Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
File: EsCzmbynzX_KI2gTkGefXMqVueE.mft (raw, json)
Hash identifier: y0/Z3rSK2J4AUHinuSjUgCaWKqJhqQz60PX2182A9HM=
Subject key identifier: 5E:79:B5:80:90:F8:4B:45:7F:F5:52:FD:A4:CD:AF:D0:6F:EB:73:7A
Authority key identifier: 12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
Certificate issuer: /CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Certificate serial: 019655DC991E6C605D7DC06F75775D35972A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
Manifest number: 126C
Signing time: Mon 21 Apr 2025 01:00:42 +0000
Manifest this update: Mon 21 Apr 2025 01:00:42 +0000
Manifest next update: Tue 22 Apr 2025 01:00:42 +0000
Files and hashes: 1: EsCzmbynzX_KI2gTkGefXMqVueE.crl (hash: 6QHETr3cyQfFYbgRD/Y1FxqLkweDuYXZb9usRceVqeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:99:1e:6c:60:5d:7d:c0:6f:75:77:5d:35:97:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Validity
Not Before: Apr 21 01:00:42 2025 GMT
Not After : Apr 22 01:00:42 2025 GMT
Subject: CN=5e79b58090f84b457ff552fda4cdafd06feb737a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:4d:45:6f:c3:77:fc:c7:95:bf:78:64:97:
0e:11:fd:df:9a:65:5c:28:9b:a6:e8:ac:a9:2c:3e:
fa:c0:39:d8:03:25:61:26:cb:e1:e7:4a:c1:30:77:
e6:fd:ed:f4:ee:8e:24:9d:ec:b8:4d:ab:46:2f:39:
ff:70:83:88:96:00:75:96:f4:89:3b:50:c5:5f:76:
6c:7b:36:56:4b:d4:f6:e2:68:8c:80:cd:9e:b4:1d:
d5:89:71:5c:a0:65:72:de:f3:16:58:7b:59:a4:38:
5a:6b:21:88:e9:01:78:42:6b:9d:0d:8f:00:87:bb:
0f:88:a9:85:c5:64:a4:58:1d:76:f9:81:bd:56:dc:
42:9b:80:03:06:38:96:f7:9b:dd:6a:df:b0:9c:52:
b6:94:f1:43:58:07:5d:05:4e:25:66:59:a7:08:fb:
78:45:ad:a5:f7:f0:2e:53:00:e5:05:4d:87:74:0c:
e3:b7:f3:79:b2:e0:3f:3f:4f:72:96:24:5d:1d:87:
f0:a1:31:33:87:92:fa:88:75:bd:3c:f2:a9:01:50:
b6:66:da:90:47:36:31:41:38:35:60:86:99:d6:e8:
06:9d:52:fd:50:54:07:16:59:87:0f:cc:e7:9b:c2:
fe:15:cb:0a:86:33:f1:a6:10:70:af:0d:33:17:91:
56:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:79:B5:80:90:F8:4B:45:7F:F5:52:FD:A4:CD:AF:D0:6F:EB:73:7A
X509v3 Authority Key Identifier:
keyid:12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:73:f1:4f:96:31:8b:a8:e2:6e:cd:9d:9a:a1:97:7c:3d:e1:
8d:f5:b1:ac:2d:a1:51:f1:48:2f:58:5c:db:33:c4:f9:bd:fe:
69:fb:8c:71:7a:07:d4:11:95:7f:8f:69:14:60:c4:6c:8c:04:
f5:48:d0:12:2e:48:11:ca:6e:40:76:f6:8f:5a:e9:fd:e5:c0:
e5:92:79:de:a6:98:60:03:83:7e:23:78:d2:13:b2:29:26:ee:
69:ec:1a:64:38:41:de:06:fe:0f:22:de:28:b8:f0:ed:70:ed:
41:e0:f1:6b:f5:eb:d6:29:27:dc:b1:e0:ab:3e:d4:14:4d:18:
f4:16:14:3e:71:e0:53:63:a3:5d:84:7a:da:ab:cc:01:d7:26:
34:f0:35:43:6b:ac:c1:b5:21:51:a7:d3:7e:0d:5f:27:22:05:
18:25:94:a5:ff:44:14:3b:cb:40:cc:44:d0:50:26:26:6a:ed:
cd:c7:3c:bb:dd:31:2b:20:22:e5:28:0f:0b:3f:f1:12:9a:04:
92:bc:df:c1:34:2a:9f:d3:66:4e:36:53:4c:1a:48:4e:f1:38:
4e:d7:80:96:94:d9:51:11:50:5a:88:dd:11:df:b5:53:33:3a:
58:b3:ef:66:7a:1c:a4:17:0e:5f:1a:2a:a4:ff:56:53:fb:5f:
70:23:36:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:09 2025 by rpki-client