Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
File: e2deJTtiz5WANl7XPaod1lnU1mI.mft (raw, json)
Hash identifier: S8dXOjuoi/xnaOPrIxj/hSsj1iBL58btAIhp5yuxq7U=
Subject key identifier: A2:4A:B4:FD:78:DE:D4:8A:42:69:14:E8:74:3A:16:8A:8B:57:C6:09
Authority key identifier: 7B:67:5E:25:3B:62:CF:95:80:36:5E:D7:3D:AA:1D:D6:59:D4:D6:62
Certificate issuer: /CN=7b675e253b62cf9580365ed73daa1dd659d4d662
Certificate serial: 019646324C4C6F6ABC73BF2642A8F29E7485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e2deJTtiz5WANl7XPaod1lnU1mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
Manifest number: 14F4
Signing time: Fri 18 Apr 2025 00:00:23 +0000
Manifest this update: Fri 18 Apr 2025 00:00:23 +0000
Manifest next update: Sat 19 Apr 2025 00:00:23 +0000
Files and hashes: 1: e2deJTtiz5WANl7XPaod1lnU1mI.crl (hash: aDl5I2cOSQJ7P41ZBK+a0HFR0ri5AZl7GlDANTewp8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e2deJTtiz5WANl7XPaod1lnU1mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:4c:4c:6f:6a:bc:73:bf:26:42:a8:f2:9e:74:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b675e253b62cf9580365ed73daa1dd659d4d662
Validity
Not Before: Apr 18 00:00:23 2025 GMT
Not After : Apr 19 00:00:23 2025 GMT
Subject: CN=a24ab4fd78ded48a426914e8743a168a8b57c609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:4e:6f:c4:41:b0:f3:4f:a0:92:ea:dc:8c:
16:79:18:2c:b0:54:12:b0:0d:82:ce:b0:2f:cf:29:
ce:cd:a4:5e:a5:3b:37:bb:ec:75:a6:64:81:9b:cc:
86:7d:96:87:aa:e6:dc:da:c5:b9:18:c7:57:94:bf:
76:83:7b:11:06:ea:09:89:1a:15:ab:9d:38:70:38:
88:5f:64:a0:d6:76:b2:4b:f8:30:a6:95:5d:ad:e2:
ab:e8:a7:f8:13:7b:e0:1c:80:1f:8f:2b:fb:e8:c4:
f0:ab:83:7c:d9:c0:18:39:ed:e1:9b:9a:27:92:06:
3c:c3:f5:37:27:b2:1e:8d:83:da:56:67:d9:a5:19:
d2:b4:c4:13:8b:33:2b:c2:6a:77:7d:b6:d3:b9:62:
65:df:d7:ed:10:2c:53:5e:d8:cf:49:12:13:de:aa:
57:ba:4b:e1:c1:9f:0a:01:02:4e:d7:e0:bf:fa:6b:
71:05:47:f6:be:e6:01:3a:b0:c1:62:08:3f:6c:5a:
be:c8:07:5f:64:7d:ef:40:ab:ea:50:ff:f7:7b:3d:
a5:0f:33:6e:64:09:c8:f2:6f:f0:24:de:c1:1c:60:
60:1a:00:ea:15:a4:61:52:a6:29:9c:12:5a:dd:f7:
bb:2f:be:d3:87:12:e4:c2:92:2e:bb:76:26:cf:40:
23:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4A:B4:FD:78:DE:D4:8A:42:69:14:E8:74:3A:16:8A:8B:57:C6:09
X509v3 Authority Key Identifier:
keyid:7B:67:5E:25:3B:62:CF:95:80:36:5E:D7:3D:AA:1D:D6:59:D4:D6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2deJTtiz5WANl7XPaod1lnU1mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3f:7f:29:46:01:bf:88:3a:51:52:b2:ed:20:ec:16:9b:53:
88:60:89:2b:3b:f0:48:2d:02:1b:d9:e8:5a:4c:98:83:fb:0e:
44:61:f9:6b:af:02:b0:4f:1f:0e:6c:27:2d:47:f6:d1:b6:d5:
e1:83:67:96:27:0e:82:88:72:54:6c:89:e6:cb:09:c2:84:22:
f5:ab:d2:f5:3a:24:fb:07:cc:c1:03:58:63:4c:cb:74:5c:5d:
8c:0e:2d:5d:f1:a7:fe:ed:6e:ae:8a:b8:1e:cd:ca:d8:70:75:
eb:e3:2d:34:4f:16:bc:5b:a1:f5:3e:9f:9b:c3:43:b6:cf:d0:
54:e2:13:f0:ad:9d:30:db:20:bb:c2:fb:c5:f2:5d:80:50:55:
d6:36:bc:b8:6c:a5:26:a9:88:1d:63:d7:eb:b4:04:6c:c2:02:
c4:64:78:15:e8:6b:4e:4c:b8:5b:c5:93:e4:3a:e5:48:b3:2e:
96:79:d6:ce:d3:d8:fc:67:a7:ec:bf:b8:ba:c3:0e:8f:7c:82:
e1:14:60:ba:8b:54:7a:8c:55:b5:7a:2a:da:95:70:71:69:31:
4c:0a:4b:c8:b4:d6:23:aa:b3:5f:43:e8:f1:8f:8a:3a:d3:25:
8f:29:26:7b:a7:15:79:1f:2c:db:65:31:8a:05:a2:2f:80:28:
f8:be:34:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:48:54 2025 by rpki-client