Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
File: eNiveOb7rS7n4tDOuGuji_pUjhs.mft (raw, json)
Hash identifier: eWqySzUl8bOcLts61Xg0LsZZG3T7cYYBuImorEuPTKA=
Subject key identifier: 9E:AA:17:FE:19:05:B8:CB:E1:25:AA:CD:85:A4:23:D0:69:D4:07:A3
Authority key identifier: 78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
Certificate issuer: /CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Certificate serial: 01957833F96015E62DCFBDB93928427558E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
Manifest number: 75
Signing time: Sun 09 Mar 2025 00:00:26 +0000
Manifest this update: Sun 09 Mar 2025 00:00:26 +0000
Manifest next update: Mon 10 Mar 2025 00:00:26 +0000
Files and hashes: 1: eNiveOb7rS7n4tDOuGuji_pUjhs.crl (hash: TxYw25+Z36tXH9rk9iP299dfiqS8IvhbIkmIK6TegvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:33:f9:60:15:e6:2d:cf:bd:b9:39:28:42:75:58:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Validity
Not Before: Mar 9 00:00:26 2025 GMT
Not After : Mar 10 00:00:26 2025 GMT
Subject: CN=9eaa17fe1905b8cbe125aacd85a423d069d407a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:5b:2e:05:13:f9:e7:7e:3f:c6:a3:f6:00:
e4:dd:55:d6:8e:ae:5e:c9:10:a3:3a:6e:ae:28:6c:
3e:2a:50:cc:c9:d0:c0:c7:ee:a3:4b:84:ba:b8:1f:
88:98:2b:94:1e:5b:36:38:d5:36:ec:be:6f:c1:bf:
e8:72:9e:cd:90:f5:f8:fb:62:dd:e5:71:84:2f:27:
4c:2f:e8:4a:1f:2d:3e:c8:94:85:84:a3:10:ba:d6:
a4:77:1e:40:28:4e:77:79:2b:06:42:a4:05:20:f9:
8a:3a:cb:88:8b:d3:ca:1e:9f:77:f2:bd:03:ad:57:
db:6a:48:4a:d9:6e:c2:7f:a5:4e:b1:eb:ef:0b:49:
b0:d4:37:ac:96:3a:53:36:6a:e6:b0:56:e9:8e:cf:
10:0a:56:3b:67:23:94:33:cd:1d:65:97:3c:b1:2a:
5a:98:d4:48:0c:b6:b3:b2:89:ad:b7:10:12:ae:61:
52:71:43:8d:aa:f7:94:bd:29:36:27:17:89:7e:5e:
47:7c:13:25:11:cb:b4:51:1b:3b:b7:77:7a:53:37:
51:45:ce:0b:13:57:47:0e:33:e0:ce:d5:42:bb:d3:
ee:23:8f:3d:9e:50:02:33:73:c1:0e:03:ab:42:74:
fe:a8:cd:6b:73:53:a2:e4:9a:fb:a9:11:b5:e0:30:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AA:17:FE:19:05:B8:CB:E1:25:AA:CD:85:A4:23:D0:69:D4:07:A3
X509v3 Authority Key Identifier:
keyid:78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:04:0e:00:b3:d7:b5:6b:d1:91:cb:44:6f:43:a3:25:6f:bd:
db:80:ee:54:eb:85:20:39:04:30:d2:7f:97:66:46:58:9b:dc:
58:ea:6d:69:fd:15:a9:9a:ec:55:3d:01:70:0b:b0:34:17:fa:
f6:ee:1e:42:7d:a5:1a:fd:3a:6e:29:58:6c:a8:08:e8:ce:c6:
40:56:8f:0f:ac:e1:7c:4b:2d:52:24:04:2b:ab:70:1e:54:63:
d0:4c:b7:70:cb:d2:91:7e:32:8e:fc:fb:ed:8c:b2:b3:66:4f:
90:cd:bf:a4:63:d6:52:e6:50:1f:2a:c1:8e:30:ec:82:13:bb:
26:89:78:e9:78:21:72:94:e5:68:9a:2c:7c:7e:b3:72:93:ed:
f7:6c:b1:5f:7d:80:80:59:46:26:c4:7d:a0:9c:58:50:f0:49:
ac:7f:f6:68:fd:5c:8d:ee:f1:3a:03:4e:19:f9:06:8b:ff:ae:
8d:1c:bb:36:63:86:a6:95:76:49:99:e9:3f:95:16:fa:00:4b:
6c:f6:28:9e:73:5d:3e:1b:72:e6:e5:1b:75:11:3f:fc:24:a8:
f3:12:7d:4a:7e:34:12:e9:3b:c4:85:88:66:72:bd:38:b9:4f:
20:d3:f7:cd:5a:c9:99:65:9b:4f:9c:e6:f0:97:12:c3:e3:88:
f9:63:af:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:02:52 2025 by rpki-client