Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: DLAVIVNSPNsweaL9zpf/sZ1V4KNk81hnu4vGNgyzMM4=
Subject key identifier: 7F:33:1B:AB:9A:80:9F:2F:EF:99:92:A5:73:BB:72:16:AE:19:9F:51
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 01968A37E80A07EB08E08B071F53715E19FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 10EB
Signing time: Thu 01 May 2025 05:00:41 +0000
Manifest this update: Thu 01 May 2025 05:00:41 +0000
Manifest next update: Fri 02 May 2025 05:00:41 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: TLVl/6r5t4QQerg8kVo+gL9w+pVQdDebPRAphbYrMUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:e8:0a:07:eb:08:e0:8b:07:1f:53:71:5e:19:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: May 1 05:00:41 2025 GMT
Not After : May 2 05:00:41 2025 GMT
Subject: CN=7f331bab9a809f2fef9992a573bb7216ae199f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:78:f2:a9:9b:09:3a:d5:dc:d6:8d:64:f5:
16:04:cc:92:14:83:a8:7d:85:e6:85:f4:4b:d3:fd:
d4:53:71:ee:6f:b4:a3:8f:76:ce:00:2e:af:3e:0b:
da:28:d9:80:c2:90:c1:b4:df:79:b3:07:90:98:39:
3f:f8:62:d6:fb:5d:51:75:f5:ba:74:e3:58:6c:31:
4b:f1:a3:8f:fd:1a:95:7a:b5:b4:6d:99:b6:3a:ee:
c0:e3:ce:ca:0a:7c:df:ff:b4:1d:57:19:22:ec:c2:
05:2e:66:92:01:f4:bb:43:cb:38:a8:95:9a:93:96:
06:ff:4f:bf:19:3b:4f:32:55:c4:c7:62:cf:23:fc:
70:ac:72:d2:43:66:0a:c8:5d:7f:b6:d2:90:98:d1:
56:f8:a4:85:2e:b0:5c:11:4c:d2:78:b4:f9:da:df:
e6:3a:4f:39:6f:47:8b:67:5e:15:dd:25:86:5f:38:
8f:40:34:e9:42:4f:9c:8d:1a:cc:e7:05:36:02:79:
96:04:a6:89:dc:79:f7:fc:fe:8b:7d:31:00:55:2f:
c4:ae:e7:a4:2f:22:ae:62:f8:14:9c:57:24:82:6a:
fe:52:dd:60:cc:eb:b5:49:35:6d:0a:83:e4:0a:2e:
fb:f3:79:b7:06:f6:7a:90:75:7d:17:c0:04:49:9b:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:33:1B:AB:9A:80:9F:2F:EF:99:92:A5:73:BB:72:16:AE:19:9F:51
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c7:ac:43:95:5f:c2:a4:0d:94:cb:ba:04:83:67:c2:93:19:
79:a8:dd:8f:4d:df:c5:10:59:53:90:1d:b3:b6:54:b3:2a:56:
c1:91:57:ec:41:d2:b0:fd:97:88:55:47:fe:67:de:d2:1a:17:
a8:d6:29:5e:e3:b4:d6:04:97:b2:45:10:db:fb:01:0e:3e:e5:
e3:07:23:cb:5c:de:0e:23:e7:04:9e:25:fe:60:c3:7a:02:7d:
69:18:ed:3e:80:a9:91:1c:61:aa:05:73:1d:06:de:47:98:3a:
13:01:16:9c:11:45:5b:38:67:9f:40:ed:b9:70:ab:f2:ef:2c:
8b:a6:80:ef:c5:ff:eb:a1:0b:bc:c8:5b:0b:05:3b:56:26:5d:
d4:92:a0:1d:f2:61:e6:2d:c0:e1:07:7f:f2:cc:57:27:0d:1b:
6c:dd:ec:20:e8:85:69:56:8e:b1:30:d5:37:07:38:1b:85:cc:
44:06:1f:e9:9c:f7:6a:8c:d3:b8:11:d9:f6:1c:7f:9b:b7:48:
25:e9:1f:68:79:54:26:de:4e:45:cb:18:db:a9:9b:d3:79:d6:
f6:1a:af:fc:c5:7c:a6:bf:5e:25:2b:21:d8:cd:57:05:d1:36:
87:48:56:95:c7:dc:34:46:75:86:6b:2f:b0:70:4d:22:3e:5f:
83:fa:8b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:56 2025 by rpki-client