Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier: pEJzKF2fQi21pt4zCZAuajYMPZG599D9MLvw3CGKAZo=
Subject key identifier: E9:EA:FA:AF:14:55:56:BF:D2:47:BE:74:E5:CE:82:C9:3E:B8:BC:52
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial: 0196591421E7757254CECEE0F2EC3613FEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 16:00:13 +0000
Manifest this update: Mon 21 Apr 2025 16:00:13 +0000
Manifest next update: Tue 22 Apr 2025 16:00:13 +0000
Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: EUUqHxpelc2mf2yWfZym2k5tLDWZePmjihu1qlcjr5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:21:e7:75:72:54:ce:ce:e0:f2:ec:36:13:fe:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Validity
Not Before: Apr 21 16:00:13 2025 GMT
Not After : Apr 22 16:00:13 2025 GMT
Subject: CN=e9eafaaf145556bfd247be74e5ce82c93eb8bc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:85:76:e8:2d:aa:f2:75:95:a2:0d:e1:cb:43:
8a:40:31:9f:bf:18:2a:26:91:31:de:0f:86:04:9a:
45:22:9f:a7:b9:1e:80:b0:55:96:8d:31:68:dc:b8:
f5:d2:19:96:6e:3f:f2:d0:e5:86:7f:14:b0:91:b6:
06:74:37:c7:44:52:54:53:14:66:e1:a0:85:bc:89:
35:99:6c:f7:bf:65:cc:3e:73:d9:74:3a:19:4d:1e:
4b:94:9b:66:cb:24:da:96:d6:23:8d:ff:6e:59:34:
0a:92:3d:4a:9c:b5:de:00:85:38:cb:b6:51:d6:d7:
fe:61:40:7b:7a:8a:10:4a:28:4f:34:14:81:39:16:
1c:fa:7c:f9:dc:14:68:17:02:e9:88:58:02:ea:e9:
86:a4:93:e5:86:74:06:17:27:2c:74:c9:49:ed:b8:
f3:d3:95:be:4c:fa:c0:f2:8b:d6:8e:76:a4:56:62:
32:11:a2:8b:6b:4e:a0:ed:19:6e:61:9f:fa:17:25:
c1:8d:80:51:7b:46:3d:1d:e4:e0:16:0d:dc:22:e8:
e7:53:14:4a:79:e4:45:a1:5c:61:18:b4:e5:bc:52:
11:bb:b6:04:41:fc:ad:3a:09:84:f4:c5:b4:29:de:
04:22:78:4d:67:20:e5:f0:fb:12:e5:29:22:b6:76:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EA:FA:AF:14:55:56:BF:D2:47:BE:74:E5:CE:82:C9:3E:B8:BC:52
X509v3 Authority Key Identifier:
keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d1:11:85:8c:9e:1d:32:bb:91:14:e6:18:4c:32:5b:5d:a2:
59:54:5e:04:d1:71:1d:95:73:bf:5d:9e:2c:f6:7b:0f:e4:5f:
84:9e:fa:da:6b:9c:22:cc:49:9c:5f:2c:00:0b:ab:8f:0c:16:
6e:d4:d7:3d:54:69:4d:8c:33:09:61:3c:09:96:fd:ff:6e:8b:
cd:e4:d8:cf:9a:e6:14:e9:77:36:76:3f:d7:d2:d9:62:97:b0:
fe:13:4e:82:d6:26:fe:d1:03:89:49:c5:35:2f:0b:f1:f9:46:
7f:32:f3:95:c0:35:ff:33:67:af:14:23:59:53:a0:63:99:01:
88:72:bd:7c:4f:e6:56:23:32:d3:8d:aa:78:7a:58:3e:04:28:
e1:a6:d5:64:e9:8a:23:4e:44:2f:0f:95:8d:27:6b:58:b3:08:
ac:8c:79:bd:07:28:40:99:a5:b9:3b:93:88:41:eb:f5:94:0a:
5d:8a:eb:41:0e:a6:f9:a8:c4:4f:20:24:db:c8:b1:63:bd:e2:
dc:20:b5:45:5b:87:8e:5c:06:75:60:50:85:18:81:45:d6:e3:
55:76:4d:3e:ce:08:32:ed:01:06:7c:b3:e8:a3:98:08:d6:4f:
ad:e1:8c:9a:43:8e:5b:1c:31:d8:4f:94:cc:46:ed:0b:43:b7:
30:6b:5e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:22:48 2025 by rpki-client