Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
File: EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft (raw, json)
Hash identifier: 35CxsRTP5k8OzOD2f1X1bYYBM0nSqmJC9gnXPTsQBsU=
Subject key identifier: D6:C6:CD:AF:26:CB:46:D1:B0:03:83:B7:22:F8:46:1B:AA:7E:09:9E
Authority key identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
Certificate issuer: /CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Certificate serial: 01965B03940ECCE8681F2631F9CE012D0DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 01:01:23 +0000
Manifest this update: Tue 22 Apr 2025 01:01:23 +0000
Manifest next update: Wed 23 Apr 2025 01:01:23 +0000
Files and hashes: 1: EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl (hash: xhHXqi3P/qFKMTMJ2qWN5Q0ad4p72fVq9D4IbGN2FW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:94:0e:cc:e8:68:1f:26:31:f9:ce:01:2d:0d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Validity
Not Before: Apr 22 01:01:23 2025 GMT
Not After : Apr 23 01:01:23 2025 GMT
Subject: CN=d6c6cdaf26cb46d1b00383b722f8461baa7e099e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:9c:63:8e:85:c0:db:8f:79:9b:97:de:ad:
33:5d:7b:ab:b7:a0:38:7b:28:ac:ee:36:fa:65:e3:
81:50:79:02:43:1b:ce:cb:58:be:d0:bd:37:f1:e4:
3e:d7:e0:eb:c2:e6:71:a2:06:76:5a:20:a5:89:79:
b6:65:a1:2a:d1:41:fb:50:3b:69:48:c8:ac:61:e1:
2e:92:20:a9:c0:97:e1:6e:e4:0f:46:85:7c:fa:ba:
cc:65:55:aa:8d:1e:3d:c9:d8:e0:c2:c9:f0:af:e5:
4b:4d:75:23:cb:54:c5:c7:73:58:70:02:57:00:b5:
a2:06:f0:d2:89:c5:4f:9d:fc:a3:91:8d:40:24:77:
cb:34:f3:34:e4:2e:32:ae:fd:cc:c3:61:67:d2:14:
63:71:3b:e1:e3:92:c2:25:b2:6c:9b:7c:56:d6:8a:
49:53:9a:64:e6:e6:b5:ec:68:73:ac:56:44:17:6b:
e0:f5:83:07:8e:a4:31:b4:7e:23:7d:8d:5d:a5:ed:
9d:12:96:2a:f0:30:8b:78:2b:d0:22:ea:e3:f6:aa:
89:e7:41:50:69:b6:d3:40:ba:06:a2:22:60:00:1b:
b9:d3:eb:ed:96:08:f0:c2:ee:74:ca:6a:87:f7:74:
d4:ed:d0:d5:c2:5e:a7:8b:9e:15:b9:c4:17:0e:ee:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C6:CD:AF:26:CB:46:D1:B0:03:83:B7:22:F8:46:1B:AA:7E:09:9E
X509v3 Authority Key Identifier:
keyid:11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0a:67:98:4f:97:7a:0d:05:5f:66:05:9a:44:ae:b8:93:94:
81:31:56:58:f3:f0:49:0b:e0:ab:e0:64:2b:1c:79:32:45:ac:
b1:00:c2:c1:28:8e:c3:64:ba:43:e1:dd:4b:76:ef:ff:49:0b:
5a:09:73:71:ac:84:69:26:84:5e:da:ee:fc:28:d6:ae:9f:53:
c7:04:cc:c5:5a:d2:c2:86:f4:26:1c:6f:f9:54:b5:e8:54:ee:
fb:3f:c3:6f:a6:58:2c:e4:bb:86:b0:95:7c:97:74:0e:2d:59:
b5:f3:2a:13:01:19:ff:66:09:29:0e:8f:0d:3b:36:5c:6d:56:
81:f3:ca:cb:40:40:cb:4b:a3:13:80:4c:91:e7:23:5a:20:d6:
fa:3f:58:2c:58:c1:3a:95:62:c0:ff:1b:b3:d1:57:50:d5:27:
0d:4e:37:ec:a3:eb:ea:39:2a:f7:41:6a:8d:27:cd:10:18:d2:
de:23:97:fe:96:de:f0:ff:fc:52:d3:f0:9e:bf:fa:92:b2:c0:
ce:33:35:b1:06:95:5b:4c:4f:96:00:68:a9:c8:03:9d:20:1b:
04:b5:f1:9c:08:1a:3b:15:5d:91:3f:57:31:d1:07:6a:9c:74:
e0:ba:89:59:48:f0:5b:72:70:8a:71:83:f4:77:81:c1:4a:ef:
2d:75:d0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:35:06 2025 by rpki-client