Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
File: e4jNrtKWszDz3e1AaNVTJLNQPhE.mft (raw, json)
Hash identifier: MGM+9bQLXCCfhJTqQklU3JKaoF5Ssc+/abs8UF7WMq4=
Subject key identifier: A8:79:26:DE:A8:E5:76:21:19:83:D2:3B:FA:A3:C9:8F:E5:F2:92:3A
Authority key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
Certificate issuer: /CN=7b88cdaed296b330f3dded4068d55324b3503e11
Certificate serial: 01965537D71D0DF9B7CA34A105944F2F6912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
Manifest number: 0BCE
Signing time: Sun 20 Apr 2025 22:00:44 +0000
Manifest this update: Sun 20 Apr 2025 22:00:44 +0000
Manifest next update: Mon 21 Apr 2025 22:00:44 +0000
Files and hashes: 1: e4jNrtKWszDz3e1AaNVTJLNQPhE.crl (hash: vGdIWaMG9IoVE+EppuEZDUFGbBAwJDWnFlhy9FxhD/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:d7:1d:0d:f9:b7:ca:34:a1:05:94:4f:2f:69:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88cdaed296b330f3dded4068d55324b3503e11
Validity
Not Before: Apr 20 22:00:44 2025 GMT
Not After : Apr 21 22:00:44 2025 GMT
Subject: CN=a87926dea8e576211983d23bfaa3c98fe5f2923a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:b3:49:5f:f9:f0:4f:ea:34:c2:21:fc:99:
28:78:cb:a1:6d:7d:9b:1b:dc:31:a0:30:79:f5:15:
1c:55:32:3e:8b:38:cb:39:12:8b:3f:a3:70:92:01:
d3:23:bb:b6:2d:99:81:c6:27:02:49:32:b6:ac:31:
ed:01:b3:4f:b8:c3:0e:46:a1:61:ab:cf:a0:ed:d8:
eb:a7:52:f2:10:f4:64:4f:47:1f:69:9d:cc:20:81:
74:bd:02:68:4f:58:f7:e8:71:6a:d9:8e:b5:3c:ec:
7b:b3:b3:2a:32:5d:d2:6f:50:c4:83:fd:c1:3c:4a:
c7:57:69:c8:a2:fc:5e:8b:85:35:5b:fe:a6:b8:6c:
57:0d:eb:41:b2:1d:bc:8d:b5:6d:ea:5d:78:13:b7:
af:21:db:04:2e:3f:f7:fe:f6:6c:95:7e:ed:90:8f:
39:82:74:b5:75:ed:5b:e2:07:62:ec:02:99:03:ca:
6e:43:11:4b:5a:f6:bc:c1:37:d3:30:79:22:5b:08:
ae:b8:84:2e:d0:b0:cd:04:3d:01:0c:83:07:18:48:
40:f2:fa:ce:1e:b0:17:8f:55:3b:a9:3c:2b:25:55:
73:00:a3:ad:4c:36:a7:d0:29:8d:86:af:be:83:b7:
7a:fd:8f:b7:a1:6b:f6:85:09:b8:02:07:cd:89:80:
41:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:79:26:DE:A8:E5:76:21:19:83:D2:3B:FA:A3:C9:8F:E5:F2:92:3A
X509v3 Authority Key Identifier:
keyid:7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d3:2b:72:43:ef:0b:fb:47:4f:f6:f7:5e:53:49:a0:8e:75:
4b:c9:f4:cd:cc:ff:ee:59:32:9a:93:3b:04:2b:8a:8b:3c:65:
d3:7c:5f:9f:a6:05:da:67:54:00:9f:46:9f:2a:31:93:5e:c7:
d7:68:29:35:19:18:f0:3f:5a:48:ab:b6:5d:2a:19:7e:75:6d:
b1:43:dd:66:19:71:c5:63:ec:39:ad:a0:cf:a8:6a:76:bd:05:
9d:ae:ed:6b:e3:e3:da:30:94:f8:a3:db:c8:71:1e:d7:f1:e4:
9e:93:55:ce:e1:2f:13:14:9c:c4:9d:fc:1f:9c:97:f3:fe:8e:
35:48:a2:96:26:c2:20:39:e1:4b:e8:e7:77:83:95:71:b1:2e:
11:a4:e2:7e:23:57:ce:58:fa:7c:f8:4b:17:56:ba:0b:cc:f6:
26:91:f6:92:50:44:fd:e7:6f:52:db:bc:7a:e4:39:64:4b:bb:
b2:96:e8:56:b5:cf:28:f2:2b:81:47:67:db:a6:02:72:48:3f:
61:0b:e8:e9:dc:bf:c6:89:5d:f4:e5:c5:12:a2:dc:2c:11:07:
0a:ab:8f:84:a3:32:69:d2:24:cd:aa:c3:bd:5d:80:25:14:e4:
40:b5:8f:49:fc:2d:50:b5:51:6e:a0:51:c2:c0:3e:d3:09:7c:
ea:62:43:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:47 2025 by rpki-client