Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.mft
File: 57oqYl6OZaspsIlfWd3_5Qp8vHU.mft (raw, json)
Hash identifier: 6ar//+7XeHSqExJ++l61aNPmffBXGIbH58KcGk84wUc=
Subject key identifier: 86:D0:5C:C7:CF:01:35:FF:0C:71:49:6E:E4:27:78:6A:74:04:89:F2
Authority key identifier: E7:BA:2A:62:5E:8E:65:AB:29:B0:89:5F:59:DD:FF:E5:0A:7C:BC:75
Certificate issuer: /CN=e7ba2a625e8e65ab29b0895f59ddffe50a7cbc75
Certificate serial: 01958B165C8F78EC1BFBF5880065CD1A05D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57oqYl6OZaspsIlfWd3_5Qp8vHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.mft
Manifest number: 1490
Signing time: Wed 12 Mar 2025 16:00:53 +0000
Manifest this update: Wed 12 Mar 2025 16:00:53 +0000
Manifest next update: Thu 13 Mar 2025 16:00:53 +0000
Files and hashes: 1: 57oqYl6OZaspsIlfWd3_5Qp8vHU.crl (hash: nOQgM1IkzXdbjFvHJbLoCTMcdBKuaJxRJw2WYf6lgqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/57oqYl6OZaspsIlfWd3_5Qp8vHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:5c:8f:78:ec:1b:fb:f5:88:00:65:cd:1a:05:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ba2a625e8e65ab29b0895f59ddffe50a7cbc75
Validity
Not Before: Mar 12 16:00:53 2025 GMT
Not After : Mar 13 16:00:53 2025 GMT
Subject: CN=86d05cc7cf0135ff0c71496ee427786a740489f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:92:1c:54:9f:ab:90:26:12:9a:2f:d5:c6:fe:
92:26:10:ca:ac:2c:78:66:09:de:c5:19:b6:37:4f:
f6:c3:30:42:54:e2:54:e3:05:b0:01:00:87:93:8a:
93:18:0c:63:e8:01:8b:89:2a:e1:21:b4:bf:88:f4:
de:14:2c:d7:ad:74:f5:b1:39:7a:2d:42:8f:3c:62:
4b:ca:0a:5f:c2:c7:5a:39:f4:4a:a8:23:97:f1:33:
ac:22:d1:bf:fd:81:78:09:6d:1b:49:1d:ea:b1:4d:
cc:d6:5d:bf:10:67:4c:8d:8c:b2:07:0a:fe:9a:52:
30:8e:5f:33:2c:23:ac:80:37:fa:67:b7:cb:34:9f:
74:62:b1:c3:4a:ba:d2:8b:19:c0:a3:88:90:42:c7:
02:e5:2c:80:62:80:31:48:20:0e:fe:2e:e1:67:24:
09:50:7c:2c:17:cb:22:f3:92:3e:d0:7d:ed:9b:ed:
f7:21:d1:af:be:50:8c:2c:75:b3:99:7f:fd:66:81:
9b:e5:6f:56:fd:c1:84:e6:96:f8:8d:4b:68:1f:31:
cb:b3:ec:ad:0f:6f:56:ce:eb:cc:e2:e5:ca:8f:46:
0c:c0:58:e2:bc:a3:65:94:9b:48:53:d1:2a:de:30:
be:72:36:df:c9:9f:63:57:f0:cd:e2:61:9e:1a:ee:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:5C:C7:CF:01:35:FF:0C:71:49:6E:E4:27:78:6A:74:04:89:F2
X509v3 Authority Key Identifier:
keyid:E7:BA:2A:62:5E:8E:65:AB:29:B0:89:5F:59:DD:FF:E5:0A:7C:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57oqYl6OZaspsIlfWd3_5Qp8vHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1b:14:1c:2a:a3:31:40:9b:34:51:53:d5:29:87:9e:fe:06:
38:5f:05:07:b8:d8:3f:45:fe:20:37:a1:21:bc:9e:ed:bf:26:
a0:0b:c6:dd:1e:69:d6:9d:cb:8a:26:e4:66:d7:a2:9e:5f:e2:
9a:22:9b:c5:d3:38:3c:a2:57:cd:b0:60:1e:1b:40:b1:62:a8:
af:fc:54:9b:71:ee:f7:90:b7:df:89:b7:42:a8:0a:ff:58:ac:
97:0b:8d:40:90:b9:01:23:22:92:09:b1:b0:9a:c0:1b:97:22:
92:5b:c5:fa:d1:5a:c0:81:79:16:85:58:ba:57:32:09:93:3c:
db:0a:40:5d:5f:2c:4d:d8:95:eb:dc:31:30:49:75:3a:93:c1:
0e:46:4e:21:70:fa:68:8a:c2:16:d9:08:c0:c1:fd:11:c9:7f:
3b:24:18:55:e0:89:bc:31:94:74:4f:33:6b:19:f6:80:6e:d1:
cc:3c:8f:9d:ca:e8:bb:6c:08:c7:81:09:5f:53:09:11:a3:c8:
90:d4:cb:e3:7c:82:4f:56:e5:d1:28:ef:35:2d:08:66:ea:b6:
cc:55:57:1c:32:6f:98:9c:d1:7f:ff:3d:7c:12:a3:bf:3d:dd:
45:58:5a:55:99:fb:82:31:2f:b1:bb:fc:12:b5:3e:32:13:ee:
ef:a2:06:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:07 2025 by rpki-client