Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
File: elBBBN9nzv6N7h0YqWhQqaZMLJU.mft (raw, json)
Hash identifier: UHF8zTH+g7m6I7qmQLCG4JFNY97U0KvM1d7tmpiLytM=
Subject key identifier: F8:AA:A0:0B:72:47:7A:57:83:CF:57:D2:EA:4D:3B:18:17:88:9E:2A
Authority key identifier: 7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95
Certificate issuer: /CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
Certificate serial: 0196545BEDE13984EF759E0E09ADB9DCCDDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
Manifest number: 04FC
Signing time: Sun 20 Apr 2025 18:00:32 +0000
Manifest this update: Sun 20 Apr 2025 18:00:32 +0000
Manifest next update: Mon 21 Apr 2025 18:00:32 +0000
Files and hashes: 1: elBBBN9nzv6N7h0YqWhQqaZMLJU.crl (hash: 9OE0xTqXcwvwJ13gyYqcRFAz3YY5HAsKF5KN2fKPHk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:ed:e1:39:84:ef:75:9e:0e:09:ad:b9:dc:cd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
Validity
Not Before: Apr 20 18:00:32 2025 GMT
Not After : Apr 21 18:00:32 2025 GMT
Subject: CN=f8aaa00b72477a5783cf57d2ea4d3b1817889e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:81:97:c5:0c:a3:9c:40:42:30:45:40:b8:
a2:22:94:f9:90:b2:7c:b4:f5:12:8d:ae:fb:5d:80:
40:f8:af:81:99:fd:b7:e9:17:d5:74:91:5e:f8:08:
f8:64:63:fb:3a:92:72:e7:09:d8:0a:b0:c8:f2:a3:
d6:b7:ee:90:d5:ae:d0:69:98:bd:a3:2f:f4:08:6b:
ad:7f:a7:a0:75:f2:c3:d6:dd:af:d6:0e:ab:c0:62:
7b:9e:de:43:73:65:fe:3c:bc:6b:4c:ab:25:0d:a4:
59:8d:bd:9e:0a:a2:9f:de:ef:6f:93:08:17:21:e5:
94:79:0a:00:20:c6:f7:3f:8b:90:74:c7:08:18:85:
ce:eb:64:c3:07:dc:10:40:4d:59:8c:b0:01:80:2e:
0f:4d:ea:62:70:e1:5b:cf:61:7e:5b:ed:b2:fa:5a:
cb:d1:a9:09:0d:73:76:9c:67:6e:f3:25:2f:8b:79:
ab:05:a2:45:3f:fb:de:01:c3:a9:0b:2c:fa:70:bc:
08:ee:10:ba:7a:3d:f7:5e:87:33:b3:d2:cd:9f:f4:
5d:37:cf:f2:62:91:49:50:49:2b:81:12:95:c6:4d:
00:cf:e1:ae:4f:3a:20:6b:70:b1:4e:2a:35:09:7f:
a4:b2:b6:d1:80:14:db:19:a5:db:9b:5b:57:2c:01:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AA:A0:0B:72:47:7A:57:83:CF:57:D2:EA:4D:3B:18:17:88:9E:2A
X509v3 Authority Key Identifier:
keyid:7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b5:ac:79:b8:b8:b9:d5:a0:73:96:f7:2b:1c:a4:cc:87:c9:
dc:ec:68:a9:37:0a:15:8c:32:38:7e:99:33:d6:a7:af:bc:c6:
56:c2:60:c1:93:c2:27:d7:7c:8d:74:90:7b:ab:d3:03:18:c2:
e2:d1:29:47:80:81:68:17:d8:3d:41:5c:0f:13:99:08:76:49:
11:2b:a6:ee:af:3f:3d:62:2d:33:2f:a6:aa:65:f1:ae:d0:5f:
21:54:18:ff:cf:db:61:fd:7d:7d:0d:a0:eb:30:e0:48:06:0e:
da:1c:c6:a0:3e:c4:48:9f:18:67:2b:0e:5a:20:6d:08:60:5b:
33:68:c8:3a:8f:dd:73:9f:7e:22:57:82:fd:53:c6:75:cd:c3:
0e:f1:a4:ab:f9:e6:d0:ce:9d:5a:84:5d:14:d5:72:49:4b:ae:
11:2e:77:1d:ee:77:00:e3:2a:53:81:c6:6d:c6:6d:5a:cf:44:
09:82:0b:4a:14:86:f7:2c:32:c9:d2:4b:e6:2f:83:03:89:bc:
19:a5:05:66:dd:e9:5a:78:5a:18:e4:24:67:38:7c:0f:80:1f:
b5:2e:47:ed:20:98:06:c1:1d:4b:89:03:e8:99:5d:48:05:c2:
a2:d4:57:cc:d1:00:b3:72:a7:5f:28:ac:b6:e2:6c:9b:5a:77:
2c:4f:98:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:25 2025 by rpki-client