Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier: kgs23h62JYd4hN9PkoaRCAqpLm6RMe8IYdsVWB1KkJI=
Subject key identifier: 04:B8:2D:AC:70:6B:D9:E1:65:DC:0E:1D:29:5C:B7:39:81:71:B1:D2
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial: 019681A26C3323B85575962FCB85A9C1EE12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number: 0CAE
Signing time: Tue 29 Apr 2025 13:00:27 +0000
Manifest this update: Tue 29 Apr 2025 13:00:27 +0000
Manifest next update: Wed 30 Apr 2025 13:00:27 +0000
Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: BwuefwbU5CNSCv61UfWWPsrAaMz0f2w/SbjHsH8E5Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:6c:33:23:b8:55:75:96:2f:cb:85:a9:c1:ee:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
Validity
Not Before: Apr 29 13:00:27 2025 GMT
Not After : Apr 30 13:00:27 2025 GMT
Subject: CN=04b82dac706bd9e165dc0e1d295cb7398171b1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:e5:55:b7:44:27:ac:ab:0b:41:05:36:d5:
f3:14:54:5b:b1:be:a8:88:b0:d7:10:68:68:a6:9b:
ab:69:18:8d:b2:1f:6f:e2:9f:04:da:89:69:cb:b7:
73:52:a4:22:74:51:39:ab:e3:17:66:1c:49:71:28:
82:ac:3e:91:8a:b5:7f:5b:89:99:d8:a1:da:5f:31:
2e:0e:90:e4:94:60:50:fd:1a:ed:58:6c:7b:d4:4f:
ac:82:05:a4:a9:a7:a0:9c:c2:23:94:a2:23:72:e1:
5a:49:5a:ed:2d:92:ea:76:7b:8a:92:4f:15:0d:6c:
99:de:30:ee:a5:fc:fe:97:d8:4a:81:a2:b8:cb:67:
f9:60:19:e0:de:5e:2b:08:a8:87:40:95:a3:e6:9f:
7c:b0:6c:20:ef:02:14:bb:bb:9e:bb:d1:ee:99:da:
57:8a:06:af:c4:96:da:4f:fc:7b:ce:b9:c0:08:f0:
ae:6c:66:6e:69:7d:a4:2c:20:f2:81:2b:86:c7:34:
d3:7e:91:85:ab:31:7f:e3:4f:56:86:ab:7c:ca:05:
40:89:c2:cb:65:1b:9a:79:cf:2f:43:99:84:e6:12:
4c:2e:a3:ea:13:86:4d:3d:61:86:86:42:2c:8c:e0:
c2:0b:fa:30:3c:93:9d:ad:8e:34:5a:4b:32:0c:93:
59:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B8:2D:AC:70:6B:D9:E1:65:DC:0E:1D:29:5C:B7:39:81:71:B1:D2
X509v3 Authority Key Identifier:
keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:2e:4f:11:3b:c2:70:ad:fa:0a:13:77:ee:d6:84:41:5a:d8:
bd:b3:c0:22:41:74:2b:4f:42:32:a5:26:de:80:00:18:ea:09:
86:93:6d:0e:a1:45:9a:49:80:54:7f:c7:78:40:98:b5:e9:dc:
9d:7d:9f:0b:b3:28:b3:56:59:c9:ac:02:e4:c7:53:81:6d:29:
4d:09:dc:13:34:58:59:7a:89:87:05:c1:77:06:f2:d2:b2:75:
2d:97:01:b9:45:fc:50:f9:da:90:c6:42:72:b1:c3:59:b2:8e:
3b:2c:1a:eb:9c:a6:d4:bb:29:46:f8:c0:83:c0:d7:9c:66:8a:
b3:10:91:56:1f:58:e7:2f:8b:33:cc:71:f7:f5:34:21:2b:ed:
6d:5f:ea:fd:e3:0c:5c:b8:c8:c0:5e:01:20:dd:e5:03:9e:f3:
89:94:dd:b7:95:23:3b:d7:8f:d7:fb:fc:c3:3d:03:47:65:2a:
cf:36:11:13:a5:e0:51:3e:da:f8:44:92:0b:ed:22:d0:47:18:
cc:e3:de:5d:5a:f4:91:9f:ff:51:e7:bb:09:41:9a:08:bf:96:
8a:e3:b4:be:c5:1a:73:a8:10:e3:22:7f:f0:7d:c8:22:ea:b0:
89:a4:97:3f:14:cf:c1:91:f2:e3:a4:cf:94:a2:9b:a9:c0:aa:
bb:42:79:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:23:04 2025 by rpki-client