Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
File: 582m42RtyToNLUKV0esJR2xmvKY.mft (raw, json)
Hash identifier: cF8kq10TsbctAqwrL3kY9KLAyh1PNHsRXb2QXuxb4SI=
Subject key identifier: 17:32:17:9B:51:05:02:64:4C:FB:0D:EE:27:E2:80:F4:37:56:6E:E5
Authority key identifier: E7:CD:A6:E3:64:6D:C9:3A:0D:2D:42:95:D1:EB:09:47:6C:66:BC:A6
Certificate issuer: /CN=e7cda6e3646dc93a0d2d4295d1eb09476c66bca6
Certificate serial: 019659F0A743B4376CB82534269BE9E33DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
Manifest number: 0227
Signing time: Mon 21 Apr 2025 20:01:05 +0000
Manifest this update: Mon 21 Apr 2025 20:01:05 +0000
Manifest next update: Tue 22 Apr 2025 20:01:05 +0000
Files and hashes: 1: 582m42RtyToNLUKV0esJR2xmvKY.crl (hash: 8qI+3qQ3Z/zYOnuAlIpJsfA/sTA++id0mkirXt2armE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:a7:43:b4:37:6c:b8:25:34:26:9b:e9:e3:3d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cda6e3646dc93a0d2d4295d1eb09476c66bca6
Validity
Not Before: Apr 21 20:01:05 2025 GMT
Not After : Apr 22 20:01:05 2025 GMT
Subject: CN=1732179b510502644cfb0dee27e280f437566ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:e8:d8:35:62:0c:50:79:b0:fc:9a:84:d5:
18:a5:9f:bf:e2:58:c9:f9:88:7c:64:a0:f1:ca:51:
05:fc:b7:93:2c:3e:95:83:52:6d:5f:be:b6:56:bb:
50:78:b5:2d:11:e1:e1:c5:94:dc:71:27:b6:f5:04:
c4:22:ae:d3:14:33:d4:83:55:22:1f:ec:f5:cc:a5:
3a:46:a4:bb:50:2d:c3:17:52:2e:80:1f:52:b0:74:
0c:90:d8:74:90:dd:b4:a0:da:17:9b:6d:47:d7:21:
fc:e8:a0:e2:62:f0:8e:4b:1d:97:7e:0b:d2:48:38:
75:49:ba:cf:a9:e1:ca:e3:32:38:3b:9a:d1:62:70:
3e:39:91:c5:8b:c6:6c:55:9b:6c:69:d1:a4:7f:36:
7b:96:cb:48:6b:5b:73:71:80:34:dd:ec:ec:8d:73:
bc:e0:26:c5:31:7d:1c:51:f0:e2:61:bb:0c:d1:e3:
af:f9:47:52:53:50:1e:4b:07:fe:0c:cc:92:90:50:
90:c6:0c:85:f6:93:cd:1a:76:e3:d9:1e:aa:d0:56:
0f:28:77:20:ba:f2:30:80:30:30:57:1e:0b:1e:7a:
5a:da:f1:a6:22:62:92:90:9f:76:c1:b6:2b:7f:e0:
af:17:74:5f:3e:13:56:69:d1:7b:b1:54:c9:c9:49:
86:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:32:17:9B:51:05:02:64:4C:FB:0D:EE:27:E2:80:F4:37:56:6E:E5
X509v3 Authority Key Identifier:
keyid:E7:CD:A6:E3:64:6D:C9:3A:0D:2D:42:95:D1:EB:09:47:6C:66:BC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2a:e3:0f:47:8c:72:f9:39:e2:7c:45:ac:c2:d1:b7:c6:29:
a9:85:d3:5b:3a:ef:3d:fa:ed:26:3e:7b:4b:c2:72:99:8a:a6:
9e:78:67:4b:a7:cd:4c:b5:80:4d:bd:f0:6a:17:ea:36:a8:ac:
b7:2a:bb:85:a0:22:27:34:de:9d:1a:12:2f:36:4d:9e:b2:4c:
b9:6a:6a:17:2b:63:9b:7d:e4:38:1e:be:45:c7:04:3b:83:e6:
81:2b:01:6a:9a:c8:e5:ac:da:2a:6d:ca:18:ef:88:d4:1a:af:
98:41:e8:0d:6e:53:e8:79:70:c6:69:6c:52:6c:d9:69:bb:92:
3b:78:58:4f:6a:06:1f:46:ab:88:5f:32:d9:35:4c:df:ac:42:
8f:4f:7a:a5:e4:4e:82:4c:40:fb:bc:b8:90:c9:77:f8:6a:f0:
e7:62:95:24:8f:42:5a:7a:5c:d3:95:87:ed:95:bc:37:7c:fb:
93:22:b8:6f:2e:11:c7:d4:ea:88:4b:61:dd:e8:ee:9a:c6:25:
b5:b7:ce:53:ae:b0:e7:25:30:60:13:fd:91:0a:eb:e0:8f:4f:
99:fc:12:0d:91:91:52:3b:d8:2d:98:ee:7e:67:61:c5:e9:c8:
b7:4f:17:e1:c4:70:45:95:ea:8f:df:9d:9e:ca:e8:48:9e:c6:
61:ad:22:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:03:07 2025 by rpki-client