Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
File: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft (raw, json)
Hash identifier: VUeCrrijrfLsRrndko06UoLmSeB4f0hsVC5IyJjSNoM=
Subject key identifier: 1B:3B:37:36:A2:25:B9:C4:AB:54:D3:54:E8:64:E6:74:DC:E9:DB:42
Authority key identifier: 12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57
Certificate issuer: /CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
Certificate serial: 01963B77C438CBBD1602F5F5C918DF58E990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
Manifest number: 0BD0
Signing time: Tue 15 Apr 2025 22:00:26 +0000
Manifest this update: Tue 15 Apr 2025 22:00:26 +0000
Manifest next update: Wed 16 Apr 2025 22:00:26 +0000
Files and hashes: 1: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl (hash: 1YTYXYSwXfWp+xktX7TJh8NbRHkl2imy1Lx/WLjO0zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:77:c4:38:cb:bd:16:02:f5:f5:c9:18:df:58:e9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
Validity
Not Before: Apr 15 22:00:26 2025 GMT
Not After : Apr 16 22:00:26 2025 GMT
Subject: CN=1b3b3736a225b9c4ab54d354e864e674dce9db42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:5b:1a:37:70:97:03:c1:4a:53:ac:26:71:
a0:68:3c:60:6e:dd:19:f0:5b:40:90:3b:20:dd:0a:
dd:cc:d1:9e:98:e9:49:cb:4d:a0:6c:4a:12:94:67:
91:ad:db:96:a1:f8:b0:8d:34:5d:66:fa:ff:d4:e4:
94:15:6e:d5:59:a6:cc:50:b9:36:8b:97:65:d8:c4:
3c:1f:50:e9:cf:c1:bc:3b:58:ec:1a:7e:37:7a:28:
15:94:64:ef:f7:de:2d:7e:09:35:f8:d2:56:2a:36:
37:ea:f0:d2:92:2b:1a:0c:6a:26:43:bc:77:f5:66:
e2:44:00:68:ad:0b:61:96:79:fb:17:7f:b3:a3:a9:
94:66:5b:3d:24:3d:11:9f:d3:50:53:be:57:a3:7a:
5d:9f:7d:0a:f6:cf:f1:65:b2:70:5c:8b:96:0c:f9:
37:15:8a:1a:20:d5:52:84:2f:32:53:ae:2a:ff:ec:
ed:25:e7:68:05:f1:68:1c:db:bb:6f:0d:0c:c4:58:
f2:38:1b:a8:30:9e:28:08:4a:1b:fe:69:2a:2e:35:
c7:f2:90:2a:40:b8:ec:79:b2:2a:1a:e5:f8:10:f4:
53:03:0f:9a:78:a9:ee:cf:6e:c7:9e:c5:1d:2b:5a:
32:57:3e:ec:77:94:5b:11:eb:13:cc:43:cd:45:87:
a4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3B:37:36:A2:25:B9:C4:AB:54:D3:54:E8:64:E6:74:DC:E9:DB:42
X509v3 Authority Key Identifier:
keyid:12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2b:75:bd:02:ba:f4:32:fd:79:7b:6b:9d:91:c7:5f:60:a4:
f3:f1:c0:34:75:67:21:e6:73:5e:a9:d0:43:61:e4:e9:05:7b:
d0:88:d1:16:fa:57:fe:2b:7a:34:66:63:2b:72:bc:b0:b2:45:
ae:e8:8b:9d:77:20:75:07:3a:49:ac:ab:f2:6a:0b:ce:b9:30:
68:64:02:37:d6:72:64:54:3f:31:0c:49:5a:49:cf:d9:e2:cf:
30:c7:69:ba:df:46:15:1c:d8:9c:b4:b1:d0:44:71:c5:f9:70:
e5:21:25:6d:d8:f5:ca:bb:d0:67:ef:eb:c8:08:05:6a:cb:91:
46:17:27:30:88:c5:0a:46:c6:aa:48:0a:40:4f:31:be:a6:f0:
7a:b3:f0:d5:f3:a7:7b:c1:e9:c3:49:16:bc:ea:12:85:7e:78:
e7:ee:ac:14:1f:5f:38:55:fd:72:ec:61:3d:97:72:fd:d0:11:
3d:d8:7d:ea:58:8e:61:fd:60:8e:18:c5:b8:e7:05:8a:54:21:
d1:11:b5:ee:2d:ff:67:05:c0:e6:9f:28:80:07:e6:58:92:ec:
98:9c:f3:0b:0c:2d:8c:18:31:0b:1b:7f:3d:93:53:d5:a8:a7:
b7:6f:41:0a:d0:83:83:a9:47:7f:eb:55:68:65:c2:b2:55:2a:
c7:dc:cd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:48:21 2025 by rpki-client