Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File: INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier: SzAuzpx3ygyYSu+ouq9ocet34yk982Pl3VAexZKTzEI=
Subject key identifier: B9:DD:2F:8E:49:E2:D1:AE:A5:9D:F3:A7:16:54:AC:54:8F:23:91:FF
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer: /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial: 0196753058B5CFCFB6296944438EA77394D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number: 0302
Signing time: Sun 27 Apr 2025 03:00:24 +0000
Manifest this update: Sun 27 Apr 2025 03:00:24 +0000
Manifest next update: Mon 28 Apr 2025 03:00:24 +0000
Files and hashes: 1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: 85dQrKM1N+mjBeAwxW+xNmNxsmHsTYCVPN7y7ZyQWsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:58:b5:cf:cf:b6:29:69:44:43:8e:a7:73:94:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Validity
Not Before: Apr 27 03:00:24 2025 GMT
Not After : Apr 28 03:00:24 2025 GMT
Subject: CN=b9dd2f8e49e2d1aea59df3a71654ac548f2391ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8a:a2:54:5d:f8:8a:35:2a:a7:1f:f4:0a:7f:
ab:e1:60:cb:7b:dc:f2:af:3f:02:fa:f6:78:f1:af:
0a:ca:c2:05:65:68:28:f6:f8:80:6f:b9:71:4d:05:
0c:11:dd:4f:69:ef:da:a6:ea:19:23:02:a7:5d:b6:
f5:78:f5:5c:33:87:1f:ad:df:8b:bc:7b:77:62:b3:
14:ad:79:60:2a:15:ca:d1:dc:54:ec:22:73:2d:65:
1f:ce:63:42:3d:60:21:80:5c:fa:fd:e6:92:d2:f5:
4a:81:d2:0d:1d:67:63:99:6e:b1:31:3f:f3:6b:b3:
58:9a:b4:08:18:52:08:fe:bd:08:0a:ae:64:37:1c:
06:d8:36:54:f8:ba:85:42:3c:73:98:07:34:55:2b:
6f:48:11:f9:ee:df:c0:fb:0f:3e:f0:7a:5d:70:74:
6f:28:b5:9b:6c:5f:85:ce:e4:b4:3a:15:5f:df:25:
d6:39:62:f2:87:d6:ab:e1:42:b8:96:eb:44:d3:0f:
01:74:7a:fb:2a:0f:c2:45:7b:3d:cb:af:9a:8a:24:
1b:b6:2c:f8:3f:d8:d4:e8:a9:6f:d4:68:83:6a:e5:
82:3a:a6:e7:15:64:9a:84:9d:25:45:a6:56:ac:60:
46:5b:b4:bf:c4:e6:80:de:16:05:24:fd:8c:26:93:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DD:2F:8E:49:E2:D1:AE:A5:9D:F3:A7:16:54:AC:54:8F:23:91:FF
X509v3 Authority Key Identifier:
keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1e:1f:de:71:9b:6b:e0:a1:0b:b8:c7:b5:9f:7e:8a:da:30:
24:9c:ef:8c:46:4b:c8:2a:26:5b:c6:f2:81:b6:73:d1:7d:ed:
09:48:bb:6a:dd:61:b1:f3:f4:38:98:9e:7d:b9:ce:65:8e:2d:
c3:ca:bf:f0:44:2b:ae:41:af:e3:48:5b:b2:e1:5b:38:0a:aa:
00:14:18:74:a3:c2:cd:5d:f2:4a:07:9b:92:20:66:8c:37:4e:
bf:f4:d3:f5:03:80:15:0a:34:00:37:b6:ef:3e:4b:8a:aa:5f:
7f:65:3b:a8:97:57:22:a0:b0:2e:42:e7:08:4c:06:5f:0a:5b:
79:e9:bd:e0:96:fd:ab:fd:d6:8a:9e:b2:d9:32:12:de:a9:01:
6c:35:de:c5:8b:80:ca:90:e5:a2:4e:bb:43:ea:fa:37:fb:f6:
28:ac:1a:e4:8c:7c:37:ec:2e:54:94:06:e7:e0:24:66:50:24:
03:3d:70:71:21:ba:68:0b:96:83:5f:f5:ef:9f:62:cc:41:c6:
a0:e1:ae:2e:ae:b0:93:02:b9:5c:0b:1f:8b:82:ca:ca:bb:36:
9f:91:80:b8:17:86:1f:9d:f5:62:1e:d6:db:f6:92:16:c3:59:
1c:b6:5a:ac:99:32:01:dc:61:ae:a5:ad:e8:7d:b1:39:cd:46:
88:37:a5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:02:20 2025 by rpki-client