Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
File: Es84yOexki9uvz_TQHNc2wQjFBg.mft (raw, json)
Hash identifier: Lj9bxnrD2Y2zjQvpTvnAhsEEdw5IZc3JRtQOBFwRitk=
Subject key identifier: 6B:65:A8:AD:33:9B:16:55:6E:B7:F2:95:FB:C4:BC:DA:9C:97:41:45
Authority key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
Certificate issuer: /CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Certificate serial: 01965F841CBEB0FEAC5A594582934256CCEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 22:00:15 +0000
Manifest this update: Tue 22 Apr 2025 22:00:15 +0000
Manifest next update: Wed 23 Apr 2025 22:00:15 +0000
Files and hashes: 1: Es84yOexki9uvz_TQHNc2wQjFBg.crl (hash: ZNBJ3P852OBePFWu9SGIu9goaKRJlvZFgezR3RvUa4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:84:1c:be:b0:fe:ac:5a:59:45:82:93:42:56:cc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Validity
Not Before: Apr 22 22:00:15 2025 GMT
Not After : Apr 23 22:00:15 2025 GMT
Subject: CN=6b65a8ad339b16556eb7f295fbc4bcda9c974145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:b4:48:55:6b:75:c6:17:3f:a8:df:8c:a8:
53:cb:5b:93:86:95:95:3f:fd:7e:10:c2:1b:46:d9:
99:7c:22:de:37:f0:93:2a:ce:f0:c3:b4:72:51:10:
59:85:d2:6d:00:01:66:c4:dc:09:43:8e:81:39:34:
1f:ac:2d:6b:a5:bf:ba:ce:a9:8f:cd:d4:75:83:dc:
f1:60:51:83:ec:da:6e:1e:d3:22:6c:be:dc:c8:b2:
99:8f:6a:58:69:62:b1:54:19:a4:7d:8c:94:e6:87:
3e:5c:fd:17:dc:a0:03:a1:30:75:21:a9:38:b5:97:
b9:e7:b1:c8:07:11:8e:1e:18:fc:88:f5:f7:3a:47:
45:fb:66:18:95:a9:87:97:05:ac:d7:f0:fd:57:2a:
89:08:71:85:b1:5a:23:01:99:4a:38:0b:0b:7e:b6:
95:c8:9b:39:ef:8e:ec:45:e5:8d:86:2a:16:53:7d:
7e:26:25:7b:ba:e8:8b:f5:c9:a7:80:ed:03:b6:bd:
6a:18:c2:ea:15:87:c5:bd:21:c5:d4:26:84:ae:00:
18:3b:3e:25:49:e8:e0:aa:62:a1:4d:99:0e:49:50:
8d:7d:4e:e2:22:b8:d2:ee:d6:0a:ee:d8:b2:85:f2:
63:62:1d:e7:3a:a1:2a:0e:29:d4:bb:16:66:67:d8:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:65:A8:AD:33:9B:16:55:6E:B7:F2:95:FB:C4:BC:DA:9C:97:41:45
X509v3 Authority Key Identifier:
keyid:12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ff:4b:52:c8:fb:24:e4:6b:d4:50:b8:33:48:f8:0e:2a:0d:
50:ca:fa:88:9c:33:04:c6:60:fa:66:28:19:82:33:29:9d:1a:
c3:8e:10:87:05:22:36:a3:b3:16:92:3d:10:f3:49:93:ba:0a:
1b:87:fc:fc:1c:4d:1c:96:5b:e4:9b:5b:9e:7e:a9:c2:25:14:
c0:65:49:f8:ef:8e:8f:a2:c5:fc:bf:22:89:d6:b5:fb:7a:1a:
98:9e:6d:8e:e1:bf:34:44:02:b5:e1:36:10:86:1d:f7:dc:0d:
c1:a0:11:cd:fb:b5:b2:b6:8c:f7:c2:15:f1:dc:40:5c:bd:41:
a3:5a:fa:f1:94:d2:62:b9:06:f3:3c:6b:e2:33:1c:2b:23:6f:
6d:d2:21:bd:fa:78:cb:44:c4:63:60:2a:6b:d3:1f:b8:a4:89:
4c:2b:02:d9:8c:ec:36:55:26:03:24:e1:3e:29:37:5d:65:3c:
c2:63:2b:26:85:15:d1:21:64:2d:0c:1c:a5:86:98:5c:f0:d9:
8c:b2:6e:4f:23:b2:e0:f6:32:23:40:90:cf:05:3d:73:2f:c7:
a6:b8:0b:0d:52:18:34:de:bb:40:b7:41:44:c0:9f:2e:59:04:
e3:e1:37:69:73:e6:39:58:22:d3:0a:b2:87:d4:1f:b2:f5:41:
2f:ab:b8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:54:12 2025 by rpki-client