Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
File: ET9u8WzirCilmQYD0folvUl1lN0.mft (raw, json)
Hash identifier: b46jcCmewJAyUolDpZR/0U3Tam+JhAinywn5dcCeGF4=
Subject key identifier: FB:E1:44:DB:57:18:19:83:99:B9:6C:B6:48:7C:2C:EB:D3:5D:9D:EC
Authority key identifier: 11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
Certificate issuer: /CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Certificate serial: 019659EFF8CB7B5D86C271AF9BCE31077D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
Manifest number: 03B4
Signing time: Mon 21 Apr 2025 20:00:21 +0000
Manifest this update: Mon 21 Apr 2025 20:00:21 +0000
Manifest next update: Tue 22 Apr 2025 20:00:21 +0000
Files and hashes: 1: ET9u8WzirCilmQYD0folvUl1lN0.crl (hash: 5nr05jRpGksoqJtRIHqqfFs6KsxUuinjclSIeH4BuaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:ef:f8:cb:7b:5d:86:c2:71:af:9b:ce:31:07:7d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Validity
Not Before: Apr 21 20:00:21 2025 GMT
Not After : Apr 22 20:00:21 2025 GMT
Subject: CN=fbe144db5718198399b96cb6487c2cebd35d9dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d3:9d:4b:1f:b5:a5:b9:99:be:47:08:48:4a:
b9:a4:c6:23:60:ef:a4:ab:9f:56:7c:be:b5:a9:78:
5b:49:c8:e0:ff:ba:1c:ac:af:0b:d2:05:a9:5d:ee:
11:a9:69:af:8c:75:ca:62:d5:fd:8c:d2:9d:27:2a:
40:20:76:dd:b8:fe:d1:d0:ac:fe:53:ad:cf:b3:20:
ef:11:47:14:5c:7e:a7:37:e9:9f:9b:e5:23:1f:93:
af:81:f0:83:9c:8a:b8:4d:c4:e7:d7:99:09:36:9c:
c0:89:bf:ed:bf:27:3c:7c:cc:c2:ed:df:18:2f:83:
de:85:97:eb:07:99:fd:08:8e:a6:b8:57:34:6c:ca:
77:8f:1f:dc:45:61:10:fd:c6:35:d7:d8:7b:da:6a:
21:3a:a7:b9:4f:33:d9:63:38:10:f7:d8:05:6b:ed:
d0:d0:b6:6f:10:e0:1f:50:e1:48:38:1e:f0:25:9b:
fa:1a:19:cd:59:5f:d8:5b:7f:22:6c:54:13:a3:99:
a4:b4:c5:57:c1:09:59:22:cf:24:20:40:1f:fc:97:
16:11:0d:d4:17:26:00:8d:72:3e:40:3f:ff:b9:ba:
42:e5:01:79:54:8b:01:2e:f6:54:54:b6:40:2a:60:
f6:fb:40:b1:a0:1c:68:b3:f0:06:be:92:36:d7:7d:
23:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E1:44:DB:57:18:19:83:99:B9:6C:B6:48:7C:2C:EB:D3:5D:9D:EC
X509v3 Authority Key Identifier:
keyid:11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a1:65:c8:f0:14:3d:e2:e8:2a:c6:c2:69:bf:0e:21:f1:95:
8c:3d:10:96:df:83:74:92:36:ab:eb:34:64:fc:bf:12:08:ec:
29:e1:c8:8a:6d:2c:be:17:b3:21:3b:c6:1d:51:e2:a9:74:16:
5d:33:fd:df:bb:b8:6b:b7:23:d1:2d:55:88:53:e4:29:5d:6c:
0d:31:35:fa:30:f6:72:53:a7:59:99:69:b8:f2:4f:81:8b:d9:
06:0d:16:70:54:c2:5e:9c:10:75:d7:7e:c7:b8:6f:b9:53:34:
22:66:67:18:60:34:e9:60:4d:de:4a:26:cf:35:80:15:e2:c3:
77:f0:b9:ca:a4:36:52:52:10:a4:14:e7:29:43:06:86:e5:85:
ee:2e:98:4f:36:f0:be:dd:86:6a:f5:c6:30:fb:e6:53:4a:e2:
61:6a:d0:3d:01:0f:86:1a:10:05:1d:82:9a:c5:b9:5b:97:84:
cd:0d:0c:c3:8c:07:12:0f:6e:8c:e2:e1:13:2f:30:79:19:40:
6e:6e:55:1e:ad:5b:42:e1:ab:04:71:ce:51:3e:70:46:4d:ce:
8e:07:e4:c6:31:88:da:8c:40:e6:bc:45:5f:df:80:33:b6:33:
ae:ac:53:59:fc:48:35:69:86:b9:2c:b0:b9:ee:16:95:75:1c:
a7:b5:e5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:04:29 2025 by rpki-client