Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
File: eNDmeWDvds5jPJ_md02H22m4m3U.mft (raw, json)
Hash identifier: lsBSdz3ZqVcKFBcqLh82Z6Dw6n7V+X+40eL55gIOBSE=
Subject key identifier: B6:E6:B0:80:77:31:06:DC:4F:B4:A3:ED:0F:37:0A:E2:B0:6E:97:35
Authority key identifier: 78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75
Certificate issuer: /CN=78d0e67960ef76ce633c9fe6774d87db69b89b75
Certificate serial: 019655DD0855DB7C10E9388201F4BD670F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 01:01:10 +0000
Manifest this update: Mon 21 Apr 2025 01:01:10 +0000
Manifest next update: Tue 22 Apr 2025 01:01:10 +0000
Files and hashes: 1: eNDmeWDvds5jPJ_md02H22m4m3U.crl (hash: +OW7OziA3eD+9ESNIw9VH0MbUG45phdwJBelVd0mO5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:08:55:db:7c:10:e9:38:82:01:f4:bd:67:0f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d0e67960ef76ce633c9fe6774d87db69b89b75
Validity
Not Before: Apr 21 01:01:10 2025 GMT
Not After : Apr 22 01:01:10 2025 GMT
Subject: CN=b6e6b080773106dc4fb4a3ed0f370ae2b06e9735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0c:de:91:b6:41:76:01:8f:86:e2:a7:9d:62:
0d:1e:0e:2f:bc:fa:4d:cd:9d:0a:b1:75:9d:97:62:
f2:f7:25:8a:8c:58:51:59:c9:f5:9e:05:9b:1c:f6:
9c:67:8d:70:4b:09:18:22:66:2c:ff:f6:63:6d:a5:
c5:aa:5b:af:77:e6:05:ea:b1:1b:84:27:73:25:fe:
c5:d3:7a:12:f1:80:5c:22:37:a5:e8:15:e0:fb:94:
34:f6:26:e7:8c:c8:12:8b:56:55:52:67:d3:91:1b:
16:ff:ab:68:4c:6c:39:95:4d:dc:e4:80:20:79:86:
8c:82:7d:65:e7:27:3a:92:1c:f7:88:d3:34:07:fe:
c3:77:92:2d:dc:dc:17:53:db:4f:e3:86:63:a3:4b:
1f:2f:ec:ed:b8:cd:9c:61:d4:19:9d:7a:12:1e:1a:
0b:3d:62:c4:bf:4d:06:a4:15:96:cf:ad:f8:03:4d:
d7:83:b5:ed:20:5e:53:56:12:6d:ca:9d:49:c5:1b:
33:3e:c9:b9:8d:d5:42:18:3c:ce:26:5e:6b:d2:5c:
2a:ab:c9:a4:86:64:02:de:1b:e4:76:a4:a3:20:2a:
1a:3d:ca:7c:a8:fe:d9:1e:4b:32:ff:f1:26:49:e7:
94:3a:08:9f:ba:d0:7a:cc:d7:f8:24:04:36:3d:cc:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E6:B0:80:77:31:06:DC:4F:B4:A3:ED:0F:37:0A:E2:B0:6E:97:35
X509v3 Authority Key Identifier:
keyid:78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8f:9a:1e:70:21:86:15:80:4c:3d:ae:af:07:8d:a4:81:93:
91:0f:00:4f:22:95:9b:89:c0:f2:34:d9:4a:f6:a2:37:da:fb:
c4:52:75:12:3a:a4:cd:ea:c8:c0:d3:4e:59:f3:86:4e:0b:62:
72:70:5e:5a:58:b6:86:64:df:a4:f5:b3:4b:a2:a4:57:79:04:
ec:dd:a8:bf:7c:ab:ed:35:4f:1a:2c:25:e6:d0:ea:bb:43:25:
9b:13:b7:87:84:fa:5a:7b:7c:3e:9d:f8:71:05:83:8e:62:e1:
c2:5c:06:76:57:d4:09:42:f5:42:91:f8:74:33:c1:3d:07:3c:
b2:dd:97:f3:f7:f4:7c:fe:d5:6c:63:ee:06:32:d1:b4:68:19:
d7:7f:7d:e3:db:91:ad:22:9e:43:15:5d:29:2a:4e:37:d0:0b:
3e:47:a4:d9:95:93:e6:4f:d7:da:4e:1d:f6:e9:66:3a:66:cb:
6a:ea:ae:e2:6c:a2:7b:1b:44:db:4b:b0:71:c9:f4:cf:80:20:
b1:e4:26:76:33:f5:ae:6f:1d:20:65:a2:7f:fb:03:1d:0d:54:
1a:79:b4:9e:92:98:7c:64:8d:cf:09:53:4a:4e:94:d9:9e:0c:
f0:35:4a:e9:d7:82:7b:45:84:a7:c0:df:f4:35:89:7c:cd:85:
02:86:54:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:04:01 2025 by rpki-client