Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
File: 169EtH8IvQvo_AX5sMFaWrxiA6o.mft (raw, json)
Hash identifier: MVbNv2kSKelvuTdTSK2d0zX0iQKMAN1D+QzidiL1+5A=
Subject key identifier: 04:AB:C2:DD:1F:E0:D2:45:CC:9E:31:EF:47:D7:2D:00:87:B0:72:41
Authority key identifier: D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
Certificate issuer: /CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Certificate serial: 01968FCBE2141290E4D89F01430B1C083080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
Manifest number: 0AC5
Signing time: Fri 02 May 2025 07:00:25 +0000
Manifest this update: Fri 02 May 2025 07:00:25 +0000
Manifest next update: Sat 03 May 2025 07:00:25 +0000
Files and hashes: 1: 169EtH8IvQvo_AX5sMFaWrxiA6o.crl (hash: t8pTGMIXP9AORrmGG8HAVQmWI0G414ZB735sxMF0/YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cb:e2:14:12:90:e4:d8:9f:01:43:0b:1c:08:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Validity
Not Before: May 2 07:00:25 2025 GMT
Not After : May 3 07:00:25 2025 GMT
Subject: CN=04abc2dd1fe0d245cc9e31ef47d72d0087b07241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:25:ae:57:8f:cb:35:f3:08:d9:06:7e:09:
e9:96:74:af:9c:d8:6e:83:f4:d6:82:7f:ee:71:a2:
df:cc:2c:97:bf:88:f5:f3:bd:1f:85:75:03:87:5a:
3f:d2:69:05:b3:f1:7d:b0:8a:71:28:39:69:d2:9a:
ae:06:c6:6b:5c:59:14:53:02:fe:9c:25:e2:6f:74:
f0:ec:f8:a4:56:0c:8b:0c:4b:9d:eb:6a:a8:f4:c1:
0e:53:77:c1:0f:f2:83:68:8c:ba:2e:e0:d5:b4:92:
39:cc:3d:30:64:f7:ee:14:29:0a:7e:c1:f6:9d:95:
5d:c5:49:85:8d:60:b0:cc:ed:b8:c6:2c:41:81:54:
f5:4d:f5:49:38:a3:f4:71:9e:30:ce:6a:c1:e0:0d:
a6:10:3e:98:28:24:e2:0c:d8:3a:93:69:8f:17:29:
c1:28:4c:b7:5b:a2:a4:22:d4:80:79:b0:7a:2a:64:
33:fb:91:89:68:57:f5:0e:98:ff:98:d4:38:49:a3:
5f:91:96:f9:d3:c8:c9:6c:cd:41:61:1f:f2:41:10:
f2:3b:43:87:60:f3:41:ff:36:5e:6f:27:8e:71:d1:
7a:4e:fc:0c:ef:d3:2b:01:60:95:78:72:27:72:8a:
d1:fd:02:53:03:ee:47:8c:40:d4:64:f5:ef:08:1c:
2b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AB:C2:DD:1F:E0:D2:45:CC:9E:31:EF:47:D7:2D:00:87:B0:72:41
X509v3 Authority Key Identifier:
keyid:D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:59:41:ca:3e:77:44:5c:db:91:79:a4:43:74:37:ee:58:bf:
28:ff:dc:a8:1e:30:06:98:c1:b8:d8:45:34:17:bf:c0:d1:be:
64:dd:9c:c8:bb:e5:de:6a:8e:b8:cd:b7:2f:2a:18:07:1b:7c:
b7:c2:d7:4c:5d:f2:15:b3:cd:bb:4b:5f:19:60:a5:01:8b:0e:
1b:b0:68:65:e4:5f:8a:25:61:e1:ce:29:b9:ad:2b:13:4a:d9:
96:07:d8:ff:07:93:4d:b0:84:6e:a6:8c:c7:bf:b0:f3:04:ab:
06:1d:3e:f7:e9:26:e1:df:4b:cf:9e:60:f6:86:95:02:f5:49:
7c:df:4a:fc:1b:79:fc:5a:0c:a8:87:6f:fd:c6:50:08:95:ea:
fb:ae:db:45:ce:70:4a:a8:7d:99:61:4a:80:5f:d0:54:96:b2:
2e:8b:b5:ab:d9:05:8b:e1:f8:c9:26:dc:5b:4a:9c:06:1e:3e:
30:37:22:39:79:0e:e6:29:d5:20:05:18:11:36:57:e5:15:8a:
2f:9a:ca:9b:64:50:d7:a6:41:f1:0d:8d:ec:94:4c:04:94:08:
ef:e0:26:01:14:d8:e7:f2:f8:a7:e7:a3:6a:6b:a7:fa:2f:c0:
d3:29:72:c6:0f:b3:35:fa:b2:04:b6:58:dc:db:3a:f4:48:d5:
ba:0c:09:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:04:17 2025 by rpki-client