Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
File: cVYaucXzkpItp8rhgMMwc2XwI4Y.mft (raw, json)
Hash identifier: z7DyC0E2o9cvjBMb9xflE+Ao174YLN6oNYRkw5g2gkg=
Subject key identifier: EB:6B:66:5A:81:9E:2F:90:90:66:0A:BF:21:5C:CB:C3:78:60:3F:49
Authority key identifier: 71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86
Certificate issuer: /CN=71561ab9c5f392922da7cae180c3307365f02386
Certificate serial: 01964F6D5111E140A79AD49AFD0F3492C423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
Manifest number: 0E2C
Signing time: Sat 19 Apr 2025 19:01:26 +0000
Manifest this update: Sat 19 Apr 2025 19:01:26 +0000
Manifest next update: Sun 20 Apr 2025 19:01:26 +0000
Files and hashes: 1: cVYaucXzkpItp8rhgMMwc2XwI4Y.crl (hash: kgC8SZPyn27eP9DDoEobLDlhDUQIo38hFrbVrZyRYBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:51:11:e1:40:a7:9a:d4:9a:fd:0f:34:92:c4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71561ab9c5f392922da7cae180c3307365f02386
Validity
Not Before: Apr 19 19:01:26 2025 GMT
Not After : Apr 20 19:01:26 2025 GMT
Subject: CN=eb6b665a819e2f9090660abf215ccbc378603f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:7d:22:5f:22:45:cb:18:c9:5a:b5:c0:9e:
33:7c:6f:17:5b:67:33:64:1b:7c:79:92:01:f9:7b:
02:79:e3:b4:68:c3:41:59:07:fe:f0:12:40:a4:c0:
eb:fc:31:e5:c5:1c:e1:63:54:59:14:7e:e3:48:4c:
c1:6c:8c:c3:cd:62:90:cb:e2:9d:ab:08:b4:da:16:
5e:9d:22:54:d3:f1:c2:ac:cc:2d:7f:9f:33:9c:b8:
52:b0:e3:ef:7f:fe:a3:a6:5d:ff:79:cf:f1:b9:32:
30:16:aa:78:4f:36:3c:fb:44:0f:95:15:b8:11:86:
49:34:13:83:a3:5a:82:8d:e7:ae:fe:56:7f:9c:85:
3a:cd:68:1b:4e:32:8d:e1:76:31:77:e6:8d:57:19:
42:09:4c:90:e8:b9:e3:bf:af:b5:94:b8:92:c4:61:
dd:13:2c:9e:d2:99:36:8f:d3:b2:27:8b:ae:77:00:
39:af:34:f4:67:6a:03:6a:34:39:c2:26:2f:c2:7b:
c2:64:d6:c3:5f:b9:fb:4b:13:67:cb:f4:24:e0:88:
d0:1b:95:47:4c:85:20:6b:0e:bb:c4:cc:18:16:3e:
15:0f:bc:92:a6:09:94:64:bd:5c:04:d8:dc:c5:be:
3c:d6:d4:f8:15:22:a8:46:eb:26:43:b5:0a:05:dd:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6B:66:5A:81:9E:2F:90:90:66:0A:BF:21:5C:CB:C3:78:60:3F:49
X509v3 Authority Key Identifier:
keyid:71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4a:83:00:64:6a:87:3f:cb:59:44:55:5d:47:93:a2:d8:2d:
4f:c3:13:69:ca:9f:90:a5:60:ab:bb:f5:22:b1:fe:83:3e:d7:
53:eb:73:c5:16:19:77:b0:9b:2a:7c:3b:d6:15:7c:6d:1b:b7:
e5:f0:31:49:19:d2:d1:d3:f2:7b:42:70:f4:c7:14:f3:78:cd:
f5:2b:b2:15:61:55:fb:25:64:b8:d6:bb:c4:6f:01:ee:09:f5:
46:06:d8:f7:21:5d:a1:8a:9f:77:cb:c2:1d:f3:4c:24:04:b5:
05:e7:bd:11:e9:9e:4a:62:2c:e7:28:f0:64:82:a1:f8:d6:bc:
3e:58:58:ea:a4:ae:b0:41:2b:2a:2b:5d:4b:bd:02:36:ba:4a:
e5:69:1c:3f:8d:ca:3a:c0:cf:9d:14:23:27:f5:ad:87:92:3a:
a4:c0:9c:00:be:c0:f6:5b:2a:2b:e1:d0:29:f2:4c:f7:cc:83:
b9:5a:9b:e8:ef:21:1b:bd:9e:e8:eb:51:66:62:c2:e4:db:42:
b2:33:03:c8:41:b4:2a:6b:de:9c:30:94:11:af:63:b4:22:2f:
d5:ca:b7:ee:6f:b4:c0:2b:b7:68:b8:ff:10:84:3b:c9:24:fc:
d3:6f:fc:31:95:fd:72:11:9a:96:c8:53:19:3c:37:86:ec:a5:
92:88:51:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:22 2025 by rpki-client