Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
File: I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json)
Hash identifier: 5DgWJQdnmYHvSAJLrsVxFx9H6ttAySG0AbeXmuWzW3U=
Subject key identifier: 2E:EC:F8:7C:49:3B:C4:B0:64:47:CA:0E:35:08:87:17:F8:BE:78:99
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Certificate issuer: /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial: 01965F169E23B53F1277911BED33CFF7A866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
Manifest number: 1222
Signing time: Tue 22 Apr 2025 20:00:39 +0000
Manifest this update: Tue 22 Apr 2025 20:00:39 +0000
Manifest next update: Wed 23 Apr 2025 20:00:39 +0000
Files and hashes: 1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: Pzl9bj74e/YGVx9CLgLlLp81QoilGyiu5J8gzdBmbjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:16:9e:23:b5:3f:12:77:91:1b:ed:33:cf:f7:a8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Validity
Not Before: Apr 22 20:00:39 2025 GMT
Not After : Apr 23 20:00:39 2025 GMT
Subject: CN=2eecf87c493bc4b06447ca0e35088717f8be7899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:79:73:32:6d:0a:c0:7c:9a:ea:57:e3:25:
36:f8:d3:98:2d:54:65:59:0a:ee:1e:3d:e0:7e:e1:
54:33:bb:f3:e3:47:98:c1:10:ca:a0:99:f6:fc:6b:
b6:2e:e4:17:0c:64:47:72:e5:27:15:bc:65:e2:b7:
fd:52:48:10:b4:83:ed:64:30:65:63:32:8b:71:b7:
20:22:82:f2:b0:8f:57:20:5b:4a:ab:00:3a:63:c5:
b2:fc:0c:be:f8:18:c4:4e:5a:33:df:13:9f:45:3a:
9f:b8:7c:ac:fd:d3:db:40:a5:c1:62:3a:36:fb:ec:
28:0a:66:20:cd:8f:05:74:02:d6:23:41:c4:7a:bc:
2c:a6:87:15:24:29:d3:73:26:09:a8:6f:4c:4e:1b:
16:ce:a8:a7:a4:76:ec:b9:de:b9:17:c7:94:7b:d5:
b2:47:95:53:fc:28:19:ee:0d:c9:44:4d:10:04:95:
0d:67:d5:79:92:34:1b:60:00:5b:3c:cb:02:ce:7d:
a5:c1:78:d3:7e:57:e6:59:64:8a:ba:52:dc:e7:9b:
64:69:ce:42:a9:ca:df:1e:ee:89:a6:8c:e6:16:0b:
e2:d2:44:f5:0c:7c:26:5b:17:52:4e:ef:48:32:29:
fc:39:e2:41:40:c6:4c:64:11:d0:ce:02:f2:45:0f:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EC:F8:7C:49:3B:C4:B0:64:47:CA:0E:35:08:87:17:F8:BE:78:99
X509v3 Authority Key Identifier:
keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f0:ab:ef:c0:ca:31:40:5a:4e:21:db:1a:08:16:44:b7:67:
67:f6:c7:ad:67:cf:ed:14:55:fd:b4:de:7e:74:9a:16:02:b1:
88:b0:37:bf:35:bb:b7:f7:62:0f:be:e7:27:c9:c7:d4:f8:74:
a6:a0:59:e6:4c:39:73:b6:b5:e2:46:36:ef:a6:c6:6e:6c:6f:
6d:29:19:4e:3c:62:94:18:46:73:74:15:6e:b0:5a:c2:20:2f:
b6:26:07:a1:19:40:e8:7c:1c:a8:cf:49:bd:27:e9:ba:4b:c3:
52:9b:3e:ad:ac:b9:34:84:2c:71:3f:54:95:ea:23:bb:82:82:
43:fc:be:98:7a:10:c9:c8:22:b8:f8:ec:f7:86:49:14:dd:56:
9e:38:42:5c:30:ea:50:2f:1d:bd:84:c4:4a:28:8f:ae:5b:43:
72:e8:26:b7:8b:33:f4:ba:23:7c:68:ce:a1:6b:2a:0d:ef:91:
a8:24:d3:2d:3e:6c:08:a4:ce:b5:fb:ca:68:9a:c3:ee:10:26:
66:08:bb:6a:1e:b9:90:0c:01:9e:90:f7:93:e1:ee:b0:98:1f:
00:05:e2:0f:e6:77:f4:6f:0f:d5:09:b3:94:ec:a5:3f:f2:60:
25:86:7c:6a:77:b3:50:20:e2:6f:74:48:fb:be:f3:ca:4e:9a:
c9:ad:eb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:14:34 2025 by rpki-client