Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
File: ew-qtXmEcO5RadPr8tExWFnPraQ.mft (raw, json)
Hash identifier: AhyJpJZCo0vK+w80YcKuMLnbdsEeThO7icQ0XIzi+i0=
Subject key identifier: FB:8D:A9:4B:C4:B9:83:EC:4A:A5:E4:3E:B4:AB:9E:62:C7:32:05:E1
Authority key identifier: 7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
Certificate issuer: /CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Certificate serial: 019655380A27F9EE029408A1BF019EAF32EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
Manifest number: 12AE
Signing time: Sun 20 Apr 2025 22:00:58 +0000
Manifest this update: Sun 20 Apr 2025 22:00:58 +0000
Manifest next update: Mon 21 Apr 2025 22:00:58 +0000
Files and hashes: 1: ew-qtXmEcO5RadPr8tExWFnPraQ.crl (hash: 4lW963RK3Ymv/9XSkROX9Svz3tbwCvbmc74PWgwCsxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:0a:27:f9:ee:02:94:08:a1:bf:01:9e:af:32:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Validity
Not Before: Apr 20 22:00:58 2025 GMT
Not After : Apr 21 22:00:58 2025 GMT
Subject: CN=fb8da94bc4b983ec4aa5e43eb4ab9e62c73205e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c9:43:e5:a1:3f:1f:9b:1b:57:f2:b9:0e:50:
bd:9f:10:0d:5e:a7:76:eb:9b:f1:96:21:a1:62:41:
7b:25:cc:b5:21:0c:95:f7:1f:e1:ea:92:53:17:67:
c9:82:a1:ce:44:bd:8d:c5:b5:0c:ca:92:c9:4b:63:
57:b9:8c:d9:a3:6f:13:cd:a7:c0:5b:52:9b:17:31:
c6:d2:f6:5c:13:fc:b6:d7:f0:57:b4:26:d8:54:0b:
0e:48:19:b6:bf:b5:76:46:8e:96:f2:7c:5f:5a:10:
12:03:c4:74:38:ea:08:b6:38:6b:3c:df:d0:1d:b0:
5c:fc:b0:5b:e3:24:9f:09:5f:34:c8:a4:c7:69:84:
d3:da:41:59:6d:0f:2c:8e:ba:46:a0:bb:ab:43:74:
9f:9a:fc:79:e0:3e:8d:e7:82:fd:b6:3b:b1:71:34:
ea:4c:38:1c:3a:8f:69:05:fa:a7:b8:ff:5c:90:93:
cb:30:fe:33:8d:f3:71:ed:29:4b:fd:57:a8:c3:35:
fe:2f:df:4d:07:57:49:93:1c:d3:c8:36:4a:03:10:
26:60:b9:c2:43:4a:e0:ab:8d:0a:6e:9b:24:de:5d:
b2:39:d9:c9:8d:b4:6d:e9:05:51:b9:6d:02:e8:f8:
97:f3:23:ce:4e:6d:53:9b:9d:fb:f2:f7:0e:08:bd:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8D:A9:4B:C4:B9:83:EC:4A:A5:E4:3E:B4:AB:9E:62:C7:32:05:E1
X509v3 Authority Key Identifier:
keyid:7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4f:84:40:23:0b:1d:f1:35:d5:9d:c7:dd:a4:45:e2:b0:0d:
59:f6:65:3a:5b:88:67:57:74:e2:51:1b:c1:0e:45:c9:c6:41:
c8:be:08:9b:b9:d7:6e:5d:ea:8c:97:80:a2:40:27:ea:1e:93:
71:77:11:55:84:68:f5:3b:4b:f1:20:30:91:a8:c9:42:dc:e3:
70:25:26:ed:2c:99:dc:6a:f0:0a:f3:45:f2:c3:bc:b7:48:6d:
3b:60:37:f7:40:60:d7:95:17:b4:89:c5:25:e9:9f:d9:e8:53:
cf:84:6e:75:59:c6:61:42:97:fb:c6:9a:17:a7:af:94:77:74:
cd:05:62:ed:41:5d:c5:9e:c7:86:a2:55:60:f8:02:26:2f:ff:
fa:45:d8:97:9f:da:a9:08:81:5f:6d:46:82:7d:d5:ba:a3:71:
14:4d:d7:a0:23:98:83:4b:ed:2a:fb:63:c8:81:9d:6f:f2:f2:
88:b7:a7:bb:d0:4f:88:5e:4c:8f:ed:cb:8f:37:c9:98:bd:dd:
37:3b:e9:6c:56:a6:aa:63:d4:fc:01:5f:68:4f:6f:a3:fe:71:
84:4a:a5:59:cb:79:23:63:55:bb:dc:44:e3:06:ac:e0:a3:50:
62:82:6d:12:dc:46:c2:2e:61:59:c1:9d:81:b4:a3:ba:a1:03:
cc:34:6b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:19 2025 by rpki-client