dc:f5:75:1e:53:ca:6a:9f:49:a0:2b:e3:
e9:9c:fd:5c:91:15:11:78:84:d3:4b:c2:88:f9:2a:ef:23:da:
d1:af:30:52:fc:b8:4c:2c:96:52:4a:f3:df:8f:d8:55:fa:31:
f2:4c:0d:7e:d4:0d:cf:f0:3a:df:6a:ce:a2:1b:11:a6:94:32:
f5:9d:77:a1:de:02:a2:6d:cb:a0:b9:57:62:78:55:0b:bc:3f:
5f:78:0a:58:bd:c5:0d:4c:06:bb:11:6f:b2:76:30:10:ea:2f:
52:74:20:c1:67:45:ce:50:0c:9c:11:9d:24:be:5d:e4:82:d3:
bc:14:f0:4c:8e:00:6f:25:c0:cc:f6:65:c0:e1:4e:0a:47:47:
1f:66:5d:e4:7f:67:a8:22:58:74:cb:28:1c:34:f9:63:d7:18:
ad:91:c3:d4:54:40:0a:49:e4:ae:b1:cf:a2:87:97:cc:94:33:
b5:11:97:54:a0:40:56:fa:93:d1:c2:ac:4e:25:c0:5b:a3:97:
65:0b:d5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:41:44 2025 by rpki-client