Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
File: 9PpnFz_1YpCIuXCWGuG-dGldxmE.mft (raw, json)
Hash identifier: mwlRqN0D9Omz6vEFMZwARo/CbWlDnFwrfk3pTGARBGs=
Subject key identifier: 5A:0C:E4:23:F3:87:68:FD:FF:81:62:4A:5A:57:BD:06:21:9E:FA:E1
Authority key identifier: F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
Certificate issuer: /CN=f4fa67173ff5629088b970961ae1be74695dc661
Certificate serial: 019679E90F999EF032EA3F3A976C3E338E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
Manifest number: 150D
Signing time: Mon 28 Apr 2025 01:00:39 +0000
Manifest this update: Mon 28 Apr 2025 01:00:39 +0000
Manifest next update: Tue 29 Apr 2025 01:00:39 +0000
Files and hashes: 1: 9PpnFz_1YpCIuXCWGuG-dGldxmE.crl (hash: wpvXm20t+z29SZ2UlJKMaizhCxgYD2E3EvbTSrUrEx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:0f:99:9e:f0:32:ea:3f:3a:97:6c:3e:33:8e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa67173ff5629088b970961ae1be74695dc661
Validity
Not Before: Apr 28 01:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=5a0ce423f38768fdff81624a5a57bd06219efae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e6:3d:69:28:bd:37:93:91:be:65:10:7f:ee:
bb:f9:7a:79:86:5d:b6:54:2c:e5:da:c7:e2:38:60:
bc:92:81:31:5e:cf:06:24:0f:1b:ea:bd:f8:2b:91:
92:c5:e2:5d:ae:63:a0:1a:e0:61:38:a0:a2:26:e9:
2a:f7:13:0f:be:a2:24:72:6e:60:4d:83:6c:f1:35:
4b:9d:93:43:d5:d2:ec:85:18:7d:6d:7b:4a:47:5c:
25:43:08:fa:c1:5b:f2:13:f5:2b:e3:61:15:48:ca:
63:f4:4d:2a:c8:6b:10:20:7c:a8:b2:80:10:0b:d9:
0d:7e:ab:fb:b9:30:e5:cb:87:7d:19:3f:67:be:8a:
93:10:2c:f1:34:ce:16:e4:ed:80:fb:25:bd:84:2b:
f4:4c:10:7f:06:66:d6:5e:f0:b5:5c:4d:b5:db:f8:
31:47:93:47:ed:80:a5:8b:6a:76:80:54:9c:26:d6:
0b:e9:b7:c2:fd:94:fa:07:79:da:61:fd:26:6f:eb:
77:a3:98:4a:ec:5d:e6:6e:af:82:e4:df:8a:e5:0c:
7c:ac:fb:8c:c8:91:97:2f:3b:d6:6f:4c:c4:09:fe:
97:8d:cb:d0:e3:20:a1:6e:c0:c7:3c:86:0c:7f:90:
7b:be:2f:b0:b6:6c:31:9b:fc:78:80:92:79:ef:ae:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0C:E4:23:F3:87:68:FD:FF:81:62:4A:5A:57:BD:06:21:9E:FA:E1
X509v3 Authority Key Identifier:
keyid:F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:78:71:ba:b0:e7:40:69:c3:99:54:6e:ad:2f:4f:40:e7:79:
b1:61:f6:60:ae:45:8d:2c:bd:06:b5:50:bb:e6:7c:e5:82:ff:
42:e7:b9:51:c5:a9:c8:52:05:fa:57:69:24:6f:43:30:9c:5e:
48:64:cf:8e:78:58:23:61:eb:db:22:66:ac:43:10:c9:3a:16:
8f:07:56:c8:23:19:0b:84:74:bb:6c:19:10:ed:1f:d8:dc:95:
06:24:de:14:23:3c:54:2a:bb:84:94:de:9e:71:17:ea:07:db:
54:78:1c:a3:50:0b:85:86:c3:1c:10:a6:f4:82:73:60:c3:6c:
e4:b3:4a:45:21:8f:c7:66:3e:53:fc:55:7c:a3:e8:8a:b6:8d:
44:d9:cb:db:83:47:1c:41:9a:82:61:7b:01:bc:8f:00:d9:c5:
91:74:1d:4d:81:e0:5e:b0:24:d3:81:83:67:76:2a:9a:6f:b8:
20:01:97:0f:8c:23:07:8c:2d:be:9b:d3:cd:f8:e8:84:b6:15:
a0:f8:9f:b9:9d:d6:24:78:6d:8c:ea:1d:2e:2f:3e:f7:60:f2:
c8:11:c7:fa:72:3d:7e:6f:a9:f4:7d:14:c3:84:61:fe:1e:da:
a1:cb:18:33:24:ae:0c:fd:16:57:09:82:10:81:9f:30:22:cd:
c5:67:f1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:46:02 2025 by rpki-client