Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
File: 67yRzMqwFtO5EodhqcTlU5dhIcg.mft (raw, json)
Hash identifier: vrdXK9RwAyn6Sdy44a5QzexikapM/agDw6ZJTqJbqow=
Subject key identifier: A4:C7:47:24:1C:E5:9E:9F:AF:F7:A8:DB:60:94:9D:93:3A:0E:B8:60
Authority key identifier: EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
Certificate issuer: /CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Certificate serial: 01964F3569E4BBB7B9C52F3FEBD0E78C5E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
Manifest number: 7E
Signing time: Sat 19 Apr 2025 18:00:22 +0000
Manifest this update: Sat 19 Apr 2025 18:00:22 +0000
Manifest next update: Sun 20 Apr 2025 18:00:22 +0000
Files and hashes: 1: 67yRzMqwFtO5EodhqcTlU5dhIcg.crl (hash: TL97QAZVIPVgo//ooEsq0rWvGgaKYpK0vpkdDoZIcjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:69:e4:bb:b7:b9:c5:2f:3f:eb:d0:e7:8c:5e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Validity
Not Before: Apr 19 18:00:22 2025 GMT
Not After : Apr 20 18:00:22 2025 GMT
Subject: CN=a4c747241ce59e9faff7a8db60949d933a0eb860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:28:8b:74:27:4b:af:b8:2d:68:86:56:be:
69:37:bd:19:34:a3:80:2e:5d:9d:d4:94:78:6e:cf:
21:d7:a5:8c:89:8e:04:fa:5c:c5:c5:43:1b:e7:9d:
32:13:8c:0e:f0:f0:ab:2d:d9:d0:74:73:52:d4:0c:
24:39:35:21:a0:5a:cb:42:63:16:9a:f3:19:bf:34:
43:23:71:35:c7:dc:a1:f4:5d:86:4b:59:be:e1:5a:
77:b0:6c:2f:0e:e9:ce:65:13:fc:9d:34:f6:1c:08:
c2:1d:57:92:f8:3c:95:ed:de:92:c3:f4:00:e2:c5:
4e:be:b2:7a:2c:0b:48:9a:b2:4e:20:b5:82:f0:39:
42:d0:a0:c8:1e:62:ef:62:a5:a6:bf:e4:58:9b:41:
c9:f4:68:d1:c6:ce:2d:51:0a:2d:5a:25:91:d9:24:
a7:ab:dd:10:4c:ae:76:e8:51:7f:ad:61:7f:b3:a5:
bc:9b:5f:3d:89:c5:ba:e3:8a:90:45:f8:a8:92:d5:
26:73:5c:54:44:62:cf:b8:78:40:17:2a:a4:5f:7c:
f3:8f:ac:53:34:4e:a7:2f:55:4f:3e:44:86:2e:2f:
f5:6b:b2:13:73:5c:ff:fd:4a:bc:0b:c7:2e:28:04:
4b:ff:fb:70:dc:ed:15:5a:75:76:f7:d4:aa:68:ac:
ba:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C7:47:24:1C:E5:9E:9F:AF:F7:A8:DB:60:94:9D:93:3A:0E:B8:60
X509v3 Authority Key Identifier:
keyid:EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d2:02:7d:8a:8c:ef:2c:47:5f:72:45:65:a3:4e:59:24:18:
ed:66:40:18:8c:41:4e:c2:61:c7:65:b3:35:61:f2:5c:b8:b0:
e6:3d:51:56:c0:d4:24:86:d9:65:1c:12:0d:da:8b:b8:27:8a:
34:ad:92:da:bd:8e:53:6f:4f:79:c6:fd:70:52:95:10:48:6b:
59:e5:53:30:3d:9e:58:34:2f:38:3c:1e:4b:6f:b8:87:25:71:
64:85:1e:bf:28:bd:7a:b2:b2:dd:02:fa:52:2c:12:9c:6d:56:
e5:5b:2b:e1:f5:a9:57:51:c7:43:42:9e:ce:0e:fb:da:45:92:
aa:a0:d6:53:fb:95:37:0e:95:cb:67:33:5b:cb:f8:a4:5c:db:
ff:e2:7c:6c:71:29:77:f0:8a:33:de:96:22:6a:4b:23:c1:03:
23:7f:c5:a4:03:3d:c9:fb:ce:62:6d:ee:ac:ff:d3:bb:69:ac:
65:dd:26:fc:7a:24:5d:52:ba:15:f7:a9:52:63:a3:2e:c9:e3:
a8:21:ad:04:3c:d0:ca:86:96:75:47:55:24:f8:ea:68:18:26:
d6:92:a8:33:9b:74:b5:b0:c3:da:3f:e2:29:6a:dc:4e:b9:3c:
8a:60:b6:11:65:71:2d:5f:0b:65:21:f5:11:71:71:a9:52:e4:
a9:7f:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:17 2025 by rpki-client