Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
File: moI9HNrrg3dfH7vV-frkGsXfFxk.mft (raw, json)
Hash identifier: E3qCwe2wIY+H6ij86bJyjA/TatW5COAi7IhktriLURg=
Subject key identifier: EB:EB:66:AA:9C:9B:DB:01:34:FD:7D:09:EC:AB:1F:BE:50:6E:B3:25
Authority key identifier: 9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
Certificate issuer: /CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Certificate serial: 01965982762560CC561A3160DBE4474030C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
Manifest number: 0538
Signing time: Mon 21 Apr 2025 18:00:44 +0000
Manifest this update: Mon 21 Apr 2025 18:00:44 +0000
Manifest next update: Tue 22 Apr 2025 18:00:44 +0000
Files and hashes: 1: moI9HNrrg3dfH7vV-frkGsXfFxk.crl (hash: VWEzGOWmSZOWJVGVDU/VeBApfgNXH0zhZAlYtXbVju4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:76:25:60:cc:56:1a:31:60:db:e4:47:40:30:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Validity
Not Before: Apr 21 18:00:44 2025 GMT
Not After : Apr 22 18:00:44 2025 GMT
Subject: CN=ebeb66aa9c9bdb0134fd7d09ecab1fbe506eb325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:ef:58:c7:0d:17:36:52:35:7d:9b:51:2d:
0a:c4:57:5c:5b:f4:fb:84:d3:49:46:94:7f:75:ec:
aa:c1:b5:cc:27:a4:49:6b:7b:5f:97:74:85:db:b7:
83:7d:d1:81:1d:fb:5c:97:8d:a8:ba:63:ec:09:76:
46:a1:64:bb:1c:55:75:13:d9:64:e9:0f:00:3d:d4:
cf:e3:37:c7:43:b1:5b:4c:76:20:3c:64:8a:4f:21:
b0:e9:a5:ba:6e:c2:31:29:cd:f7:48:da:e6:7c:04:
eb:cd:13:ef:1f:0c:ed:ac:a1:67:f4:6c:5e:26:67:
1c:d7:10:1c:58:ed:d8:53:10:f7:e1:5b:8b:3b:00:
b9:cc:49:5c:03:c5:b7:78:ef:55:a2:63:86:8a:42:
7b:df:99:8f:04:08:1f:b1:76:7a:d6:7b:aa:58:6f:
30:ee:fe:af:9e:58:4e:46:23:00:78:ba:ca:e9:8b:
37:23:e9:e1:87:78:88:d4:eb:b7:84:4b:40:7b:f2:
15:9f:ac:f7:e4:3a:43:d1:2e:d4:78:7d:2f:7c:ac:
05:5b:81:54:03:19:e9:51:07:6f:5f:fb:c4:71:a5:
a6:b1:75:60:72:af:c0:93:77:5c:f3:da:cc:ae:bf:
43:19:68:46:e4:fd:e5:ba:7f:86:b4:28:34:d0:a6:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EB:66:AA:9C:9B:DB:01:34:FD:7D:09:EC:AB:1F:BE:50:6E:B3:25
X509v3 Authority Key Identifier:
keyid:9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:45:44:6f:f8:25:51:85:6c:1f:ae:c6:3a:e8:e4:e2:a1:b4:
47:7a:c7:0c:25:5e:22:d1:78:2e:69:35:41:c6:f9:24:e0:aa:
bf:27:03:85:36:b3:e2:75:65:8e:21:b9:18:77:4e:74:cd:a8:
21:dd:33:b6:a6:79:34:ac:5e:36:1f:9d:4d:55:ed:a7:2e:75:
75:5c:64:fe:26:df:be:5e:16:35:c5:c0:b5:67:92:d8:b0:35:
50:33:6d:64:25:19:9c:28:b7:63:af:9d:17:6c:74:47:21:7f:
e9:e8:a5:ab:8d:a6:b4:6c:32:1b:2c:e7:a0:c2:73:a5:09:ab:
41:1b:7f:47:91:93:08:77:e4:4e:22:da:eb:17:84:ac:de:9c:
ff:e9:03:f9:46:e4:ca:e8:04:65:11:1a:0d:42:b3:c5:be:84:
f2:7c:38:3d:62:42:4c:59:14:e1:04:a9:d2:21:4e:12:4a:c8:
a4:44:93:8d:86:a8:d0:17:92:b5:f7:f4:d8:4b:1d:42:74:c9:
75:4f:5f:0e:ad:41:9e:51:c2:67:b9:6e:19:e5:dc:b9:b0:b1:
5a:ca:15:9f:3d:a4:1d:a4:c3:4c:a5:ac:20:40:bf:70:29:e6:
c9:de:f9:66:b5:f0:03:10:94:8c:71:2f:ae:66:bd:ae:15:20:
35:d7:08:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:45 2025 by rpki-client