Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json)
Hash identifier: oSpvzILSIEGezDii1ZTjJfLJ0tZL3FFd4ghYkU6ngEQ=
Subject key identifier: 1A:D4:A5:44:8E:8C:70:37:75:6B:3A:47:D2:A0:ED:55:D5:03:9B:9D
Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Certificate serial: 01958C60EFBFA643C74F228EDB7A3F494EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
Manifest number: 1424
Signing time: Wed 12 Mar 2025 22:01:57 +0000
Manifest this update: Wed 12 Mar 2025 22:01:57 +0000
Manifest next update: Thu 13 Mar 2025 22:01:57 +0000
Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: EtnBwTnOW20y1DFwxaqFsq6mDv2SKRmoPi/0e71tKs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:ef:bf:a6:43:c7:4f:22:8e:db:7a:3f:49:4e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Validity
Not Before: Mar 12 22:01:57 2025 GMT
Not After : Mar 13 22:01:57 2025 GMT
Subject: CN=1ad4a5448e8c7037756b3a47d2a0ed55d5039b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:64:e0:7a:74:64:33:66:21:e8:6f:ba:2b:
b1:c6:d5:eb:9a:17:4c:84:84:1f:02:49:42:33:27:
86:76:e9:d4:0a:70:30:1f:f9:4c:92:e4:3e:7e:13:
f4:f6:6d:5d:30:f3:1e:d8:2f:48:c5:28:55:2c:23:
d5:2f:dd:e2:54:ca:2f:ac:25:db:28:ce:f5:2a:ac:
8e:5f:7d:d8:71:6b:b4:aa:ff:0c:ab:f1:94:ca:fe:
e1:c1:40:31:0e:bf:87:bc:c8:a7:55:5f:32:21:03:
3f:0e:e9:5e:08:b5:b2:f0:f8:a2:9d:a3:c8:7d:ce:
94:30:a2:24:79:3a:94:68:ea:0d:d3:9e:b1:67:0c:
96:2d:59:da:09:15:b3:69:a2:07:f3:b3:40:fd:98:
fa:33:44:f4:24:f2:20:c0:1a:6f:b8:c6:32:38:d2:
b9:e3:74:f3:f5:a4:74:82:d0:8f:23:62:d8:62:a0:
13:28:a4:bb:cd:02:2e:79:e9:5f:4d:ca:0a:07:25:
30:09:ee:ce:a2:28:32:00:35:8a:cf:05:84:cd:7e:
a8:75:e5:2a:d3:76:33:ef:cb:d4:d5:bc:8f:8d:19:
fb:45:8f:6b:53:22:3b:c5:bf:65:c6:a0:64:f2:c9:
d2:0b:53:13:e8:25:e8:7f:7e:9c:c4:a4:7b:ff:68:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D4:A5:44:8E:8C:70:37:75:6B:3A:47:D2:A0:ED:55:D5:03:9B:9D
X509v3 Authority Key Identifier:
keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1d:c7:f0:00:ce:f8:e7:b6:2c:7a:61:fd:15:81:0c:de:59:
9b:12:fe:f4:06:59:81:a1:1e:92:e9:d9:24:39:5d:ea:ce:ba:
a7:02:f8:3f:c8:80:81:b6:f9:6a:4f:1b:2b:f9:8a:63:ac:2a:
2d:69:ab:ed:c7:84:29:ae:96:45:72:e7:f0:10:77:a4:52:a8:
6d:92:eb:02:d0:bc:e4:ac:f4:36:3b:1e:cb:bb:18:2e:7a:f7:
2a:1f:7e:0a:34:98:2c:ce:e6:9f:df:45:bc:aa:1a:97:ca:e8:
d4:3d:5f:80:62:b8:33:22:bb:77:31:c7:e8:af:38:41:60:d4:
f3:ad:a1:80:01:e9:11:9e:55:eb:04:0e:51:43:b1:55:b2:2d:
d0:36:e7:3c:bd:b2:f6:9e:c0:f7:c9:1c:78:8f:1a:db:5b:4f:
da:86:d0:6c:c0:ee:1e:d3:b5:e9:18:60:c7:00:4f:a4:01:12:
4b:81:75:d9:d2:9d:48:ae:c1:b8:47:06:4b:c0:e4:0e:2d:df:
d9:83:d5:d2:e2:ef:99:f5:da:95:9b:d3:d1:74:da:b1:93:7d:
dd:77:9f:0f:65:6b:57:9f:c5:94:e7:59:db:af:b1:00:0d:97:
5b:5f:29:8f:29:fa:ea:d5:90:d2:ec:3d:8b:c8:52:96:ba:27:
bb:6f:88:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:20 2025 by rpki-client