Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
File: C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json)
Hash identifier: G0bRkuod+K+LQoSEhJwMVRnRtxuSpn324XjiT1+SOM0=
Subject key identifier: 58:C3:C4:5A:0F:F7:E4:D4:78:31:D9:D2:64:1E:DA:BE:3C:27:F4:72
Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
Certificate issuer: /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Certificate serial: 01967FB50E2E5F58D9338600872362643F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
Manifest number: 14A1
Signing time: Tue 29 Apr 2025 04:01:34 +0000
Manifest this update: Tue 29 Apr 2025 04:01:34 +0000
Manifest next update: Wed 30 Apr 2025 04:01:34 +0000
Files and hashes: 1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: +OTerRoKCbwJXKoiD6snyARjl6gkYucvy5ixjBui3RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b5:0e:2e:5f:58:d9:33:86:00:87:23:62:64:3f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Validity
Not Before: Apr 29 04:01:34 2025 GMT
Not After : Apr 30 04:01:34 2025 GMT
Subject: CN=58c3c45a0ff7e4d47831d9d2641edabe3c27f472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:a2:8d:69:2e:20:cc:e9:44:6b:7e:60:f2:
38:c1:9b:a3:f7:89:c2:4c:a3:45:10:4d:65:c5:96:
91:ea:45:a0:1d:12:f3:a0:42:ce:2c:5b:8b:30:c8:
27:02:46:4f:8f:8d:74:70:61:73:43:8a:12:d1:ba:
ae:b8:d7:38:43:b1:1a:13:82:7c:5e:e8:89:f1:9f:
5e:78:a9:8e:4e:30:1f:32:25:1f:f7:70:00:d0:37:
b7:a1:54:b8:bb:da:28:48:04:b2:4b:b3:d4:64:8c:
64:95:0c:d1:42:0d:97:fa:c7:b7:28:e5:e1:35:bd:
30:29:1f:51:ae:ac:7e:81:24:76:d7:59:3f:86:f6:
61:06:76:69:11:de:a8:43:e3:82:6e:1e:44:2e:72:
26:e6:1f:47:99:71:c2:81:63:48:e1:9c:7c:58:4a:
16:c0:c9:59:c3:c6:53:c0:5b:0a:1c:f6:10:e0:b0:
d3:ba:3f:20:a9:5e:11:9c:e2:8a:2e:11:0c:aa:dd:
81:ff:f2:d8:01:5b:cf:05:7d:7d:00:f0:77:17:70:
43:f6:47:30:75:6f:25:68:5e:01:39:ff:93:33:a7:
dd:db:b7:55:b2:4c:0d:01:65:63:fd:e0:9b:d3:44:
cb:0e:ac:fa:56:89:9c:fd:68:4d:be:ba:c6:1b:7d:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C3:C4:5A:0F:F7:E4:D4:78:31:D9:D2:64:1E:DA:BE:3C:27:F4:72
X509v3 Authority Key Identifier:
keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ee:63:d2:8d:e0:19:6b:e8:33:ef:36:84:de:43:ed:ce:25:
36:6f:9f:db:7d:e1:d3:7e:57:ab:76:b4:82:09:7c:e7:0a:da:
9e:a9:13:f3:c4:52:3f:97:ce:1d:90:cf:fd:f1:81:b2:95:b4:
d6:bd:0b:04:6f:7b:4d:23:fd:22:f4:ed:31:bf:d4:ce:11:ba:
5b:36:87:93:ca:c2:4e:fb:e4:a1:3e:0c:0a:5d:41:29:29:4a:
86:5e:36:3e:a9:f5:94:01:be:78:d9:3b:aa:50:08:d8:ad:3d:
34:de:0b:fd:63:7d:14:8b:66:95:46:c9:44:be:52:e8:01:53:
08:03:01:8b:70:92:7f:62:c2:df:4d:17:e7:3b:d5:09:02:d1:
1b:a5:f4:a9:f3:b7:93:ef:53:13:19:93:c3:0b:74:3b:4d:9b:
b9:91:90:09:74:57:ae:4d:4c:50:4a:f9:80:d2:78:b7:41:5c:
47:b6:31:a2:d9:30:78:44:5a:c0:6d:dd:04:1c:ba:01:4d:62:
4b:ad:71:60:3d:87:c1:bd:f6:ba:0a:68:d5:85:a8:6c:2a:73:
d2:5b:1d:c9:37:17:23:de:01:5f:57:9a:e7:27:c9:dd:36:ea:
3d:52:be:e8:83:17:b9:78:c0:6c:fb:b1:f2:eb:34:18:61:97:
6d:c9:38:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:25:59 2025 by rpki-client