Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File: 65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier: R8yfhma/Dwye78jXOpCHAfFewhOqaDHbGx6mfSwu3Sk=
Subject key identifier: 04:FC:A4:C8:68:37:86:7C:CA:D7:CA:C8:6E:0E:D6:0D:43:CE:C8:48
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer: /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial: 0196504883E2C20B932C4D677154EE2B17D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number: 148A
Signing time: Sat 19 Apr 2025 23:00:51 +0000
Manifest this update: Sat 19 Apr 2025 23:00:51 +0000
Manifest next update: Sun 20 Apr 2025 23:00:51 +0000
Files and hashes: 1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: 3+paw4JU8NaRB8C8dwHXNCcJCriOlSoZtw/deiNRgSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:83:e2:c2:0b:93:2c:4d:67:71:54:ee:2b:17:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
Validity
Not Before: Apr 19 23:00:51 2025 GMT
Not After : Apr 20 23:00:51 2025 GMT
Subject: CN=04fca4c86837867ccad7cac86e0ed60d43cec848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:2f:fd:18:76:fb:1b:c9:f6:f2:f4:bb:f0:
d7:ee:f8:a0:f9:30:84:7e:4f:51:b8:e7:66:f7:80:
f1:ae:57:3c:0d:ea:f0:59:43:57:51:82:73:20:e1:
d4:52:a4:fe:fc:1e:fb:ee:12:de:60:ae:15:d8:10:
d7:27:19:9e:d7:f4:71:25:ec:c8:9e:51:7d:54:ba:
4d:bb:d0:a0:4f:d2:31:aa:61:8e:06:e7:53:bb:a4:
0d:ee:3a:05:9b:7c:81:c4:83:ed:79:a7:b2:e5:33:
ba:49:bc:4d:9a:8c:5a:5b:25:6a:02:a9:7d:9b:44:
ff:25:00:47:f6:21:b3:e7:db:f6:8d:92:f6:eb:5b:
ec:98:fe:c9:d3:f5:f2:06:53:36:38:f7:ca:91:8f:
14:f6:56:3b:43:39:ec:d1:93:c5:cd:03:f6:0b:22:
01:be:f4:21:da:c9:02:a7:8d:4d:04:a6:9a:0c:6e:
36:6a:2c:5e:3b:3b:70:54:6b:06:3b:a2:0a:83:48:
c7:01:62:97:2c:c1:3e:9f:50:6e:9a:4a:eb:52:db:
9d:99:b6:44:d9:e3:9d:d8:99:ca:0c:95:23:67:2a:
03:50:79:ef:79:04:81:d5:a6:9f:96:58:99:c4:1d:
4b:44:c6:32:25:03:60:8b:1e:0a:aa:0c:2c:fb:5a:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FC:A4:C8:68:37:86:7C:CA:D7:CA:C8:6E:0E:D6:0D:43:CE:C8:48
X509v3 Authority Key Identifier:
keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:62:ea:d2:05:28:65:0f:50:9a:ee:2d:7d:c3:a5:48:e6:50:
ca:5b:a7:86:ec:3a:21:3c:1f:03:a1:e3:5c:ce:bb:8f:06:16:
74:d9:1f:aa:3f:c6:0b:62:33:b9:70:79:74:f9:3d:5f:78:b9:
4f:8a:77:d4:9e:98:b1:55:da:2b:d6:76:4e:bc:95:08:5b:ec:
4c:b8:d2:2b:30:5e:68:5b:95:30:eb:5d:dd:ed:ee:67:c2:49:
36:f4:ca:ff:6c:45:bb:dd:d2:dc:7a:64:bd:5f:a4:b1:94:93:
b6:eb:d7:fa:c4:4d:c9:ca:ba:4e:af:19:a9:8f:1a:6a:de:1c:
b1:a1:74:dd:28:f2:49:1c:76:61:b9:a7:b5:33:f9:66:b1:2d:
75:be:a5:db:be:61:36:37:f8:88:3b:3a:94:15:8d:2f:2b:b1:
47:e2:0e:fa:25:b0:e8:a9:90:c3:a2:f9:8c:5b:e0:68:bc:5f:
67:c8:d8:74:5f:74:0c:4e:0b:16:b4:86:71:e3:23:50:a3:f1:
bc:d9:95:f0:2a:9f:a8:d6:5f:dd:65:e5:8b:8c:12:b7:32:29:
73:f8:86:71:8b:7c:8a:f1:db:f9:95:9b:b2:9e:19:7c:e7:56:
93:2c:e2:f7:20:dc:d4:9e:e1:2a:83:5c:14:08:82:d1:5a:38:
25:d4:5f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:19:13 2025 by rpki-client