Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
File: uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft (raw, json)
Hash identifier: rvNBmAoDv0i/4yotAYBEKAFhw39gd7Hf6zR4xRkAUzA=
Subject key identifier: 87:09:81:5F:C3:D3:24:DC:16:3E:9B:98:4F:C3:38:07:16:1D:78:78
Authority key identifier: BA:AF:6C:08:BC:A3:08:C1:C7:8B:0E:ED:8E:F3:0B:4A:04:68:11:8E
Certificate issuer: /CN=baaf6c08bca308c1c78b0eed8ef30b4a0468118e
Certificate serial: 0196771E88EE882EDC77D1CDB8EE8252DCD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
Manifest number: 0491
Signing time: Sun 27 Apr 2025 12:00:11 +0000
Manifest this update: Sun 27 Apr 2025 12:00:11 +0000
Manifest next update: Mon 28 Apr 2025 12:00:11 +0000
Files and hashes: 1: uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl (hash: st6JghMBIiwoCIR4GK6sXry/07ywtYxSqsapl0twtQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:88:ee:88:2e:dc:77:d1:cd:b8:ee:82:52:dc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaf6c08bca308c1c78b0eed8ef30b4a0468118e
Validity
Not Before: Apr 27 12:00:11 2025 GMT
Not After : Apr 28 12:00:11 2025 GMT
Subject: CN=8709815fc3d324dc163e9b984fc33807161d7878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:5e:4e:0b:da:12:4e:d6:2c:fe:77:f0:0b:
18:fa:3e:bc:05:59:90:e0:3b:c6:ac:7a:cf:ec:b0:
b8:64:ec:b0:0f:f9:08:da:6a:04:f0:38:3d:d3:7c:
aa:e6:70:26:b4:4a:df:56:54:0e:d0:e2:10:17:6b:
36:21:e0:87:04:e7:79:39:d5:97:3e:41:f8:6a:9f:
b4:92:9f:b4:6d:2e:15:30:a9:ac:fa:39:23:7f:3f:
ec:bb:a0:99:8a:4d:0e:a2:6b:92:ea:4c:ea:c6:03:
9e:ee:cb:b8:ae:68:42:dc:44:37:7f:50:f6:75:67:
0c:53:6a:ca:82:0f:b6:89:17:da:4f:55:43:a4:07:
1f:76:4f:66:b2:4d:75:03:2a:a2:ef:36:85:71:79:
06:2a:ff:e7:83:95:0c:5c:8c:54:73:5f:a5:3e:8d:
c4:a4:85:54:4c:2d:52:32:f4:a7:bd:fc:ae:68:cd:
d9:49:a8:19:a6:66:0f:fb:e0:88:fa:46:64:48:92:
6f:42:4a:b1:11:e5:e9:e4:9c:48:2e:0a:46:15:4f:
1e:b9:36:b3:b4:0a:31:a2:c6:06:f3:a5:e3:e1:84:
83:07:14:32:7a:86:4a:8c:8e:66:18:de:8a:a1:df:
0e:ee:ae:6e:b0:f6:0b:17:20:47:70:41:88:27:f9:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:09:81:5F:C3:D3:24:DC:16:3E:9B:98:4F:C3:38:07:16:1D:78:78
X509v3 Authority Key Identifier:
keyid:BA:AF:6C:08:BC:A3:08:C1:C7:8B:0E:ED:8E:F3:0B:4A:04:68:11:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3e:89:91:b2:40:1f:ac:3f:a5:ef:2d:ca:71:13:9e:f2:fc:
7a:3d:59:1d:43:30:cb:8c:71:9b:80:e1:b8:03:18:04:c3:91:
69:43:f4:61:d5:b5:34:6e:0b:0a:e9:54:92:30:27:39:49:9e:
aa:d6:c4:27:3c:17:28:d5:91:4f:7b:e7:db:6f:b5:68:c1:cb:
dd:51:0f:db:3f:6a:93:e6:a9:ea:a1:c9:9e:66:2f:0a:46:30:
b3:9e:e6:80:1c:75:73:e1:17:a2:be:a2:b3:c0:19:fb:4c:8f:
d5:b1:5e:36:55:1c:c9:a6:27:46:45:24:30:36:51:8a:63:4e:
c0:ca:0b:8d:72:e5:80:d8:4b:f0:10:a9:3d:85:55:23:cd:4b:
97:2b:42:31:8f:9e:10:bf:3c:bd:42:c2:a5:90:95:2b:b3:f7:
99:c6:24:14:82:95:43:6f:34:83:5a:9d:24:38:56:69:c0:11:
36:0f:c6:1e:24:4c:84:34:fe:62:9c:b2:9a:e8:3a:34:02:e6:
7f:f8:10:38:ad:31:cf:5f:1b:2b:47:d1:80:7f:28:d1:29:0f:
2d:4d:43:f4:96:e0:35:5a:36:dd:31:31:49:71:7d:64:c1:9c:
af:24:96:8c:72:c4:6c:64:fe:39:99:7d:59:1d:65:56:cf:f6:
b9:0e:bc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:30:46 2025 by rpki-client