Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
File: e8DFmvgYqB1_53rx-3MC5LQRflE.mft (raw, json)
Hash identifier: Tl2a2pgpos1S+/s7W2RbNdfZs7bWcpdAUljFAyXxj/s=
Subject key identifier: D6:F5:43:EE:92:FB:28:F7:1B:A8:C7:30:4E:C7:4A:95:44:1B:6F:A1
Authority key identifier: 7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
Certificate issuer: /CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Certificate serial: 0196534A12D4550E65183C0E4D2BE09BBD60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
Manifest number: 14F7
Signing time: Sun 20 Apr 2025 13:01:25 +0000
Manifest this update: Sun 20 Apr 2025 13:01:25 +0000
Manifest next update: Mon 21 Apr 2025 13:01:25 +0000
Files and hashes: 1: e8DFmvgYqB1_53rx-3MC5LQRflE.crl (hash: 9T6VvPuhnuIgby8QSnfqxV+Ir+I1L+kwbgy0jDHLVJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:12:d4:55:0e:65:18:3c:0e:4d:2b:e0:9b:bd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Validity
Not Before: Apr 20 13:01:25 2025 GMT
Not After : Apr 21 13:01:25 2025 GMT
Subject: CN=d6f543ee92fb28f71ba8c7304ec74a95441b6fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:e7:2f:b4:30:72:d5:5c:fe:ae:16:45:7a:
e3:2c:48:95:4d:eb:16:b7:d7:f6:b3:7e:2f:a3:a5:
c8:d1:48:0e:a1:ae:d9:16:cc:81:59:03:51:d8:e9:
70:81:d1:ea:2a:05:cf:62:48:0f:48:06:e7:6a:08:
de:22:4d:f6:7c:cc:6e:f2:5c:74:ad:25:07:c0:a3:
b5:95:13:29:95:3f:08:76:03:67:c6:8b:1d:54:c4:
08:c6:85:8d:5e:29:46:bb:ea:52:ab:e3:84:b9:0e:
65:51:cb:e8:3a:73:e7:fe:a7:d0:c0:3a:5a:73:af:
d3:7b:cd:3f:08:36:ee:88:2a:a6:5c:11:ce:67:e1:
e4:a2:9b:17:ac:53:2f:3f:f3:58:68:77:b0:57:e2:
cb:79:fb:8b:de:ea:d7:a2:d1:dd:c4:fe:8e:ce:76:
c2:f6:c2:05:a1:96:81:14:7e:fd:93:4b:5b:dc:d3:
01:99:e9:78:d7:df:3b:ef:7a:99:40:27:a1:6a:2b:
24:35:75:f9:14:79:64:d4:95:16:9b:00:44:28:a3:
c1:79:35:ee:28:ec:ed:87:37:2b:7a:be:f2:5e:e2:
87:30:d9:1f:57:18:c3:f2:a0:6f:a2:b4:bb:49:6c:
04:7f:49:10:9d:23:23:67:46:10:ad:95:08:29:07:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F5:43:EE:92:FB:28:F7:1B:A8:C7:30:4E:C7:4A:95:44:1B:6F:A1
X509v3 Authority Key Identifier:
keyid:7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:bd:87:fa:8f:c4:ba:c3:2b:b3:e3:6c:50:d3:09:ad:fd:f9:
37:c5:c0:56:fb:1c:e0:0a:d9:78:d5:9a:15:26:d9:93:31:cf:
62:de:4c:5a:9a:a8:67:69:77:8e:d7:a0:a5:8e:e6:d2:93:b9:
b8:f0:8c:de:aa:5a:02:34:cb:23:97:d9:65:78:dc:73:8c:06:
4e:f0:37:3f:91:8b:d1:b2:7b:83:88:aa:16:04:05:f0:cf:2e:
07:97:f1:bb:41:59:01:19:b1:08:1c:65:20:9b:7a:7d:72:0d:
9d:50:1d:ec:6a:65:61:44:12:13:20:4a:96:bf:f9:94:30:71:
eb:1f:be:ec:fd:08:09:d1:53:d7:6e:7c:5e:43:e2:85:ea:b6:
ca:f9:d6:eb:a4:a5:8b:d5:03:7b:f5:5f:91:84:ed:6c:4c:86:
f6:e9:88:f1:4e:3d:98:08:26:f9:20:10:27:a0:e3:60:fc:c0:
5d:d7:e9:77:dd:87:8e:26:ea:9a:b3:9d:ce:c3:f9:85:e6:b1:
00:00:c6:4b:98:3b:a6:95:4d:8b:2a:89:30:c7:0e:c6:1c:f8:
9f:71:3d:25:e8:c4:d2:3a:96:c8:18:05:60:9d:d4:50:45:37:
72:a2:3b:2d:99:21:be:90:64:39:5f:73:cf:4c:2f:c5:37:7b:
4a:55:ff:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:42:02 2025 by rpki-client