Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
File: 12TH8_eLh21rBDwWzdvd6x55W5w.mft (raw, json)
Hash identifier: FWBg825DC23cfmvaFKuxvXpPQjLXPVSWEaTV9lDI3TQ=
Subject key identifier: C7:A0:1E:33:EE:1D:91:2D:E7:BE:77:A3:4C:D7:25:2A:5D:F9:0C:9A
Authority key identifier: D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
Certificate issuer: /CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Certificate serial: 019699742C01513DE8EF1B05E1266AA13076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
Manifest number: 0521
Signing time: Sun 04 May 2025 04:00:49 +0000
Manifest this update: Sun 04 May 2025 04:00:49 +0000
Manifest next update: Mon 05 May 2025 04:00:49 +0000
Files and hashes: 1: 12TH8_eLh21rBDwWzdvd6x55W5w.crl (hash: CY99tDXF+UVin7y8qsIhDvWtZY6KHr6dBMNCqVHCN88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:74:2c:01:51:3d:e8:ef:1b:05:e1:26:6a:a1:30:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Validity
Not Before: May 4 04:00:49 2025 GMT
Not After : May 5 04:00:49 2025 GMT
Subject: CN=c7a01e33ee1d912de7be77a34cd7252a5df90c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:12:30:0d:c4:f6:e1:b5:c7:91:ad:9a:f4:
2e:4f:24:84:7a:62:80:50:f5:a2:03:d3:b9:e4:6e:
2f:23:5e:3f:81:a7:ac:a7:f0:f1:0a:a3:9d:aa:c9:
65:2e:1a:9e:3d:78:1e:ff:18:19:2f:55:29:ee:77:
61:93:b3:08:29:f0:88:04:40:1f:94:5d:c0:55:38:
73:9f:5d:e3:87:7e:d3:dd:df:0e:73:0e:a5:56:97:
2d:cb:64:18:c4:f6:ac:02:82:21:a0:51:71:de:9d:
9b:c0:00:13:50:f6:85:87:0f:11:f8:89:b1:ea:5b:
d1:94:a2:cf:e2:5c:ef:c6:e6:15:08:bd:15:47:5a:
01:ec:a0:b0:d9:7f:3d:3f:e6:2f:12:32:4e:34:13:
f1:e4:f3:6a:0e:43:92:33:1d:71:c1:c4:0c:64:4f:
b4:e7:a1:32:f0:c1:51:79:5a:d7:be:f0:f5:6a:ad:
ac:a7:05:db:00:be:5d:d9:55:d5:72:2a:f1:85:2c:
fa:e2:3d:41:80:d4:65:af:70:f4:bd:67:bd:7b:b7:
e2:87:a4:16:a7:43:21:41:11:00:64:73:f9:d9:91:
7d:dd:2c:fb:9b:1a:9d:0e:58:2b:cf:9b:27:3c:b2:
2b:a6:f8:58:b9:35:d8:94:b1:62:37:f6:36:97:b7:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A0:1E:33:EE:1D:91:2D:E7:BE:77:A3:4C:D7:25:2A:5D:F9:0C:9A
X509v3 Authority Key Identifier:
keyid:D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2d:86:86:08:e2:9e:94:e5:54:95:04:59:60:9f:71:c2:0b:
82:6e:e2:a7:ba:32:7f:1a:bb:64:6c:6d:1f:f8:d3:9d:00:b6:
65:21:1a:c2:ae:03:ce:57:2e:82:f8:33:a5:46:1e:5a:30:68:
55:76:c2:b6:bf:9d:ca:b8:44:48:d9:bc:e0:40:81:98:e2:f8:
e0:53:00:85:10:6b:3c:80:c3:6b:b6:01:54:a7:b7:b2:b5:39:
a2:81:71:69:e3:11:5f:0a:7b:00:5a:38:37:98:15:bc:52:0a:
0f:a3:4a:f6:40:b9:9f:1a:5f:91:6e:60:53:15:9c:b8:e2:b6:
2d:b6:35:b4:4e:40:9b:0e:5b:a5:2a:53:85:eb:ef:4a:9c:39:
75:4c:3f:fb:7b:a8:5b:8b:d0:98:4a:55:6b:94:4d:c3:4e:35:
b8:18:f6:79:a2:ec:c9:51:01:3c:1f:3b:e4:9b:96:d7:f9:c9:
54:98:47:c0:05:09:7d:b7:81:2e:d4:bb:9c:86:13:0e:ba:85:
14:3e:d3:e7:1c:ac:7c:07:ff:eb:be:b1:09:f9:d2:74:68:d7:
a4:2b:01:1e:a7:96:fc:ea:45:20:e3:a1:fd:4e:7f:ac:7d:32:
5b:37:51:76:6c:df:2c:e9:94:fc:56:eb:b1:50:fa:f7:16:40:
8e:9f:76:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:16:29 2025 by rpki-client