Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
File: e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft (raw, json)
Hash identifier: gvFxK7i5OeJp46hIo/SPPbfCYLym+R4Q6gHLIvPkb2E=
Subject key identifier: B9:93:A9:DF:CD:D3:17:F2:C4:BE:8C:54:83:A7:D2:CD:34:15:4C:BF
Authority key identifier: 7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF
Certificate issuer: /CN=7bd78d9140ad6e742e167063206582c1c45952bf
Certificate serial: 01964B8FB7036EC70BC92720609EF18129E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
Manifest number: 1368
Signing time: Sat 19 Apr 2025 01:00:31 +0000
Manifest this update: Sat 19 Apr 2025 01:00:31 +0000
Manifest next update: Sun 20 Apr 2025 01:00:31 +0000
Files and hashes: 1: e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl (hash: odVzZPCg9bhvvUjmv8b2KocCqhQtIekI0b/heRsc1pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:8f:b7:03:6e:c7:0b:c9:27:20:60:9e:f1:81:29:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd78d9140ad6e742e167063206582c1c45952bf
Validity
Not Before: Apr 19 01:00:31 2025 GMT
Not After : Apr 20 01:00:31 2025 GMT
Subject: CN=b993a9dfcdd317f2c4be8c5483a7d2cd34154cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:05:fc:85:f8:b6:89:cf:9d:dd:72:23:d9:
b3:76:71:eb:d5:3e:86:67:40:ab:6d:0f:d0:00:45:
2d:ad:d2:58:80:f3:6a:3c:8f:3e:ba:39:a4:fc:c8:
f9:c1:22:58:6e:e1:28:ff:e9:98:47:1a:fe:05:b9:
8c:ef:9f:79:1d:c8:83:fe:5b:42:23:73:c4:aa:c2:
7a:26:8c:3f:4e:07:9b:f9:86:10:ff:2a:75:4b:93:
2e:fa:7d:d4:a6:14:92:5a:57:84:fc:93:ee:10:8a:
3f:4b:30:0c:d3:0c:af:2f:86:c3:5a:45:75:87:4a:
ed:ae:5a:3c:ea:44:da:76:af:cf:bc:4d:c5:90:41:
68:61:83:40:28:71:4c:26:2a:3e:cb:79:4a:22:3f:
f2:6a:6c:1f:1e:3c:78:70:e0:17:d7:93:39:b0:1d:
9c:3e:f9:72:09:28:f9:10:30:3f:6d:40:aa:08:66:
d7:8b:bc:50:e0:f2:94:6b:85:a8:0f:60:ea:12:4a:
69:03:a5:12:ec:ff:7e:a3:17:be:90:34:08:c5:b0:
54:b1:50:f0:c2:d0:b6:96:15:76:16:a5:19:5c:3f:
ae:b4:12:6f:eb:af:8e:4e:3e:f7:e5:c8:d8:5c:6e:
33:03:51:a3:fe:23:73:12:7d:77:4e:57:f6:ae:20:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:93:A9:DF:CD:D3:17:F2:C4:BE:8C:54:83:A7:D2:CD:34:15:4C:BF
X509v3 Authority Key Identifier:
keyid:7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ae:62:e1:8b:ba:a7:b2:25:fc:ff:2b:4f:2b:90:1a:28:7e:
02:cf:5d:ca:74:55:c3:8e:9b:11:b9:ad:26:17:f6:46:7c:a9:
b4:c8:56:48:df:82:21:77:48:08:d3:24:10:2b:b5:50:fe:3c:
ff:4f:6b:46:90:6b:4c:86:e8:67:48:40:25:aa:13:c1:0f:2d:
4f:92:87:f9:59:3e:6b:5e:38:3b:d3:d6:02:08:9f:d8:7c:d9:
09:ee:fb:08:cb:2b:f1:b6:6d:3c:91:62:67:8a:a6:d9:54:c5:
81:07:31:c3:4c:a3:31:62:65:b1:16:94:1a:5b:28:53:3e:a7:
72:37:51:ee:a8:53:a4:bd:57:03:f6:cd:2b:d9:ab:e6:49:68:
1c:a6:1d:25:5c:d4:84:b5:bf:4f:0b:0d:df:f4:74:96:79:4f:
35:f9:8f:2c:4c:da:38:6b:66:2d:5f:3d:a4:5f:40:84:2b:62:
fc:83:15:d4:dc:8e:42:1e:02:5c:02:ad:16:a8:02:b0:e8:90:
f0:55:57:2f:6c:1b:a5:e2:42:4e:3b:b8:86:39:c6:8b:83:db:
4c:f5:85:32:20:34:71:d8:c0:cd:b1:7c:bb:98:d5:d0:af:ee:
55:66:55:2e:bb:ec:6f:6d:ee:b1:6d:4b:78:75:fe:d2:80:8a:
c5:80:c3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:14:13 2025 by rpki-client