Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
File: sUIEOsH4lSfPigbXJijjaYM8grE.mft (raw, json)
Hash identifier: bWRKVdlQzQTnUyiXfGvQVGmQukuOnl2NURGQN6eEcuA=
Subject key identifier: 77:CF:62:A9:EA:DD:70:79:E7:4D:45:F4:FE:17:CE:5A:71:4C:5B:45
Authority key identifier: B1:42:04:3A:C1:F8:95:27:CF:8A:06:D7:26:28:E3:69:83:3C:82:B1
Certificate issuer: /CN=b142043ac1f89527cf8a06d72628e369833c82b1
Certificate serial: 0196767A3C213C234FAE4A742E75734EAB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
Manifest number: 0982
Signing time: Sun 27 Apr 2025 09:00:44 +0000
Manifest this update: Sun 27 Apr 2025 09:00:44 +0000
Manifest next update: Mon 28 Apr 2025 09:00:44 +0000
Files and hashes: 1: sUIEOsH4lSfPigbXJijjaYM8grE.crl (hash: 6g4Lp7f3PcdLtK+GKVHb7UEELzfMZCVo06dfspLwXVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:3c:21:3c:23:4f:ae:4a:74:2e:75:73:4e:ab:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b142043ac1f89527cf8a06d72628e369833c82b1
Validity
Not Before: Apr 27 09:00:44 2025 GMT
Not After : Apr 28 09:00:44 2025 GMT
Subject: CN=77cf62a9eadd7079e74d45f4fe17ce5a714c5b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:b1:c0:5a:ab:79:31:46:01:6c:d1:10:c1:
63:48:0b:a2:d6:72:1d:aa:cc:4c:71:cc:47:1d:c2:
48:a2:59:44:d0:98:a8:25:d3:65:f6:d6:4d:c1:4a:
4f:fc:b4:1a:1d:6d:a0:b5:3b:83:6f:3c:7c:0c:f2:
c3:79:3e:2e:cd:49:72:02:2d:96:77:ce:e9:aa:92:
fb:0e:b7:5a:1b:5e:ae:cd:d3:8d:7b:fd:27:9c:88:
56:2d:60:8a:46:a7:2f:18:27:9a:65:03:3c:7d:21:
84:a4:36:3a:ca:6a:5c:36:25:67:90:20:cd:eb:af:
53:94:ea:0d:e6:d4:68:67:56:da:89:5a:3c:b5:6c:
9e:5a:49:1b:a8:3d:68:66:64:8c:0e:85:3c:9d:2f:
ce:63:16:38:e1:22:bd:f2:85:b3:4c:79:76:19:86:
8e:9d:63:7c:7f:91:b3:8a:1a:f1:83:04:eb:9a:41:
e2:db:e0:9f:56:7b:ee:21:cc:54:c3:ee:c9:19:0c:
7a:da:04:69:ee:fe:83:76:33:38:54:6d:86:c8:8b:
d8:80:14:7e:93:e2:82:3c:6f:1a:c8:71:59:c3:fc:
19:7a:29:01:82:12:c7:f8:8e:90:51:6e:d0:d4:2a:
04:ff:1d:09:52:e4:d4:a5:3a:5e:8c:1c:5a:8d:93:
d0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CF:62:A9:EA:DD:70:79:E7:4D:45:F4:FE:17:CE:5A:71:4C:5B:45
X509v3 Authority Key Identifier:
keyid:B1:42:04:3A:C1:F8:95:27:CF:8A:06:D7:26:28:E3:69:83:3C:82:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a0:5a:7c:6f:88:3d:cd:ab:71:d5:a0:35:80:16:b3:ec:76:
b6:b6:62:48:e0:5c:a3:ef:80:c6:be:35:ff:c1:d7:4a:63:4e:
a8:76:cf:3e:23:3c:4d:9a:7a:e9:d2:58:47:30:02:a5:2d:16:
64:26:94:bb:71:c6:02:2c:0f:5e:f9:b1:69:c3:e9:ef:34:2b:
0d:b4:f2:a2:3d:f0:0f:08:a6:36:3a:e7:b6:50:55:a3:82:8b:
19:60:88:8e:5c:34:da:83:7c:ee:37:d9:40:70:e7:ef:32:c7:
ad:6a:47:13:75:ac:12:02:0a:bd:31:9d:15:59:f0:bd:98:9c:
27:91:c0:f6:bf:cb:3a:bd:83:aa:c5:ff:5c:5e:fd:2e:09:9e:
90:50:32:63:ae:80:ad:f8:1c:77:2b:eb:66:06:16:22:f5:5a:
dc:c1:a3:c9:06:79:9a:12:e1:26:28:db:de:17:9a:36:d8:07:
f8:bb:f5:6b:da:4d:62:ea:35:80:17:48:33:f2:8a:28:1e:c9:
69:dc:45:0a:c4:ad:e1:3d:71:e0:d8:de:1a:ce:b4:55:b1:e5:
ef:05:57:c8:80:1d:23:a5:aa:f2:5a:8e:b3:1b:81:d7:80:05:
0a:5d:1b:c4:0d:67:fa:92:e2:0e:21:1d:25:aa:81:0d:e2:e9:
06:12:e7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:12:34 2025 by rpki-client