Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
File: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft (raw, json)
Hash identifier: TIKOp4+inDl4IiQTiLVI7Ma894CFuQVuIEvS1AGHaSQ=
Subject key identifier: FE:BB:DF:5D:11:7D:40:7D:91:00:A7:AB:F4:84:33:7A:C6:E1:01:97
Authority key identifier: 7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
Certificate issuer: /CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Certificate serial: 01965914DAB26C907B036BB7115C0EA124C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
Manifest number: 01FC
Signing time: Mon 21 Apr 2025 16:01:00 +0000
Manifest this update: Mon 21 Apr 2025 16:01:00 +0000
Manifest next update: Tue 22 Apr 2025 16:01:00 +0000
Files and hashes: 1: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl (hash: 5IG3BlovvfPeInQhCdFCqxigMk5GfYcYyLp5TjaTs4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:da:b2:6c:90:7b:03:6b:b7:11:5c:0e:a1:24:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Validity
Not Before: Apr 21 16:01:00 2025 GMT
Not After : Apr 22 16:01:00 2025 GMT
Subject: CN=febbdf5d117d407d9100a7abf484337ac6e10197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:f8:84:90:f0:70:94:66:73:79:e1:09:24:
4b:18:bd:cf:eb:5d:f4:6a:cd:4a:21:19:d7:ef:24:
52:26:34:a0:fa:44:36:fc:5e:7d:03:a2:b2:33:b9:
99:e8:06:89:0d:2e:4e:0b:3a:d2:e3:3e:c3:34:0a:
6d:9b:59:86:ea:05:6a:4c:54:c5:59:08:91:5d:76:
f7:b9:e8:39:2f:68:39:c5:95:49:65:8a:25:d7:10:
e3:87:0e:01:43:8f:b3:7b:14:79:5e:46:25:c6:46:
72:f0:74:74:0d:6f:fb:6a:d9:27:0a:96:e1:de:1f:
c0:af:c5:07:24:81:2f:1e:0d:4d:01:06:9e:c2:0a:
26:3c:49:fd:b9:a8:db:37:7d:d0:7a:11:bb:ee:78:
81:69:6c:21:6a:7a:0c:3d:cb:78:52:e8:3f:bc:dd:
92:77:e6:0b:e5:bb:bd:d7:9f:47:56:ce:21:a1:e7:
da:d2:9e:c5:96:31:8f:e5:85:3b:f1:96:7b:0b:0e:
ce:55:e0:6d:8e:5f:5c:2e:4a:bf:b2:d4:9c:28:42:
1e:28:bb:24:05:15:2b:b5:64:6a:be:e3:23:cf:79:
18:93:47:6c:d1:4f:f8:c6:c8:ad:20:e6:16:f1:c1:
5c:a0:69:e1:19:c3:d7:f8:0a:2c:fe:7a:52:d2:56:
cb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BB:DF:5D:11:7D:40:7D:91:00:A7:AB:F4:84:33:7A:C6:E1:01:97
X509v3 Authority Key Identifier:
keyid:7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:05:51:c5:5d:54:dc:2b:60:49:16:fd:00:f9:7c:fc:d9:2f:
82:48:3d:49:9b:fe:df:3a:55:5f:2c:13:84:83:32:8a:72:03:
20:51:c9:6d:ab:d7:87:a3:a7:2e:a3:a0:00:25:5d:5c:8d:e9:
f3:5b:cf:16:e3:5a:a8:db:4a:32:b4:ea:d8:d6:67:ed:07:4b:
e6:c7:5e:a8:5d:83:ff:37:4b:7f:7f:08:6f:2b:5d:c4:51:e0:
f8:7b:9f:92:e8:f0:3b:3e:c6:f2:ca:36:6c:9a:85:c3:c3:58:
ad:30:7a:e2:b8:a9:b4:64:26:19:2b:7f:fc:b2:c0:ae:de:19:
0b:e2:df:2b:87:26:9f:2c:c9:99:94:c5:7a:07:6c:eb:93:af:
7b:c7:cd:ec:22:29:db:72:9e:82:f7:d1:1c:75:d3:8e:b2:79:
8d:4a:b6:07:50:36:fe:06:87:5b:23:d6:65:d8:ef:ac:f0:e7:
50:9f:dc:34:f2:ea:63:50:7d:33:a9:7a:38:01:40:4f:18:af:
23:64:df:ff:52:cf:67:d2:c4:65:06:62:be:9c:24:22:57:aa:
d7:5c:73:ae:89:46:2d:23:f6:cd:0a:27:e0:54:45:d1:fe:2d:
fa:d0:5b:49:51:92:b1:5c:73:ba:2a:2e:1a:55:c0:61:20:df:
5c:6e:9b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:52:56 2025 by rpki-client