Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
File: R5jSPWIery3VeYDVoA-8zJhYgvI.mft (raw, json)
Hash identifier: /isq2XcO0xkvuSqzDKYfb4AyR8Dyip9YcMA4Il860Tg=
Subject key identifier: 2D:67:EC:A4:25:BD:59:E9:F2:E6:10:C9:C0:F0:02:05:46:8C:13:81
Authority key identifier: 47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
Certificate issuer: /CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Certificate serial: 0196741E431C79704F4AF965BF23139017B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
Manifest number: 0F09
Signing time: Sat 26 Apr 2025 22:01:02 +0000
Manifest this update: Sat 26 Apr 2025 22:01:02 +0000
Manifest next update: Sun 27 Apr 2025 22:01:02 +0000
Files and hashes: 1: R5jSPWIery3VeYDVoA-8zJhYgvI.crl (hash: JcEgplgp47eqoOj4NLmfmX0tXSetYVPVUZuH19RkhmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:43:1c:79:70:4f:4a:f9:65:bf:23:13:90:17:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Validity
Not Before: Apr 26 22:01:02 2025 GMT
Not After : Apr 27 22:01:02 2025 GMT
Subject: CN=2d67eca425bd59e9f2e610c9c0f00205468c1381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:7c:6b:50:d2:49:3c:46:90:98:27:cb:11:
86:42:f5:67:c5:1f:22:39:c4:67:62:f9:45:7f:28:
93:72:db:f1:f8:89:c1:fb:dc:10:99:84:8e:69:75:
14:79:90:1f:ec:29:f8:65:d7:77:4e:68:fd:75:1e:
3d:f8:34:e4:96:7b:2b:8c:12:dd:1e:b6:4c:ce:90:
28:49:31:29:3e:16:9b:f3:89:95:12:3b:a7:5a:ba:
93:69:73:7b:55:39:74:a7:e5:d8:62:a8:94:13:04:
8b:6c:b9:1e:01:9c:76:8e:87:5b:d1:18:5d:11:7d:
e0:06:90:49:cf:9d:ac:7b:4b:c7:d6:4d:c9:4d:57:
5b:9a:80:d6:53:be:61:b5:c5:b9:17:07:12:cd:65:
ee:e0:b3:0b:2c:c6:21:6b:30:a7:5e:a4:53:c3:65:
6e:e0:68:cd:27:d0:d7:e1:83:59:c7:13:d9:83:71:
c5:1b:bb:42:d4:13:09:98:5a:1b:81:d7:be:d9:12:
e7:23:38:26:a6:73:4d:b7:77:60:f9:08:c1:08:3e:
13:b7:08:9e:6e:21:4c:31:21:e4:bd:2e:12:48:26:
e9:83:c2:92:fe:20:bc:70:3e:76:1d:ee:16:4f:38:
74:1f:f6:0e:3f:e9:a2:17:14:a4:e5:5f:e1:db:33:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:67:EC:A4:25:BD:59:E9:F2:E6:10:C9:C0:F0:02:05:46:8C:13:81
X509v3 Authority Key Identifier:
keyid:47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a6:bd:1a:3f:9a:7e:01:e1:60:71:e7:25:08:51:13:6c:9f:
b9:bd:3f:8e:c1:34:b0:67:d9:08:55:91:27:24:98:74:b3:47:
fd:e5:e4:6c:3f:15:4b:40:9a:e5:1d:c5:b7:81:14:63:48:93:
c9:cb:fb:ed:82:ad:34:8f:69:c9:76:2e:fe:79:83:6e:0c:4e:
d1:8a:57:91:76:19:48:2c:bd:82:d0:16:f8:5d:70:1c:e4:95:
e1:b6:0b:93:3b:fc:51:32:30:48:d5:8e:cf:e2:c5:41:12:a1:
2e:03:e9:84:5d:1d:c7:49:16:10:ae:23:a5:0d:85:5b:74:7c:
fd:3b:ec:1d:61:e8:c3:ea:ca:48:90:b9:63:a8:14:8c:9f:ea:
6c:a4:ea:b0:da:b5:e7:d0:34:9b:3b:6a:c7:3a:38:1a:10:b0:
38:a6:15:0d:c4:c9:19:9b:2e:35:54:cf:6a:2a:18:c2:ed:9c:
1b:4d:db:88:ca:86:88:6a:c8:31:ae:fc:cf:80:fe:8a:57:b5:
11:bd:e8:9a:ed:3b:d0:9b:dc:53:c5:98:d7:50:c5:68:44:50:
80:c9:f6:02:0d:01:27:e7:8d:23:b5:e3:af:d3:37:6d:95:ba:
d4:7e:e2:bc:93:0f:73:64:e9:43:05:85:1b:d4:7f:47:d8:93:
36:ab:1b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:02:50 2025 by rpki-client