Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
File: EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft (raw, json)
Hash identifier: 7GgCtQStns80odGuiGc4OyhXtpK1s52v5r6YuqKNIns=
Subject key identifier: B4:15:EA:20:14:02:76:78:23:EE:01:51:1D:A2:2F:AD:0C:A4:31:AA
Authority key identifier: 10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
Certificate issuer: /CN=1038d7a2954a32d2afd16b88b363b390681cd593
Certificate serial: 01965726D0BF18D3BE1E4EDEC9510B8CFB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
Manifest number: 0DD2
Signing time: Mon 21 Apr 2025 07:01:23 +0000
Manifest this update: Mon 21 Apr 2025 07:01:23 +0000
Manifest next update: Tue 22 Apr 2025 07:01:23 +0000
Files and hashes: 1: EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl (hash: OvYltwyKqKnDzrKvOJvv6TZawte9RM0O2EmfYZ0VZok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:d0:bf:18:d3:be:1e:4e:de:c9:51:0b:8c:fb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1038d7a2954a32d2afd16b88b363b390681cd593
Validity
Not Before: Apr 21 07:01:23 2025 GMT
Not After : Apr 22 07:01:23 2025 GMT
Subject: CN=b415ea201402767823ee01511da22fad0ca431aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:98:29:70:93:a0:41:1f:c6:7e:bc:e5:f5:
7a:fa:a1:e6:65:cc:94:77:04:90:e0:c5:e8:83:6c:
fb:6d:5f:16:54:9d:14:65:38:3c:36:92:a2:31:9a:
0e:e4:4d:e1:c5:3b:71:5d:3e:3b:ba:d3:b3:78:c5:
28:d3:66:db:c3:ae:1a:0d:c3:47:89:a9:ab:30:1a:
1b:c6:a5:0e:75:af:92:95:f2:e5:68:d5:3c:58:a2:
51:92:7a:54:21:6a:00:89:50:23:5d:f1:74:d1:e0:
d0:96:9b:ea:90:f8:a1:b4:c4:d7:6d:da:2d:4c:88:
59:f7:60:36:3a:da:f4:b7:dd:48:a8:90:ed:28:2e:
bd:c4:1d:16:3a:c0:4f:f2:92:bf:5b:6b:88:d4:79:
ff:ad:74:fe:0f:cd:03:37:06:29:99:35:71:16:bb:
fe:ed:82:f2:57:8f:b2:c4:4f:13:8b:79:fd:b2:b9:
e5:c0:c4:62:54:0c:cc:3f:7b:b4:b7:c8:5d:87:07:
0d:fe:1d:bd:1d:86:7d:23:84:46:cc:07:a6:cb:96:
27:e8:cd:f9:73:02:aa:d1:57:70:b2:53:c3:76:bf:
d5:b1:4e:ce:91:ec:95:cf:6f:77:51:4d:a8:06:87:
68:b4:34:4b:a0:6d:be:bf:c0:99:b4:e4:5d:7b:82:
16:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:15:EA:20:14:02:76:78:23:EE:01:51:1D:A2:2F:AD:0C:A4:31:AA
X509v3 Authority Key Identifier:
keyid:10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:a4:4d:9c:0c:e9:b7:93:86:b5:3d:9b:08:b9:67:e0:e3:94:
ae:64:9d:77:fb:83:f0:c3:be:ec:e0:22:60:fa:ba:46:5a:31:
df:8a:a2:86:c1:fa:ed:10:04:f0:8b:92:ef:3a:b1:79:37:30:
aa:42:72:51:6b:a5:2b:b9:14:02:77:93:27:ae:46:63:98:19:
b9:63:04:4b:f6:49:d5:93:3d:65:cd:ab:a9:ed:01:cf:35:00:
23:47:f0:bd:ec:96:ba:c2:bd:67:3f:66:ef:c3:d2:d7:ed:34:
63:ed:bf:96:00:b5:0a:de:23:26:4e:bb:61:9a:e0:99:1f:17:
1a:d0:7f:4b:9a:8b:3a:b9:f1:e6:3d:b1:cc:f9:9b:0e:90:d8:
fc:ca:2b:85:20:0f:32:5d:70:be:99:9d:eb:c3:be:2d:19:10:
59:9a:e4:77:c2:31:ad:8c:a8:41:2a:c5:91:7c:e4:95:c2:82:
0c:71:e1:d2:5a:61:a9:b5:5c:60:0a:74:2e:f7:d1:21:3f:3c:
aa:49:65:d7:3f:fb:c6:a7:bb:75:e4:49:4d:a5:4b:29:ea:89:
74:32:18:8a:73:fe:fc:43:13:5f:04:35:82:64:a0:a6:96:8c:
43:0c:d0:fc:f5:70:f4:df:eb:70:c7:aa:e5:a8:97:b2:18:bf:
e5:92:5f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:33 2025 by rpki-client