Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
File: ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json)
Hash identifier: xObwrsxeYqkxSjUfwPhWS9Yz9Ku/ci0MMq1DwWe4Mk4=
Subject key identifier: A1:04:49:11:84:36:14:4F:33:B4:33:3D:B1:98:DA:C1:FF:F5:DB:77
Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
Certificate issuer: /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Certificate serial: 0196534A0A849A01D2E1EE9257CE3FAEE1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 13:01:23 +0000
Manifest this update: Sun 20 Apr 2025 13:01:23 +0000
Manifest next update: Mon 21 Apr 2025 13:01:23 +0000
Files and hashes: 1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: pDUkV8hUhkUAvAsKN3KyRybs3JxRFwGgJAt7xqTHwAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:0a:84:9a:01:d2:e1:ee:92:57:ce:3f:ae:e1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Validity
Not Before: Apr 20 13:01:23 2025 GMT
Not After : Apr 21 13:01:23 2025 GMT
Subject: CN=a10449118436144f33b4333db198dac1fff5db77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:a3:80:72:78:bf:f9:57:48:34:0f:0a:9a:
2d:f2:9b:54:3c:fb:9f:1c:a8:d7:7e:de:f2:0c:27:
8a:11:be:5f:69:bd:c4:31:d2:23:72:27:3f:1e:0d:
da:a6:bf:ac:df:ed:3d:4d:11:9e:bc:a7:95:ce:3c:
56:d2:9c:f3:56:7f:f3:97:bd:b5:8f:e7:a2:df:76:
dd:96:9e:f5:69:53:39:91:bc:ff:f2:a0:05:52:2e:
82:9d:ff:66:8b:0e:c9:b2:fb:09:be:b3:51:9a:8d:
da:b6:ff:1c:f7:ed:89:6f:e2:46:70:50:9c:a5:1a:
c9:aa:d9:f4:f6:2b:cc:c7:ab:cd:0e:fd:43:eb:59:
45:1c:df:61:f3:e2:3d:46:66:a6:d5:0b:53:6d:2f:
d1:06:c5:59:09:af:22:e0:b7:e0:5f:82:e1:29:83:
d0:9d:09:71:f5:23:9a:bf:3d:6a:37:d0:d1:ca:b9:
77:95:2e:e1:66:c5:f6:fb:3c:2c:40:3a:d8:6b:fa:
cc:6f:2b:d3:ed:45:10:8f:2e:29:4e:88:19:90:23:
85:44:83:6e:41:1e:99:7c:7b:21:c4:4e:75:e5:e9:
00:5a:f4:40:ee:42:59:e1:bb:5c:16:8a:cf:e2:a4:
71:2e:d6:ae:ef:5f:dc:b4:46:38:17:7d:9b:eb:d0:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:04:49:11:84:36:14:4F:33:B4:33:3D:B1:98:DA:C1:FF:F5:DB:77
X509v3 Authority Key Identifier:
keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8b:b7:33:d4:45:c5:08:3e:ae:5d:e2:ac:ae:58:e6:68:e3:
91:db:ff:a6:8c:01:70:97:b5:5c:63:70:df:98:94:dc:4d:6a:
8b:10:cb:54:f3:da:11:ef:9d:ec:5f:5d:14:77:82:9f:5f:53:
2b:e2:ae:30:d7:a0:45:43:ab:84:a0:ea:b7:59:91:3d:3c:77:
84:3a:99:4a:73:fe:53:41:12:2f:ea:5a:7f:20:90:ab:ee:8f:
96:e9:06:b4:c5:84:e4:88:15:9b:36:6f:7f:05:05:19:ce:be:
07:64:10:fc:02:64:12:96:14:2d:c2:57:6d:0e:c9:15:aa:38:
2e:6f:c7:6c:44:72:ab:be:48:95:6c:58:41:5b:3b:08:bf:0b:
47:42:2e:28:17:51:1b:4d:59:14:a5:3d:a1:b3:c0:0c:a5:6a:
fb:b9:c1:e8:ae:46:25:30:c6:27:5f:08:9f:81:72:54:95:27:
3b:22:74:2f:f5:09:57:a0:27:bd:c7:22:1f:fc:49:2c:1b:5c:
50:d5:31:8f:3c:12:52:2a:ac:6a:36:65:a0:3b:4b:cb:2d:fc:
e0:16:9c:86:61:1b:d1:47:05:3a:f2:04:24:ca:d3:75:00:23:
ab:8a:32:e1:40:f3:73:47:3a:db:da:e0:e7:d3:e6:e6:91:42:
82:f7:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:42:53 2025 by rpki-client