Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
File: eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft (raw, json)
Hash identifier: Ec8SFewDsLgqpRMeaExC0jPuSUveoBCgMN6rX4ZcS4Y=
Subject key identifier: 03:D2:DF:99:63:96:D9:6D:59:EE:AF:03:1E:BC:74:63:36:A3:5C:5E
Authority key identifier: 7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2
Certificate issuer: /CN=7b243b732e564690482cc825199f8b591b01f6f2
Certificate serial: 01965725E0762E6A08DF2EB177B7F8485239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
Manifest number: 10A2
Signing time: Mon 21 Apr 2025 07:00:22 +0000
Manifest this update: Mon 21 Apr 2025 07:00:22 +0000
Manifest next update: Tue 22 Apr 2025 07:00:22 +0000
Files and hashes: 1: eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl (hash: JS+bTcuaNudlDvfPaHHgwwNEkJiCZXDKpkLlVK+VrTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:25:e0:76:2e:6a:08:df:2e:b1:77:b7:f8:48:52:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b243b732e564690482cc825199f8b591b01f6f2
Validity
Not Before: Apr 21 07:00:22 2025 GMT
Not After : Apr 22 07:00:22 2025 GMT
Subject: CN=03d2df996396d96d59eeaf031ebc746336a35c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:72:d8:84:30:f3:22:ec:17:d3:2f:c1:8e:
41:6b:e1:d5:4f:e9:29:b5:03:a1:b5:2e:c3:73:69:
a8:de:0a:fb:64:b3:59:e4:b2:5c:ad:93:34:cf:07:
29:20:5e:8f:4a:35:58:e2:44:ea:0a:79:03:7e:e4:
82:f3:83:46:e5:18:ce:cc:eb:d4:55:6a:aa:84:30:
b6:fa:6d:51:da:a9:7e:e6:f0:88:65:d7:d9:5b:47:
56:12:60:4e:3a:28:3f:d4:28:82:be:22:81:ba:09:
bb:e4:c3:84:d1:1c:0c:1f:c5:a7:47:99:10:aa:80:
84:f9:d6:94:0f:2f:30:8c:95:9d:01:47:12:02:ff:
6a:c5:f0:ba:68:8c:f0:3b:a1:6a:3c:6a:27:d9:fa:
ed:86:b6:88:4b:ee:66:20:3d:5f:08:a3:9d:4e:22:
6b:5e:96:48:53:45:ed:80:50:32:59:cc:88:d1:9b:
ca:1c:3e:3f:10:e3:23:99:bf:4b:67:7b:0a:9d:b8:
e9:0c:a8:19:6b:72:90:50:a7:4b:d7:2c:77:a1:03:
25:c7:ec:a2:3b:ac:46:1a:ab:8b:ae:8a:36:86:1b:
d3:77:c2:c6:80:87:7a:fa:3f:8c:47:09:80:6e:9d:
f6:0b:cf:84:af:54:ea:09:df:27:72:21:ca:85:18:
0b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D2:DF:99:63:96:D9:6D:59:EE:AF:03:1E:BC:74:63:36:A3:5C:5E
X509v3 Authority Key Identifier:
keyid:7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:09:c3:6e:0a:27:9f:51:39:8b:75:b5:82:57:e4:6d:4e:7b:
28:2a:d2:d5:7b:24:ae:4e:8e:0d:a3:06:8f:0c:4f:7f:f3:61:
f2:ae:10:97:6e:de:e6:78:52:ec:55:a1:11:a0:66:2f:5a:07:
0a:85:50:5c:12:6b:57:3c:27:cf:cc:c6:ae:b8:ee:4a:1f:60:
39:d2:78:a0:b5:62:4b:17:bd:78:0d:66:a2:35:80:68:5f:66:
ff:17:32:fc:18:06:44:63:51:f8:ca:19:68:f4:6a:d0:bc:46:
f1:79:1f:ff:6d:fc:dc:d1:26:a8:ff:fb:55:3f:2d:87:43:40:
49:df:09:00:a7:0d:57:78:57:16:85:3c:a0:be:59:62:89:7a:
83:9d:86:1d:f2:cd:9f:d1:21:38:26:63:da:12:b3:4b:ed:19:
98:2d:97:a4:3c:12:96:fa:30:05:85:b3:04:ce:c9:15:47:1b:
ff:71:14:4c:c1:6b:d1:ad:3e:bc:c2:94:4b:d2:fa:5e:7d:2a:
fa:56:c6:f3:59:4e:5e:a1:66:c9:fe:c3:60:f5:5d:05:d4:9e:
4f:6b:f0:6c:1e:50:97:0a:40:68:be:a0:0d:1c:b6:b2:89:7e:
11:7d:06:e6:2b:f8:8f:31:58:b7:ad:58:4c:dc:99:12:32:46:
f8:c6:f4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:55 2025 by rpki-client