Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
File: prEMlxD_hEDaQeVJvif-h38Uuwc.mft (raw, json)
Hash identifier: Dx6bICMnBK5b5z/DiYiQrjCBJaQxX+g1l7Cs6sYvdDs=
Subject key identifier: EA:EE:09:AE:28:75:00:F1:53:BE:2B:0D:0F:16:FA:9D:16:F1:7F:73
Authority key identifier: A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
Certificate issuer: /CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Certificate serial: 01964D7E930882F812432816C3E9BEFC5302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
Manifest number: 0856
Signing time: Sat 19 Apr 2025 10:01:02 +0000
Manifest this update: Sat 19 Apr 2025 10:01:02 +0000
Manifest next update: Sun 20 Apr 2025 10:01:02 +0000
Files and hashes: 1: prEMlxD_hEDaQeVJvif-h38Uuwc.crl (hash: TtgbfiUrDfG8Sq+hh5h0Oi+J6oqIJMNdTYGt1mcsu6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:93:08:82:f8:12:43:28:16:c3:e9:be:fc:53:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Validity
Not Before: Apr 19 10:01:02 2025 GMT
Not After : Apr 20 10:01:02 2025 GMT
Subject: CN=eaee09ae287500f153be2b0d0f16fa9d16f17f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c8:b7:ff:89:ed:69:08:bd:e4:d7:d4:58:55:
2f:7b:55:6a:63:d3:b7:29:27:5f:b1:25:0a:f5:5f:
44:b5:c7:78:93:2b:0b:e2:db:41:ac:e0:8b:ed:a2:
68:65:e1:7e:fc:4d:5c:5f:54:df:65:db:21:b6:ac:
30:ab:99:31:0c:8b:2f:cf:fa:8e:ae:b4:ce:9b:da:
df:d0:49:17:81:bf:91:98:68:e0:19:81:d3:fb:65:
47:72:a6:44:cb:3d:60:15:20:d6:2b:a4:23:8b:d6:
17:dd:cb:08:2c:f1:17:a2:e8:f9:e0:58:4b:bc:16:
b9:0d:54:ce:af:81:be:dc:5f:d4:93:93:6f:3a:4d:
8f:c1:14:52:96:f1:94:64:71:09:16:33:c5:e5:c5:
95:b4:27:27:29:63:ae:bf:79:e9:98:e4:1a:ff:58:
12:76:de:78:f6:18:52:c2:0c:96:c6:ae:b9:3e:9c:
8c:84:06:cb:ac:b6:b2:fd:5f:3e:01:ff:99:7d:32:
d7:8d:3b:29:fc:fc:19:92:99:dc:20:11:6e:8d:9d:
f3:ef:f6:d4:d9:2c:41:c2:d3:55:11:22:18:a8:ad:
6f:e2:5e:e0:52:ec:86:b8:0c:63:1c:50:c6:e9:cf:
6f:59:3d:d9:a1:ed:0c:ed:14:12:0b:32:e2:5c:e7:
fa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EE:09:AE:28:75:00:F1:53:BE:2B:0D:0F:16:FA:9D:16:F1:7F:73
X509v3 Authority Key Identifier:
keyid:A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:47:40:4a:e3:47:14:59:16:e2:5a:78:01:5a:31:89:fd:0c:
cd:e0:dd:50:e7:f0:f0:a6:9a:14:90:a1:a4:27:9a:a9:6e:52:
26:57:b4:ee:1b:9e:03:12:7b:3d:4a:17:7e:79:e7:c7:dd:c9:
18:a7:8c:77:d0:76:25:5b:09:7f:df:32:4a:c8:81:d2:6f:82:
83:63:ba:80:f4:0d:4a:ff:0d:b8:53:40:90:c6:ea:99:6a:3b:
b2:61:ad:a8:c5:0e:e8:20:2e:dd:8f:8c:d9:09:97:c6:16:d8:
1c:f3:60:91:85:75:03:79:71:50:79:b1:51:4f:9f:0e:98:1e:
07:fa:22:f4:19:a2:00:da:97:d2:8a:9c:f2:61:46:37:6a:3d:
5c:97:da:93:4f:73:4f:e8:37:02:7d:93:c9:18:15:f1:13:5c:
cc:58:9a:1d:10:aa:93:29:52:db:1c:e4:d5:39:f4:ca:d5:14:
b6:03:be:26:a0:31:18:21:4c:61:65:f7:4c:23:ba:e4:15:56:
57:5f:10:c1:92:f6:2e:1e:ff:e9:b4:8e:75:05:da:75:5a:13:
8b:1d:b6:98:0f:40:11:e0:65:11:e0:f3:97:ce:a2:0f:70:dc:
7b:83:a4:23:7c:3f:16:b7:98:3f:7a:e7:7f:0b:72:5e:d8:b5:
1b:ab:f8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 13:58:50 2025 by rpki-client