Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier: Gstt29DtCwcjXVTO8/pvL741XYBh4X1BKrkglr/MfzQ=
Subject key identifier: 40:94:7A:F6:EB:0D:9C:B6:50:F3:16:F3:D2:26:1D:BB:C1:A4:CC:08
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial: 0196553825B61F4CFEC12E144900CEA00FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number: 03D5
Signing time: Sun 20 Apr 2025 22:01:05 +0000
Manifest this update: Sun 20 Apr 2025 22:01:05 +0000
Manifest next update: Mon 21 Apr 2025 22:01:05 +0000
Files and hashes: 1: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: tkakSI77h1hEt658qFKQ7VuYneYVi9dLXIuymKL0BL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:25:b6:1f:4c:fe:c1:2e:14:49:00:ce:a0:0f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Validity
Not Before: Apr 20 22:01:05 2025 GMT
Not After : Apr 21 22:01:05 2025 GMT
Subject: CN=40947af6eb0d9cb650f316f3d2261dbbc1a4cc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:2b:00:8e:27:d9:78:9c:1e:d3:6d:64:bf:
bb:fe:8b:30:5f:02:2a:58:56:43:87:34:0b:6e:63:
93:2c:02:81:fc:54:54:31:7e:57:f1:22:95:7f:37:
5c:ee:ca:c5:03:9c:83:93:1f:38:5c:32:3e:b9:1a:
d9:78:46:7d:6e:4b:13:25:68:6f:30:2a:56:2b:cf:
91:a5:79:45:55:d2:ad:21:2a:9c:6c:32:47:21:97:
1d:77:4e:e9:7b:f5:aa:63:98:86:18:1b:ec:be:c8:
08:c1:48:95:74:94:91:58:5c:8d:74:f1:5c:6a:37:
fe:c2:b9:ca:ed:0d:b2:b2:ed:88:4e:d1:e9:89:e0:
bb:2c:0c:3d:5e:ee:04:7c:6d:94:27:ba:3e:54:e2:
0e:dd:24:76:30:c1:0f:9b:32:cc:0b:a0:37:64:14:
ac:97:2c:30:a9:92:3c:2b:1f:a2:85:a5:6c:7a:ab:
6a:38:64:57:f4:52:85:f6:79:93:76:e2:20:84:5b:
86:33:3e:a5:69:e4:e2:3a:a8:b4:69:02:ee:fe:21:
4c:77:8f:63:f0:14:f7:c7:54:a6:13:6b:12:55:f7:
58:02:ad:49:7d:66:02:5f:06:d8:18:ee:52:9a:0c:
62:bd:99:94:77:13:c2:f5:25:7f:c7:63:be:4f:80:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:94:7A:F6:EB:0D:9C:B6:50:F3:16:F3:D2:26:1D:BB:C1:A4:CC:08
X509v3 Authority Key Identifier:
keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:45:c7:bd:0e:e0:ab:61:b0:61:ca:24:b2:c7:80:32:e4:18:
61:bf:63:e7:f0:41:f8:3c:57:ae:a5:fc:d8:c3:25:3e:e5:a3:
28:e1:e9:9f:01:e5:89:04:9f:36:62:b3:c1:82:78:49:8f:45:
22:c9:0c:92:de:b9:b5:c8:9d:1c:96:0b:66:6d:ab:bc:16:79:
76:0e:43:45:e5:7e:d9:1f:a1:bb:92:da:e8:c3:82:ce:45:9e:
16:be:a0:fb:dd:19:9a:1c:74:35:11:e3:56:68:eb:f1:2f:90:
70:73:e0:5e:fa:a0:59:7e:0d:3b:48:73:1e:10:21:f1:7d:47:
d8:66:54:b6:e6:3e:e5:b4:23:17:cc:69:ef:1f:64:66:b1:16:
27:e2:48:ce:b3:80:b7:c6:40:e8:8f:29:1d:ae:e5:fa:99:6f:
4a:39:c6:1d:21:aa:9c:97:2c:82:96:c6:3f:02:d7:bd:23:e7:
a3:0b:41:ad:0a:89:16:64:f7:54:e3:d7:af:ab:c2:88:f8:3f:
df:4d:2f:36:f4:49:4e:29:53:96:fb:18:71:60:84:51:85:5d:
a5:6a:0e:ec:0b:f6:94:0b:b4:c1:44:6c:62:06:0b:d9:5e:db:
bb:47:3a:07:c9:fb:35:23:02:fc:ff:0f:27:29:97:0a:72:c5:
35:57:ec:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:15 2025 by rpki-client