Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
File: E7ur4fopzNr8vU-Utcfk0NH4lH0.mft (raw, json)
Hash identifier: VJpd8I/5cGYZmUXPhiiMCdP4nwSUYjtW1L04SkL9200=
Subject key identifier: 3F:10:D7:1D:C8:40:3D:81:45:64:75:DF:CD:0F:55:7A:9E:11:62:26
Authority key identifier: 13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D
Certificate issuer: /CN=13bbabe1fa29ccdafcbd4f94b5c7e4d0d1f8947d
Certificate serial: 0196545BC1BAE41B6717B3823064EFAD5C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
Manifest number: 89
Signing time: Sun 20 Apr 2025 18:00:21 +0000
Manifest this update: Sun 20 Apr 2025 18:00:21 +0000
Manifest next update: Mon 21 Apr 2025 18:00:21 +0000
Files and hashes: 1: E7ur4fopzNr8vU-Utcfk0NH4lH0.crl (hash: 2tDirdwn6hAoPA5+LoAIz7X4jGcvNt/nkR7T7q0ytAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:c1:ba:e4:1b:67:17:b3:82:30:64:ef:ad:5c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13bbabe1fa29ccdafcbd4f94b5c7e4d0d1f8947d
Validity
Not Before: Apr 20 18:00:21 2025 GMT
Not After : Apr 21 18:00:21 2025 GMT
Subject: CN=3f10d71dc8403d81456475dfcd0f557a9e116226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:40:64:cd:a9:45:5c:de:a1:66:87:9f:6e:02:
7a:f4:a6:3e:ac:b4:79:4e:54:50:bd:14:46:ff:f3:
02:b2:60:a3:42:7e:e8:49:d4:46:9d:79:a2:57:25:
9c:77:5a:59:d7:83:4a:51:cc:6d:ed:d2:65:a7:07:
f7:64:ba:35:fc:d7:31:12:b4:cd:a0:e4:c9:83:7a:
b0:81:74:fc:d8:ae:2c:c1:c8:ae:a0:73:46:8c:b0:
a9:0b:e9:d7:9a:ec:df:e4:61:5e:f3:7b:1f:04:80:
81:c9:02:ce:9e:d1:20:e0:60:be:d2:b0:2c:26:53:
0e:58:98:a7:ba:05:30:b1:c3:e8:f2:8c:aa:02:70:
8c:12:80:36:65:07:51:62:8d:2e:93:56:b0:00:0b:
cb:f1:f9:30:a7:a4:ee:27:bc:9b:c6:0f:61:a9:d3:
7d:41:21:60:61:37:bc:58:5a:eb:30:1d:e2:1f:b0:
f8:60:ff:b5:e5:73:36:80:24:88:c9:7f:d8:11:8e:
2e:37:47:01:c7:1c:27:f2:c4:f1:9f:e6:00:49:25:
69:04:29:2b:7d:4a:7b:dc:20:16:a3:b8:a3:7c:15:
1a:4f:2f:b0:87:4a:aa:a8:e6:7d:93:82:80:77:8a:
a4:07:c8:14:4d:3f:23:ac:39:07:e5:b2:ee:51:a7:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:10:D7:1D:C8:40:3D:81:45:64:75:DF:CD:0F:55:7A:9E:11:62:26
X509v3 Authority Key Identifier:
keyid:13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:48:ed:2d:05:2c:54:1c:3d:77:ff:d3:b6:d7:a5:ed:06:2d:
6d:1d:18:53:9b:d5:ec:7f:f9:e1:c6:8b:7c:db:88:a8:44:9f:
d1:d0:be:6a:cd:c4:26:39:09:6d:7d:cb:11:c5:e8:6d:cf:fd:
ca:c8:3d:c5:59:eb:39:cb:14:3d:ec:14:b7:bd:2b:5c:7e:ad:
c4:eb:97:59:3f:47:02:22:89:ab:b8:f4:72:66:e0:55:7b:41:
15:c0:82:59:43:43:3e:4d:d6:e2:a7:5f:4e:2e:bc:2b:e9:bb:
13:d3:1a:c7:54:36:cc:bc:63:eb:1f:73:f8:23:9f:11:44:7d:
a6:c7:4c:32:8a:51:09:5d:f1:ca:8a:59:49:ed:09:de:1e:37:
93:c1:f5:a3:4e:37:c0:a4:13:84:ac:c4:18:14:5c:1d:a4:96:
31:2f:e5:5f:66:35:e0:2e:76:0f:3e:b2:a6:9f:1e:e7:38:05:
09:7c:c4:9a:b4:c4:6e:69:d6:fd:8c:fc:dd:7d:e0:62:8f:9d:
5e:38:ef:d0:4f:01:6d:b5:f2:9b:7f:78:3b:c2:92:10:3f:48:
0f:a6:2b:08:5c:aa:95:69:87:f1:8e:74:b9:ff:b1:1d:d5:4f:
45:6e:9a:56:43:3a:bc:d9:45:35:b2:90:9a:92:e5:f4:22:81:
4d:bf:c5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:55 2025 by rpki-client