Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
File: EPm9HHFv0ulaydYQddcJYhroBgA.mft (raw, json)
Hash identifier: tG6FHxYX8zfLB1PZVt50Jum1d4g1IVrbY0Z61nF17tc=
Subject key identifier: FA:A9:D6:D6:FC:EB:B8:E7:CF:E7:C2:1E:19:B9:DC:D2:72:D5:7F:06
Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
Certificate issuer: /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Certificate serial: 01965348FCA62839DD8447DB10DB6ADFD3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
Manifest number: 0739
Signing time: Sun 20 Apr 2025 13:00:14 +0000
Manifest this update: Sun 20 Apr 2025 13:00:14 +0000
Manifest next update: Mon 21 Apr 2025 13:00:14 +0000
Files and hashes: 1: EPm9HHFv0ulaydYQddcJYhroBgA.crl (hash: I0u3AwIN+AGD70qhDaQGbZ1HEwveREa+ptLtxnY4/ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:48:fc:a6:28:39:dd:84:47:db:10:db:6a:df:d3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Validity
Not Before: Apr 20 13:00:14 2025 GMT
Not After : Apr 21 13:00:14 2025 GMT
Subject: CN=faa9d6d6fcebb8e7cfe7c21e19b9dcd272d57f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:59:a1:e7:c3:bd:e9:58:25:9b:0c:61:af:
d0:7e:5f:42:cb:83:c3:21:e1:69:79:e2:d6:43:de:
00:c2:c2:52:95:23:12:b2:9f:d6:0f:f2:ae:87:93:
8b:0c:1d:5b:b4:54:68:c6:43:fa:ff:92:b7:b1:60:
76:e9:69:06:dd:c0:10:21:55:11:01:30:82:a9:03:
f6:56:50:8f:05:ff:ed:7a:45:d4:ac:ee:94:36:6a:
06:df:a9:d5:df:8a:b4:fb:cf:de:c1:2d:93:75:16:
1e:cc:66:9a:b1:54:49:a2:89:6d:06:77:98:dd:08:
e0:29:0f:42:02:8a:5f:a0:9d:1c:12:26:48:ab:85:
57:5c:a7:3e:d3:5c:7f:75:ad:cb:49:63:5e:95:36:
04:22:92:f0:8c:b3:6d:31:7f:ff:6b:33:58:1b:39:
5a:74:c6:85:32:72:1d:6a:d0:fc:c5:b4:36:91:93:
5e:09:86:b9:a3:36:c9:5f:0c:1e:13:d0:6c:3b:1e:
ca:38:c0:45:bc:c5:de:c7:f0:73:6b:b8:ed:05:5c:
a2:86:6b:8f:99:75:3d:23:bc:37:c7:62:78:17:ba:
4c:c9:58:57:9b:50:b5:0d:1e:58:6d:c4:89:01:84:
57:bb:ae:1e:d3:c4:b7:ec:5f:51:57:c8:38:c5:f8:
8e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A9:D6:D6:FC:EB:B8:E7:CF:E7:C2:1E:19:B9:DC:D2:72:D5:7F:06
X509v3 Authority Key Identifier:
keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1d:29:f5:43:25:53:ae:b4:a3:bf:9d:5b:b4:95:1f:9c:d2:
f1:1b:94:f4:07:67:e0:b9:94:8e:fe:18:2e:de:67:9e:e3:dc:
1c:77:d5:41:36:fb:2d:02:af:a6:2a:46:7c:6e:f4:d1:5c:ee:
a6:2d:58:b2:ba:50:e3:72:97:c3:f8:14:dd:5c:3a:74:77:89:
32:02:2b:98:9c:58:d9:46:c6:88:d2:4a:ef:39:07:47:90:af:
ae:f4:1f:3b:8b:b2:a0:37:88:37:dd:dd:5e:ef:72:e9:c8:54:
15:20:ec:25:f0:ec:80:80:50:d8:44:96:19:03:5f:cc:65:9d:
de:56:ae:41:e9:51:ce:b9:45:c2:09:fb:d4:9a:f1:a1:3a:4b:
13:e6:22:6b:92:01:53:de:cc:fa:f1:af:60:d5:d3:d5:1a:8d:
37:64:2d:b4:5b:56:ea:22:f7:da:9a:34:0a:c9:36:85:71:77:
19:d3:ec:b1:58:b4:24:20:1a:4e:87:b8:bf:be:3a:4f:7c:15:
39:74:aa:5a:93:b4:c1:70:3f:5b:76:28:eb:5a:e6:03:e6:01:
f2:12:12:01:c7:cd:75:b7:26:55:fa:6b:3f:44:70:ac:34:8c:
8f:9d:fc:22:53:8b:9c:72:67:7a:6e:69:5c:1c:4f:f4:06:e5:
0e:86:93:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:23 2025 by rpki-client