Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
File: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft (raw, json)
Hash identifier: oxwK8bmAeusS7b12BeWt0TLPPaynWVK4kZwcgsdmyDw=
Subject key identifier: DA:00:5A:D0:4C:6B:6D:84:FD:A8:A9:D6:4A:32:1E:50:73:AD:D2:D7
Authority key identifier: 31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
Certificate issuer: /CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Certificate serial: 0196108E94A1BA83D022110BB92C68D78CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
Manifest number: 02FB
Signing time: Mon 07 Apr 2025 14:01:41 +0000
Manifest this update: Mon 07 Apr 2025 14:01:41 +0000
Manifest next update: Tue 08 Apr 2025 14:01:41 +0000
Files and hashes: 1: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl (hash: s7DpExeghT4qeqdYJdM4wE6ez4UoqhoVt6crs4vdDps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8e:94:a1:ba:83:d0:22:11:0b:b9:2c:68:d7:8c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Validity
Not Before: Apr 7 14:01:41 2025 GMT
Not After : Apr 8 14:01:41 2025 GMT
Subject: CN=da005ad04c6b6d84fda8a9d64a321e5073add2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:58:81:65:80:da:17:8c:c5:de:ac:ac:33:5b:
51:e4:c3:bf:4a:40:26:34:10:2a:6b:8f:fe:c4:16:
4b:5a:e1:b6:04:06:95:0d:c4:7c:4b:68:cf:0d:8a:
f8:86:c9:ff:5a:91:c0:9f:d5:67:55:ee:1e:fd:c1:
c3:08:69:4c:72:a6:ed:17:79:06:2c:07:cf:e1:a8:
bc:7a:8e:5a:c2:6c:3f:71:b1:56:59:35:85:0d:72:
85:b4:62:98:13:55:99:44:21:5d:ba:73:7c:e8:58:
a4:69:a0:bf:96:e8:d1:59:f5:01:d1:13:a3:a1:c0:
1b:83:4e:8a:26:8e:d1:3b:cf:4d:c3:5c:4b:e2:9b:
2d:af:27:d9:87:3f:fa:d1:a5:d6:3a:57:6e:16:b2:
4e:1f:23:e4:83:44:19:71:e6:ee:32:0f:e2:21:80:
c3:c5:83:a9:db:b3:c4:67:83:ce:1f:67:8c:dc:bf:
94:7e:94:b6:c5:b1:d5:05:ee:03:1b:33:fe:5f:62:
e2:88:c0:9b:34:b7:f0:9a:de:c7:3d:da:ab:31:4b:
58:4c:b4:e5:11:4b:a8:42:31:15:e2:bc:e3:4d:ce:
5b:ae:39:23:fe:14:e7:5a:5f:11:fe:57:4c:0c:e3:
8c:26:ad:d9:67:58:d6:67:dd:59:7f:69:7d:31:90:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:00:5A:D0:4C:6B:6D:84:FD:A8:A9:D6:4A:32:1E:50:73:AD:D2:D7
X509v3 Authority Key Identifier:
keyid:31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:66:3d:c8:3a:04:19:07:ca:41:40:2a:ba:66:aa:8c:85:5a:
92:07:79:90:55:40:9a:af:38:7e:3b:8f:82:d6:46:17:e9:cb:
bd:ff:96:3e:bd:54:90:22:bc:9c:09:df:2a:70:04:ca:c6:85:
eb:01:70:36:b8:bc:b2:31:1b:43:90:ee:b3:6e:8b:eb:c3:68:
db:74:8b:7c:55:3a:0f:88:20:bd:47:3a:08:72:2e:7d:24:9c:
5d:55:96:9c:d8:5f:c1:ee:d1:d2:a7:ed:c6:70:a3:92:c3:6c:
bf:cb:c0:78:0b:14:d4:8c:3c:41:be:ab:f0:bb:b4:92:96:77:
38:5a:32:8c:5a:1d:62:c1:66:c3:c3:a5:e3:eb:ec:45:6c:41:
dc:9e:df:c0:f5:44:dd:bc:af:a5:2e:77:7b:63:68:a2:a3:91:
a8:1e:f7:54:43:ed:01:c4:9c:43:61:e0:8e:50:ee:ff:e3:e1:
35:08:77:41:f6:f6:4d:40:66:7c:0e:a0:63:05:b0:ea:7d:3a:
6d:ed:b0:94:1d:65:db:c2:f2:12:dc:36:65:73:e7:9a:9d:3f:
81:5e:1b:40:e5:d6:87:c3:5f:28:d2:60:c3:5f:93:45:2a:14:
d6:e1:a4:4c:07:0f:8b:6e:6e:ee:7e:07:22:8f:a9:4b:db:8f:
b7:f5:70:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:00 2025 by rpki-client