Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File: eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier: 1z2ixJ4+mnAg3GXdNLuV0AdX+ngCvvN5a5ZSrmFP370=
Subject key identifier: C1:AF:43:F1:57:CC:F0:62:F3:23:AF:29:C2:0E:71:12:EB:6D:E8:80
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer: /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial: 019652A4677C678CBBE5F4A64149B8F171F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number: 0ABB
Signing time: Sun 20 Apr 2025 10:00:28 +0000
Manifest this update: Sun 20 Apr 2025 10:00:28 +0000
Manifest next update: Mon 21 Apr 2025 10:00:28 +0000
Files and hashes: 1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: l/6TLXhIaYz/GUGOjtO9BwOb2timZwIMy2KWX9mecc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:67:7c:67:8c:bb:e5:f4:a6:41:49:b8:f1:71:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Validity
Not Before: Apr 20 10:00:28 2025 GMT
Not After : Apr 21 10:00:28 2025 GMT
Subject: CN=c1af43f157ccf062f323af29c20e7112eb6de880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:10:d6:e3:ad:14:dc:b8:20:76:9d:4f:ba:9a:
90:44:d6:a9:d4:fb:46:72:94:bf:77:a2:dd:66:12:
35:05:28:7f:7d:43:2e:88:b7:84:e7:a3:29:fe:13:
62:00:10:1b:bd:42:88:53:d5:c4:f5:18:67:c1:ea:
65:c1:a2:4f:af:e3:cd:e7:29:d5:68:54:f8:dc:64:
6b:e7:73:9a:2a:b7:1d:fd:7b:07:34:3f:f4:87:1c:
8f:eb:62:6e:d0:e9:6c:47:68:88:71:55:4f:cf:48:
98:8a:16:17:4b:e5:e2:6c:86:3f:18:94:6a:ea:4c:
f1:14:a1:36:2e:a3:45:45:5a:18:86:00:58:df:c5:
32:7b:5f:ac:bc:c2:e2:24:97:85:31:96:71:8f:ab:
e1:98:98:1b:41:53:31:5a:cd:6b:5f:43:fb:6c:cf:
15:0c:ab:fc:d4:1b:15:ae:bd:10:43:2f:9f:77:35:
09:2e:bd:d8:0a:46:0b:a3:54:06:5c:12:5d:e4:a8:
70:31:d8:53:4c:be:a5:f7:1c:ce:76:c6:bb:87:80:
ff:34:b4:1d:ac:65:7a:cb:63:95:20:60:70:a4:1c:
09:cb:2e:a2:96:7a:96:59:d9:c1:c5:42:49:06:0d:
92:40:58:ff:54:0c:bb:00:27:79:5a:b1:39:ff:b9:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:43:F1:57:CC:F0:62:F3:23:AF:29:C2:0E:71:12:EB:6D:E8:80
X509v3 Authority Key Identifier:
keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2c:62:bb:91:22:d9:67:1a:38:98:ed:5d:08:5c:05:0c:af:
28:7e:5a:19:61:df:17:87:a4:85:9e:b9:96:4f:d7:1c:dd:1f:
6a:f6:52:08:26:84:b5:84:ef:d5:09:de:f3:61:dc:14:d0:1e:
fd:72:ab:3e:83:fb:91:de:2c:84:c2:3b:1b:a1:dd:8f:8f:09:
9c:6e:f9:b4:20:01:9a:c5:b2:d1:9e:db:b8:37:14:94:a0:3e:
e2:89:20:30:78:f1:92:bc:56:bb:2e:57:bd:73:e4:d9:51:e5:
e9:35:b2:a4:7b:70:ff:0e:7f:aa:93:01:11:f6:d2:53:3e:a1:
53:4c:71:d9:a9:37:d1:b4:28:6d:fd:f4:ee:98:d0:85:9f:69:
5e:0f:aa:0f:07:e0:8f:27:37:18:77:9a:c0:89:a5:2a:17:29:
36:41:ef:a1:04:1b:1d:01:da:ac:cc:9f:53:de:b9:a9:3a:04:
e2:62:7a:18:46:26:f3:06:7a:b8:4a:51:aa:0b:08:66:a2:fc:
fc:7e:90:7e:f2:91:96:25:26:6a:e4:72:35:c0:4c:c3:21:71:
e2:48:cd:d6:03:32:ef:ee:b8:af:9d:96:0f:34:84:83:61:32:
31:bc:67:00:20:30:cd:b1:e8:fd:ed:c0:63:7c:b1:8a:39:82:
ef:a5:84:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:15 2025 by rpki-client